Priority MEDIUM 41
Rara One Click Demo Import plugin for WordPress before 1.3.5 contains an arbitrary file upload vulnerability that allows authenticated attackers with Administrator privileges to upload arbitrary PHP files by passing a fa…
CVSS 4.0HIGH 8.6· Network · High privileges · No interaction · EPSS 0.0082 · Published 2026-09-09 · Fixed in 1.3.5 CWE-434
Priority MEDIUM 41
Cross-Site Request Forgery (CSRF) leading to Arbitrary File Upload vulnerability in Rara One Click Demo Import plugin <= 1.2.9 on WordPress allows attackers to trick logged-in admin users into uploading dangerous files i…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00585 · Published 2022-04-29 · No fix listed CWE-352
Priority LOW 37
Cross-Site Request Forgery (CSRF) vulnerability in raratheme Rara Business rara-business allows Cross Site Request Forgery.This issue affects Rara Business: from n/a through <= 1.2.5.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00227 · Published 2025-01-02 · No fix listed CWE-352
Priority LOW 37
Cross-Site Request Forgery (CSRF) vulnerability in raratheme Construction Landing Page construction-landing-page allows Cross Site Request Forgery.This issue affects Construction Landing Page: from n/a through <= 1.3.5.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00198 · Published 2025-01-02 · No fix listed CWE-352
Priority LOW 37
Cross-Site Request Forgery (CSRF) vulnerability in raratheme Lawyer Landing Page lawyer-landing-page allows Cross Site Request Forgery.This issue affects Lawyer Landing Page: from n/a through <= 1.2.4.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00227 · Published 2025-01-02 · No fix listed CWE-352
Priority LOW 37
Cross-Site Request Forgery (CSRF) vulnerability in raratheme Travel Agency travel-agency allows Cross Site Request Forgery.This issue affects Travel Agency: from n/a through <= 1.4.9.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00214 · Published 2025-01-02 · No fix listed CWE-352
Priority LOW 37
Cross-Site Request Forgery (CSRF) vulnerability in raratheme Benevolent benevolent allows Cross Site Request Forgery.This issue affects Benevolent: from n/a through <= 1.3.4.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00214 · Published 2025-01-02 · No fix listed CWE-352
Priority LOW 37
Cross-Site Request Forgery (CSRF) vulnerability in raratheme Perfect Portfolio perfect-portfolio allows Cross Site Request Forgery.This issue affects Perfect Portfolio: from n/a through <= 1.2.0.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00214 · Published 2025-01-02 · No fix listed CWE-352
Priority LOW 37
Cross-Site Request Forgery (CSRF) vulnerability in Rara Theme Book Landing Page.This issue affects Book Landing Page: from n/a through 1.2.3.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00208 · Published 2024-06-21 · No fix listed CWE-352
Priority LOW 34
Missing Authorization vulnerability in Rara Themes Metro Magazine allows Exploiting Incorrectly Configured Access Control Security Levels.
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00196 · Published 2026-06-16 · No fix listed CWE-862
Priority LOW 34
Missing Authorization vulnerability in raratheme Education Zone education-zone allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Education Zone: from n/a through <= 1.3.8.
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00251 · Published 2026-03-25 · No fix listed CWE-862
Priority LOW 31
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in raratheme UltraLight the-ultralight allows Reflected XSS.This issue affects UltraLight: from n/a through <= 1.2.
CVSS 3.1HIGH 7.1· Network · No auth · User interaction · EPSS 0.00267 · Published 2025-01-21 · No fix listed CWE-79
Priority LOW 31
Reflected Cross-Site Scripting (XSS) vulnerability in VryaSage Marketing Performance plugin <= 2.0.0 versions.
CVSS 3.1HIGH 7.1· Network · No auth · User interaction · EPSS 0.00408 · Published 2023-04-23 · No fix listed CWE-79
Priority LOW 30
Missing Authorization vulnerability in raratheme App Landing Page app-landing-page allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects App Landing Page: from n/a through <= 1.2.2.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00237 · Published 2026-03-13 · No fix listed CWE-862
Priority LOW 30
Missing Authorization vulnerability in raratheme Numinous numinous allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Numinous: from n/a through <= 1.3.0.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00237 · Published 2026-03-13 · No fix listed CWE-862
Priority LOW 30
Missing Authorization vulnerability in raratheme Book Landing Page book-landing-page allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Book Landing Page: from n/a through <= 1.2.7…
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00237 · Published 2026-03-13 · No fix listed CWE-862
Priority LOW 30
Missing Authorization vulnerability in raratheme Pranayama Yoga pranayama-yoga allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Pranayama Yoga: from n/a through <= 1.2.2.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00237 · Published 2026-03-13 · No fix listed CWE-862
Priority LOW 30
Missing Authorization vulnerability in raratheme Travel Diaries travel-diaries allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Travel Diaries: from n/a through <= 1.2.4.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00237 · Published 2026-03-13 · No fix listed CWE-862
Priority LOW 30
Missing Authorization vulnerability in raratheme The Minimal the-minimal allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects The Minimal: from n/a through <= 1.2.9.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00237 · Published 2026-03-13 · No fix listed CWE-862
Priority LOW 30
Missing Authorization vulnerability in raratheme Elegant Pink elegant-pink allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Elegant Pink: from n/a through <= 1.3.3.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00237 · Published 2026-03-13 · No fix listed CWE-862
Priority LOW 30
Missing Authorization vulnerability in raratheme Influencer influencer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Influencer: from n/a through <= 1.1.7.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00237 · Published 2026-03-13 · No fix listed CWE-862
Priority LOW 30
Missing Authorization vulnerability in raratheme Business One Page business-one-page allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Business One Page: from n/a through <= 1.3.2…
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00237 · Published 2026-03-13 · No fix listed CWE-862
Priority LOW 30
Missing Authorization vulnerability in raratheme Bakes And Cakes bakes-and-cakes allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bakes And Cakes: from n/a through <= 1.2.9.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00237 · Published 2026-03-13 · No fix listed CWE-862
Priority LOW 30
Missing Authorization vulnerability in raratheme Construction Landing Page construction-landing-page allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Construction Landing Page: f…
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00237 · Published 2026-03-13 · No fix listed CWE-862
Priority LOW 30
Missing Authorization vulnerability in raratheme The Conference the-conference allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects The Conference: from n/a through <= 1.2.5.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00237 · Published 2026-03-13 · No fix listed CWE-862
Load more