Read the docs

raratheme

Records48All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high11CVSS 7.0–8.9

Exploited now

raratheme records in CISA KEV

No raratheme vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

48 records

Priority MEDIUM 41

Rara One Click Demo Import plugin for WordPress before 1.3.5 contains an arbitrary file upload vulnerability that allows authenticated attackers with Administrator privileges to upload arbitrary PHP files by passing a fa…

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.0082 Published 2026-09-09 Fixed in 1.3.5 CWE-434
Priority MEDIUM 41

Cross-Site Request Forgery (CSRF) leading to Arbitrary File Upload vulnerability in Rara One Click Demo Import plugin <= 1.2.9 on WordPress allows attackers to trick logged-in admin users into uploading dangerous files i…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00585 Published 2022-04-29 No fix listed CWE-352
Priority LOW 37

Cross-Site Request Forgery (CSRF) vulnerability in raratheme Construction Landing Page construction-landing-page allows Cross Site Request Forgery.This issue affects Construction Landing Page: from n/a through <= 1.3.5.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00198 Published 2025-01-02 No fix listed CWE-352
Priority LOW 34

Missing Authorization vulnerability in raratheme Education Zone education-zone allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Education Zone: from n/a through <= 1.3.8.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00251 Published 2026-03-25 No fix listed CWE-862
Priority LOW 30

Missing Authorization vulnerability in raratheme App Landing Page app-landing-page allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects App Landing Page: from n/a through <= 1.2.2.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00237 Published 2026-03-13 No fix listed CWE-862
Priority LOW 30

Missing Authorization vulnerability in raratheme Numinous numinous allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Numinous: from n/a through <= 1.3.0.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00237 Published 2026-03-13 No fix listed CWE-862
Priority LOW 30

Missing Authorization vulnerability in raratheme Book Landing Page book-landing-page allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Book Landing Page: from n/a through <= 1.2.7…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00237 Published 2026-03-13 No fix listed CWE-862
Priority LOW 30

Missing Authorization vulnerability in raratheme Pranayama Yoga pranayama-yoga allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Pranayama Yoga: from n/a through <= 1.2.2.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00237 Published 2026-03-13 No fix listed CWE-862
Priority LOW 30

Missing Authorization vulnerability in raratheme Travel Diaries travel-diaries allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Travel Diaries: from n/a through <= 1.2.4.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00237 Published 2026-03-13 No fix listed CWE-862
Priority LOW 30

Missing Authorization vulnerability in raratheme The Minimal the-minimal allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects The Minimal: from n/a through <= 1.2.9.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00237 Published 2026-03-13 No fix listed CWE-862
Priority LOW 30

Missing Authorization vulnerability in raratheme Elegant Pink elegant-pink allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Elegant Pink: from n/a through <= 1.3.3.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00237 Published 2026-03-13 No fix listed CWE-862
Priority LOW 30

Missing Authorization vulnerability in raratheme Influencer influencer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Influencer: from n/a through <= 1.1.7.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00237 Published 2026-03-13 No fix listed CWE-862
Priority LOW 30

Missing Authorization vulnerability in raratheme Business One Page business-one-page allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Business One Page: from n/a through <= 1.3.2…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00237 Published 2026-03-13 No fix listed CWE-862
Priority LOW 30

Missing Authorization vulnerability in raratheme Bakes And Cakes bakes-and-cakes allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bakes And Cakes: from n/a through <= 1.2.9.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00237 Published 2026-03-13 No fix listed CWE-862
Priority LOW 30

Missing Authorization vulnerability in raratheme The Conference the-conference allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects The Conference: from n/a through <= 1.2.5.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00237 Published 2026-03-13 No fix listed CWE-862
Load more
Open these records in search →