Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how rara compares to other vendors in security performance

View Risk Score →

Rara UltraLightWordPress UltraLight theme <= 1.2 - Reflected Cross Site Scripting (XSS) vulnerability

Risk 27
Severity
7.1
EPSS
0.04%
XSS
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in raratheme UltraLight the-ultralight allows Reflected XSS.This issue affects UltraLight: from n/a through <= 1.2.

First published (updated )
CVE-2025-23998

Rara Restaurant and CafeWordPress Restaurant and Cafe theme <= 1.2.1 - Cross Site Request Forgery (CSRF) vulnerability

Risk 16
Severity
4.3
EPSS
0.04%
CSRF
AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Cross-Site Request Forgery (CSRF) vulnerability in Rara Theme Restaurant and Cafe.This issue affects Restaurant and Cafe: from n/a through 1.2.1.

Remedy

Update to 1.2.2 or a higher version.
First published (updated )
CVE-2024-34379

Rara The ConferenceWordPress The Conference theme <= 1.2.0 - Cross Site Request Forgery (CSRF) vulnerability

Risk 16
Severity
4.3
EPSS
0.04%
CSRF
AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Cross-Site Request Forgery (CSRF) vulnerability in Rara Theme The Conference.This issue affects The Conference: from n/a through 1.2.0.

Remedy

Update to 1.2.1 or a higher version.
First published (updated )
CVE-2024-31428

Rara Theme Spa and SalonWordPress Spa and Salon theme <= 1.2.7 - Cross Site Request Forgery (CSRF) vulnerability

Risk 16
Severity
4.3
EPSS
0.04%
CSRF
AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Cross-Site Request Forgery (CSRF) vulnerability in Rara Theme Spa and Salon.This issue affects Spa and Salon: from n/a through 1.2.7.

Remedy

Update to 1.2.8 or a higher version.
First published (updated )
CVE-2024-31384

Rara BusinessWordPress Rara Business theme <= 1.2.5 - Cross Site Request Forgery (CSRF) vulnerability

Risk 77
Severity
8.8
CSRF
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Cross-Site Request Forgery (CSRF) vulnerability in raratheme Rara Business rara-business allows Cross Site Request Forgery.This issue affects Rara Business: from n/a through <= 1.2.5.

Remedy

Update the WordPress Rara Business theme to the latest available version (at least 1.2.6).
First published (updated )
CVE-2024-37937

Rara Lawyer Landing PageWordPress Lawyer Landing Page theme <= 1.2.4 - Cross Site Request Forgery (CSRF) vulnerability

Risk 77
Severity
8.8
CSRF
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Cross-Site Request Forgery (CSRF) vulnerability in raratheme Lawyer Landing Page lawyer-landing-page allows Cross Site Request Forgery.This issue affects Lawyer Landing Page: from n/a through <= 1.2.4.

Remedy

Update the WordPress Lawyer Landing Page theme to the latest available version (at least 1.2.5).
First published (updated )
CVE-2024-37503

Rara Construction Landing PageWordPress Construction Landing Page theme <= 1.3.5 - Cross Site Request Forgery (CSRF) vulnerability

Risk 77
Severity
8.8
CSRF
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Cross-Site Request Forgery (CSRF) vulnerability in raratheme Construction Landing Page construction-landing-page allows Cross Site Request Forgery.This issue affects Construction Landing Page: from n/a through <= 1.3.5.

Remedy

Update the WordPress Construction Landing Page theme to the latest available version (at least 1.3.6).
First published (updated )
CVE-2024-37508

Rara Elegant PinkWordPress Elegant Pink theme 1.3.0 - Cross Site Request Forgery (CSRF) vulnerability

Risk 20
Severity
4.3
CSRF
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Cross-Site Request Forgery (CSRF) vulnerability in raratheme Elegant Pink elegant-pink allows Cross Site Request Forgery.This issue affects Elegant Pink: from n/a through <= 1.3.0.

Remedy

Update the WordPress Elegant Pink theme to the latest available version (at least 1.3.1).
First published (updated )
CVE-2024-37426

Rara Theme Preschool and KindergartenWordPress Preschool and Kindergarten theme <= 1.2.1 - Cross Site Request Forgery (CSRF) vulnerability

Risk 20
Severity
4.3
CSRF
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Cross-Site Request Forgery (CSRF) vulnerability in raratheme Preschool and Kindergarten preschool-and-kindergarten allows Cross Site Request Forgery.This issue affects Preschool and Kindergarten: from n/a through <= 1.2.1.

Remedy

Update the WordPress Preschool and Kindergarten theme to the latest available version (at least 1.2.2).
First published (updated )
CVE-2024-37413

Rara Chic LiteWordPress Chic Lite theme <= 1.1.3 - Cross Site Request Forgery (CSRF) vulnerability

Risk 20
Severity
4.3
CSRF
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Cross-Site Request Forgery (CSRF) vulnerability in raratheme Chic Lite chic-lite allows Cross Site Request Forgery.This issue affects Chic Lite: from n/a through <= 1.1.3.

Remedy

Update the WordPress Chic Lite theme to the latest available version (at least 1.1.4).
First published (updated )
CVE-2024-37104

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203