Skip to content
OpenAdvisories

Vendor

Rara Theme

43 known vulnerabilities.

Rara Theme at a glance

Last 12 months
26
Critical · all time
0
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 13 25 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 1 vulnerability March 2026: 25 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202600
Aug 202600
Jul 202600
Jun 202600
May 202600
Apr 202600
Mar 2026250
Feb 202610
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 2025120
Dec 202400

Products

Restaurant and Cafe 2 Rara Business 2 Travel Agency 2 Education Zone 2 Spa and Salon 2 Preschool and Kindergarten 2 Elegant Pink 2 Perfect Portfolio 2 Construction Landing Page 2 Book Landing Page 2 JobScout 2 Benevolent 2 The Conference 2 Lawyer Landing Page 2 Chic Lite 1 Pranayama Yoga 1 UltraLight 1 Digital Download 1 Numinous 1 Ridhi 1 App Landing Page 1 Bakes And Cakes 1 Kalon 1 Influencer 1 Rara One Click Demo Import (WordPress plugin) 1 Rara Academic 1 The Minimal 1 Travel Diaries 1 Business One Page 1
All Critical High Medium Low Exploited only Public exploit

43 results · Feed

  • Medium 6.5
    CVE-2026-25009

    WordPress Education Zone theme <= 1.3.8 - Broken Access Control vulnerability

    Missing Authorization vulnerability in raratheme Education Zone education-zone allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Education Zone: from n/a through <= 1.3.8.

    Rara Theme Education Zone
  • Medium 5.3
    CVE-2026-32487

    WordPress Lawyer Landing Page theme <= 1.2.7 - Broken Access Control vulnerability

    Missing Authorization vulnerability in raratheme Lawyer Landing Page lawyer-landing-page allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Lawyer Landing Page: from n/a through <= 1.2.7.

    Rara Theme Lawyer Landing Page
  • Medium 5.3
    CVE-2026-32383

    WordPress Ridhi theme <= 1.1.2 - Broken Access Control vulnerability

    Missing Authorization vulnerability in raratheme Ridhi ridhi allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ridhi: from n/a through <= 1.1.2.

    Rara Theme Ridhi
  • Medium 5.3
    CVE-2026-32380

    WordPress Numinous theme <= 1.3.0 - Broken Access Control vulnerability

    Missing Authorization vulnerability in raratheme Numinous numinous allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Numinous: from n/a through <= 1.3.0.

    Rara Theme Numinous
  • Medium 5.3
    CVE-2026-32382

    WordPress Digital Download theme <= 1.1.4 - Broken Access Control vulnerability

    Missing Authorization vulnerability in raratheme Digital Download digital-download allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Digital Download: from n/a through <= 1.1.4.

    Rara Theme Digital Download
  • Medium 5.3
    CVE-2026-32378

    WordPress Book Landing Page theme <= 1.2.7 - Broken Access Control vulnerability

    Missing Authorization vulnerability in raratheme Book Landing Page book-landing-page allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Book Landing Page: from n/a through <= 1.2.7.

    Rara Theme Book Landing Page
  • Medium 5.3
    CVE-2026-32379

    WordPress Rara Academic theme <= 1.2.2 - Broken Access Control vulnerability

    Missing Authorization vulnerability in raratheme Rara Academic rara-academic allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Rara Academic: from n/a through <= 1.2.2.

    Rara Theme Rara Academic
  • Medium 5.3
    CVE-2026-32381

    WordPress App Landing Page theme <= 1.2.2 - Broken Access Control vulnerability

    Missing Authorization vulnerability in raratheme App Landing Page app-landing-page allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects App Landing Page: from n/a through <= 1.2.2.

    Rara Theme App Landing Page
  • Medium 5.3
    CVE-2026-32375

    WordPress Travel Diaries theme <= 1.2.4 - Broken Access Control vulnerability

    Missing Authorization vulnerability in raratheme Travel Diaries travel-diaries allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Travel Diaries: from n/a through <= 1.2.4.

    Rara Theme Travel Diaries
  • Medium 5.3
    CVE-2026-32376

    WordPress Kalon theme <= 1.2.9 - Broken Access Control vulnerability

    Missing Authorization vulnerability in raratheme Kalon kalon allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Kalon: from n/a through <= 1.2.9.

    Rara Theme Kalon
  • Medium 5.3
    CVE-2026-32377

    WordPress Pranayama Yoga theme <= 1.2.2 - Broken Access Control vulnerability

    Missing Authorization vulnerability in raratheme Pranayama Yoga pranayama-yoga allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Pranayama Yoga: from n/a through <= 1.2.2.

