Skip to content
OpenAdvisories

Vendor

Rara Theme

43 known vulnerabilities.

Products

Restaurant and Cafe 2 Rara Business 2 Travel Agency 2 Education Zone 2 Spa and Salon 2 Preschool and Kindergarten 2 Elegant Pink 2 Perfect Portfolio 2 Construction Landing Page 2 Book Landing Page 2 JobScout 2 Benevolent 2 The Conference 2 Lawyer Landing Page 2 Chic Lite 1 Pranayama Yoga 1 UltraLight 1 Digital Download 1 Numinous 1 Ridhi 1 App Landing Page 1 Bakes And Cakes 1 Kalon 1 Influencer 1 Rara One Click Demo Import (WordPress plugin) 1 Rara Academic 1 The Minimal 1 Travel Diaries 1 Business One Page 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.1
    CVE-2025-23998

    WordPress UltraLight theme <= 1.2 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in raratheme UltraLight the-ultralight allows Reflected XSS.This issue affects UltraLight: from n/a through <= 1.2.

    Rara Theme UltraLight
  • High 8.8
    CVE-2022-29451

    WordPress Rara One Click Demo Import plugin <= 1.2.9 - Cross-Site Request Forgery (CSRF) leads to Arbitrary File Upload vulnerability

    Cross-Site Request Forgery (CSRF) leading to Arbitrary File Upload vulnerability in Rara One Click Demo Import plugin <= 1.2.9 on WordPress allows attackers to trick logged-in admin users into uploading dangerous files into /wp-content/uploads/ directory.

    Rara Theme Rara One Click Demo Import (WordPress plugin) Web / CMS