Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how rarathemes compares to other vendors in security performance

View Risk Score →

Rara UltraLightWordPress UltraLight theme <= 1.2 - Reflected Cross Site Scripting (XSS) vulnerability

Risk 27
Severity
7.1
EPSS
0.04%
XSS
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in raratheme UltraLight the-ultralight allows Reflected XSS.This issue affects UltraLight: from n/a through <= 1.2.

First published (updated )
CVE-2025-23998

Rara BusinessWordPress Rara Business theme <= 1.2.5 - Cross Site Request Forgery (CSRF) vulnerability

Risk 77
Severity
8.8
CSRF
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Cross-Site Request Forgery (CSRF) vulnerability in raratheme Rara Business rara-business allows Cross Site Request Forgery.This issue affects Rara Business: from n/a through <= 1.2.5.

Remedy

Update the WordPress Rara Business theme to the latest available version (at least 1.2.6).
First published (updated )
CVE-2024-37937

Rara Construction Landing PageWordPress Construction Landing Page theme <= 1.3.5 - Cross Site Request Forgery (CSRF) vulnerability

Risk 77
Severity
8.8
CSRF
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Cross-Site Request Forgery (CSRF) vulnerability in raratheme Construction Landing Page construction-landing-page allows Cross Site Request Forgery.This issue affects Construction Landing Page: from n/a through <= 1.3.5.

Remedy

Update the WordPress Construction Landing Page theme to the latest available version (at least 1.3.6).
First published (updated )
CVE-2024-37508

Rara Lawyer Landing PageWordPress Lawyer Landing Page theme <= 1.2.4 - Cross Site Request Forgery (CSRF) vulnerability

Risk 77
Severity
8.8
CSRF
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Cross-Site Request Forgery (CSRF) vulnerability in raratheme Lawyer Landing Page lawyer-landing-page allows Cross Site Request Forgery.This issue affects Lawyer Landing Page: from n/a through <= 1.2.4.

Remedy

Update the WordPress Lawyer Landing Page theme to the latest available version (at least 1.2.5).
First published (updated )
CVE-2024-37503

Rara Theme Travel AgencyWordPress Travel Agency theme <= 1.4.9 - Cross Site Request Forgery (CSRF) vulnerability

Risk 77
Severity
8.8
CSRF
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Cross-Site Request Forgery (CSRF) vulnerability in raratheme Travel Agency travel-agency allows Cross Site Request Forgery.This issue affects Travel Agency: from n/a through <= 1.4.9.

Remedy

Update the WordPress Travel Agency theme to the latest available version (at least 1.5.0).
First published (updated )
CVE-2024-37451

Rara Theme BenevolentWordPress Benevolent theme <= 1.3.4 - Cross Site Request Forgery (CSRF) vulnerability

Risk 77
Severity
8.8
CSRF
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Cross-Site Request Forgery (CSRF) vulnerability in raratheme Benevolent benevolent allows Cross Site Request Forgery.This issue affects Benevolent: from n/a through <= 1.3.4.

Remedy

Update the WordPress Benevolent theme to the latest available version (at least 1.3.5).
First published (updated )
CVE-2024-37450

Rara Theme Perfect PortfolioWordPress Perfect Portfolio theme <= 1.2.0 - Cross Site Request Forgery (CSRF) vulnerability

Risk 77
Severity
8.8
CSRF
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Cross-Site Request Forgery (CSRF) vulnerability in raratheme Perfect Portfolio perfect-portfolio allows Cross Site Request Forgery.This issue affects Perfect Portfolio: from n/a through <= 1.2.0.

Remedy

Update the WordPress Perfect Portfolio theme to the latest available version (at least 1.2.1).
First published (updated )
CVE-2024-37435

Rara Theme JobScoutWordPress JobScout theme <= 1.1.4 - Cross Site Request Forgery (CSRF) vulnerability

Risk 20
Severity
4.3
CSRF
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Cross-Site Request Forgery (CSRF) vulnerability in raratheme JobScout jobscout allows Cross Site Request Forgery.This issue affects JobScout: from n/a through <= 1.1.4.

Remedy

Update the WordPress JobScout theme to the latest available version (at least 1.1.5).
First published (updated )
CVE-2024-37421

Rara Elegant PinkWordPress Elegant Pink theme 1.3.0 - Cross Site Request Forgery (CSRF) vulnerability

Risk 20
Severity
4.3
CSRF
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Cross-Site Request Forgery (CSRF) vulnerability in raratheme Elegant Pink elegant-pink allows Cross Site Request Forgery.This issue affects Elegant Pink: from n/a through <= 1.3.0.