    Rara Theme Pranayama Yoga
  • Medium 5.3
    CVE-2026-32374

    WordPress The Minimal theme <= 1.2.9 - Broken Access Control vulnerability

    Missing Authorization vulnerability in raratheme The Minimal the-minimal allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects The Minimal: from n/a through <= 1.2.9.

    Rara Theme The Minimal
  • Medium 5.3
    CVE-2026-32370

    WordPress Influencer theme <= 1.1.7 - Broken Access Control vulnerability

    Missing Authorization vulnerability in raratheme Influencer influencer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Influencer: from n/a through <= 1.1.7.

    Rara Theme Influencer
  • Medium 5.3
    CVE-2026-32371

    WordPress Elegant Pink theme <= 1.3.3 - Broken Access Control vulnerability

    Missing Authorization vulnerability in raratheme Elegant Pink elegant-pink allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Elegant Pink: from n/a through <= 1.3.3.

    Rara Theme Elegant Pink
  • Medium 5.3
    CVE-2026-32346

    WordPress Travel Agency theme <= 1.5.5 - Broken Access Control vulnerability

    Missing Authorization vulnerability in raratheme Travel Agency travel-agency allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Travel Agency: from n/a through <= 1.5.5.

    Rara Theme Travel Agency
  • Medium 5.3
    CVE-2026-32347

    WordPress Restaurant and Cafe theme <= 1.2.5 - Broken Access Control vulnerability

    Missing Authorization vulnerability in raratheme Restaurant and Cafe restaurant-and-cafe allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Restaurant and Cafe: from n/a through <= 1.2.5.

    Rara Theme Restaurant and Cafe
  • Medium 5.3
    CVE-2026-32341

    WordPress Benevolent theme <= 1.3.9 - Broken Access Control vulnerability

    Missing Authorization vulnerability in raratheme Benevolent benevolent allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Benevolent: from n/a through <= 1.3.9.

    Rara Theme Benevolent
  • Medium 5.3
    CVE-2026-32345

    WordPress Perfect Portfolio theme <= 1.2.4 - Broken Access Control vulnerability

    Missing Authorization vulnerability in raratheme Perfect Portfolio perfect-portfolio allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Perfect Portfolio: from n/a through <= 1.2.4.

    Rara Theme Perfect Portfolio
  • Medium 5.3
    CVE-2026-32340

    WordPress Business One Page theme <= 1.3.2 - Broken Access Control vulnerability

    Missing Authorization vulnerability in raratheme Business One Page business-one-page allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Business One Page: from n/a through <= 1.3.2.

    Rara Theme Business One Page
  • Medium 5.3
    CVE-2026-32339

    WordPress Bakes And Cakes theme <= 1.2.9 - Broken Access Control vulnerability

    Missing Authorization vulnerability in raratheme Bakes And Cakes bakes-and-cakes allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bakes And Cakes: from n/a through <= 1.2.9.

    Rara Theme Bakes And Cakes
  • Medium 5.3
    CVE-2026-32335

    WordPress The Conference theme <= 1.2.5 - Broken Access Control vulnerability

    Missing Authorization vulnerability in raratheme The Conference the-conference allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects The Conference: from n/a through <= 1.2.5.

    Rara Theme The Conference
  • Medium 5.3
    CVE-2026-32338

    WordPress Construction Landing Page theme <= 1.4.1 - Broken Access Control vulnerability

    Missing Authorization vulnerability in raratheme Construction Landing Page construction-landing-page allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Construction Landing Page: from n/a through <= 1.4.1.

    Rara Theme Construction Landing Page
  • Medium 5.3
    CVE-2026-32336

    WordPress Rara Business theme <= 1.3.0 - Broken Access Control vulnerability

    Missing Authorization vulnerability in raratheme Rara Business rara-business allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Rara Business: from n/a through <= 1.3.0.

    Rara Theme Rara Business
  • Medium 5.3
    CVE-2026-32337

    WordPress Preschool and Kindergarten theme <= 1.2.5 - Broken Access Control vulnerability

    Missing Authorization vulnerability in raratheme Preschool and Kindergarten preschool-and-kindergarten allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Preschool and Kindergarten: from n/a through <= 1.2.5.

    Rara Theme Preschool and Kindergarten
  • Medium 5.3
    CVE-2026-32334

    WordPress JobScout theme <= 1.1.7 - Broken Access Control vulnerability

    Missing Authorization vulnerability in raratheme JobScout jobscout allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JobScout: from n/a through <= 1.1.7.

