Vulnerabilities / Responsive Plus
Responsive Plus vulnerabilities
Advisories WPSec published for Responsive Starter Templates – Elementor Templates & Starter Sites. Other sources may list more. Its attack surface: Responsive Plus on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-22 | WPSEC-2026-1436 | Responsive Plus <= 3.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Elementor HTML Widget Import | Medium 6.4 | 3.5.5 |
| 2026-10-22 | WPSEC-2026-1435 | Responsive Plus <= 3.5.4 - Authenticated (Contributor+) Insecure Direct Object Reference to Elementor Page Content Overwrite via Template Import | Medium 4.3 | 3.5.5 |
License: CC BY 4.0