Remedy

Update the WordPress Elegant Pink theme to the latest available version (at least 1.3.1).
First published (updated )
CVE-2024-37426

Rara Theme Preschool and KindergartenWordPress Preschool and Kindergarten theme <= 1.2.1 - Cross Site Request Forgery (CSRF) vulnerability

Risk 20
Severity
4.3
CSRF
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Cross-Site Request Forgery (CSRF) vulnerability in raratheme Preschool and Kindergarten preschool-and-kindergarten allows Cross Site Request Forgery.This issue affects Preschool and Kindergarten: from n/a through <= 1.2.1.

Remedy

Update the WordPress Preschool and Kindergarten theme to the latest available version (at least 1.2.2).
First published (updated )
CVE-2024-37413

Rara Chic LiteWordPress Chic Lite theme <= 1.1.3 - Cross Site Request Forgery (CSRF) vulnerability

Risk 20
Severity
4.3
CSRF
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Cross-Site Request Forgery (CSRF) vulnerability in raratheme Chic Lite chic-lite allows Cross Site Request Forgery.This issue affects Chic Lite: from n/a through <= 1.1.3.

Remedy

Update the WordPress Chic Lite theme to the latest available version (at least 1.1.4).
First published (updated )
CVE-2024-37104

Rara Theme Education ZoneWordPress Education Zone theme <= 1.3.4 - Cross Site Request Forgery (CSRF) vulnerability

Risk 20
Severity
4.3
CSRF
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Cross-Site Request Forgery (CSRF) vulnerability in raratheme Education Zone education-zone allows Cross Site Request Forgery.This issue affects Education Zone: from n/a through <= 1.3.4.

Remedy

Update the WordPress Education Zone theme to the latest available version (at least 1.3.5).
First published (updated )
CVE-2024-37103

Rara Themes Business One PageWordPress Business One Page theme <= 1.2.9 - Broken Access Control on Notice Dismissal vulnerability

Risk 34
Severity
5.4
AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Missing Authorization vulnerability in Rara Themes Business One Page allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Business One Page: from n/a through 1.2.9.

Remedy

Update to 1.3.0 or a higher version.
First published (updated )
CVE-2024-37505

Rarathemes Book Landing Page WordpressWordPress Book Landing Page theme <= 1.2.3 - Cross Site Request Forgery (CSRF) vulnerability

Risk 77
Severity
8.8
CSRF
AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Cross-Site Request Forgery (CSRF) vulnerability in Rara Theme Book Landing Page.This issue affects Book Landing Page: from n/a through 1.2.3.

Remedy

Update to 1.2.4 or a higher version.
First published (updated )
CVE-2024-37230

Rara Restaurant and CafeWordPress Restaurant and Cafe theme <= 1.2.1 - Cross Site Request Forgery (CSRF) vulnerability

Risk 16
Severity
4.3
EPSS
0.04%
CSRF
AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Cross-Site Request Forgery (CSRF) vulnerability in Rara Theme Restaurant and Cafe.This issue affects Restaurant and Cafe: from n/a through 1.2.1.

Remedy

Update to 1.2.2 or a higher version.
First published (updated )
CVE-2024-34379

Rara Theme Spa and SalonWordPress Spa and Salon theme <= 1.2.7 - Cross Site Request Forgery (CSRF) vulnerability

Risk 16
Severity
4.3
EPSS
0.04%
CSRF
AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Cross-Site Request Forgery (CSRF) vulnerability in Rara Theme Spa and Salon.This issue affects Spa and Salon: from n/a through 1.2.7.

Remedy

Update to 1.2.8 or a higher version.
First published (updated )
CVE-2024-31384

Rara The ConferenceWordPress The Conference theme <= 1.2.0 - Cross Site Request Forgery (CSRF) vulnerability

Risk 16
Severity
4.3
EPSS
0.04%
CSRF
AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Cross-Site Request Forgery (CSRF) vulnerability in Rara Theme The Conference.This issue affects The Conference: from n/a through 1.2.0.

Remedy

Update to 1.2.1 or a higher version.
First published (updated )
CVE-2024-31428

Rarathemes Vryasage Marketing Performance WordpressWordPress Marketing Performance Plugin <= 2.0.0 is vulnerable to Cross Site Scripting (XSS)

Risk 50
Severity
7.1
XSS
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Reflected Cross-Site Scripting (XSS) vulnerability in VryaSage Marketing Performance plugin <= 2.0.0 versions.

First published (updated )
CVE-2023-24404

Rarathemes Rara One Click Demo Import WordpressWordPress Rara One Click Demo Import plugin <= 1.2.9 - Cross-Site Request Forgery (CSRF) leads to Arbitrary File Upload vulnerability

Risk 77
Severity
8.8
CSRF, Malicious File Upload
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Cross-Site Request Forgery (CSRF) leading to Arbitrary File Upload vulnerability in Rara One Click Demo Import plugin <= 1.2.9 on WordPress allows attackers to trick logged-in admin users into uploading dangerous files into /wp-content/uploads/ directory.

Remedy

Deactivate and delete. No response from the vendor.
First published (updated )
CVE-2022-29451

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203