    Rara Theme JobScout
  • Medium 5.3
    CVE-2026-25374

    WordPress Spa and Salon theme <= 1.3.2 - Broken Access Control vulnerability

    Missing Authorization vulnerability in raratheme Spa and Salon spa-and-salon allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Spa and Salon: from n/a through <= 1.3.2.

    Rara Theme Spa and Salon
  • High 7.1
    CVE-2025-23998

    WordPress UltraLight theme <= 1.2 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in raratheme UltraLight the-ultralight allows Reflected XSS.This issue affects UltraLight: from n/a through <= 1.2.

    Rara Theme UltraLight
  • Medium 4.3
    CVE-2024-37937

    WordPress Rara Business theme <= 1.2.5 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in raratheme Rara Business rara-business allows Cross Site Request Forgery.This issue affects Rara Business: from n/a through <= 1.2.5.

    Rara Theme Rara Business
  • Medium 4.3
    CVE-2024-37508

    WordPress Construction Landing Page theme <= 1.3.5 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in raratheme Construction Landing Page construction-landing-page allows Cross Site Request Forgery.This issue affects Construction Landing Page: from n/a through <= 1.3.5.

    Rara Theme Construction Landing Page
  • Medium 4.3
    CVE-2024-37503

    WordPress Lawyer Landing Page theme <= 1.2.4 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in raratheme Lawyer Landing Page lawyer-landing-page allows Cross Site Request Forgery.This issue affects Lawyer Landing Page: from n/a through <= 1.2.4.

    Rara Theme Lawyer Landing Page
  • Medium 4.3
    CVE-2024-37451

    WordPress Travel Agency theme <= 1.4.9 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in raratheme Travel Agency travel-agency allows Cross Site Request Forgery.This issue affects Travel Agency: from n/a through <= 1.4.9.

    Rara Theme Travel Agency
  • Medium 4.3
    CVE-2024-37450

    WordPress Benevolent theme <= 1.3.4 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in raratheme Benevolent benevolent allows Cross Site Request Forgery.This issue affects Benevolent: from n/a through <= 1.3.4.

    Rara Theme Benevolent
  • Medium 4.3
    CVE-2024-37435

    WordPress Perfect Portfolio theme <= 1.2.0 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in raratheme Perfect Portfolio perfect-portfolio allows Cross Site Request Forgery.This issue affects Perfect Portfolio: from n/a through <= 1.2.0.

    Rara Theme Perfect Portfolio
  • Medium 4.3
    CVE-2024-37426

    WordPress Elegant Pink theme 1.3.0 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in raratheme Elegant Pink elegant-pink allows Cross Site Request Forgery.This issue affects Elegant Pink: from n/a through <= 1.3.0.

    Rara Theme Elegant Pink
  • Medium 4.3
    CVE-2024-37421

    WordPress JobScout theme <= 1.1.4 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in raratheme JobScout jobscout allows Cross Site Request Forgery.This issue affects JobScout: from n/a through <= 1.1.4.

    Rara Theme JobScout
  • Medium 4.3
    CVE-2024-37413

    WordPress Preschool and Kindergarten theme <= 1.2.1 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in raratheme Preschool and Kindergarten preschool-and-kindergarten allows Cross Site Request Forgery.This issue affects Preschool and Kindergarten: from n/a through <= 1.2.1.

    Rara Theme Preschool and Kindergarten
  • Medium 4.3
    CVE-2024-37104

    WordPress Chic Lite theme <= 1.1.3 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in raratheme Chic Lite chic-lite allows Cross Site Request Forgery.This issue affects Chic Lite: from n/a through <= 1.1.3.

    Rara Theme Chic Lite
  • Medium 4.3
    CVE-2024-37103

    WordPress Education Zone theme <= 1.3.4 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in raratheme Education Zone education-zone allows Cross Site Request Forgery.This issue affects Education Zone: from n/a through <= 1.3.4.

    Rara Theme Education Zone
  • Medium 4.3
    CVE-2024-37230

    WordPress Book Landing Page theme <= 1.2.3 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in Rara Theme Book Landing Page.This issue affects Book Landing Page: from n/a through 1.2.3.

    Rara Theme Book Landing Page
  • Medium 4.3
    CVE-2024-34379

    WordPress Restaurant and Cafe theme <= 1.2.1 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in Rara Theme Restaurant and Cafe.This issue affects Restaurant and Cafe: from n/a through 1.2.1.

    Rara Theme Restaurant and Cafe