Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

48 records

Vendor: raratheme Clear all filters
TI-2026-21203 CVE-2026-26212 · GHSA-cr98-vvwf-97rx

Rara One Click Demo Import < 1.3.5 Arbitrary File Upload RCE

Priority MEDIUM 41

Rara One Click Demo Import plugin for WordPress before 1.3.5 contains an arbitrary file upload vulnerability that allows authenticated attackers with Administrator privileges to upload arbitrary PHP files by passing a fa…

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.0082 Published 2026-09-09 Fixed in 1.3.5 CWE-434
TI-2026-20194 CVE-2026-25009 · GHSA-g97c-9v5c-336j

WordPress Education Zone theme <= 1.3.8 - Broken Access Control vulnerability

Priority LOW 34

Missing Authorization vulnerability in raratheme Education Zone education-zone allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Education Zone: from n/a through <= 1.3.8.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00251 Published 2026-03-25 No fix listed CWE-862
TI-2026-25015 CVE-2026-32487 · GHSA-vj9g-gh94-w9mc

WordPress Lawyer Landing Page theme <= 1.2.7 - Broken Access Control vulnerability

Priority LOW 29

Missing Authorization vulnerability in raratheme Lawyer Landing Page lawyer-landing-page allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Lawyer Landing Page: from n/a through <=…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00204 Published 2026-03-13 No fix listed CWE-862
TI-2026-24911 CVE-2026-32383 · GHSA-rrj8-527g-2w3m

WordPress Ridhi theme <= 1.1.2 - Broken Access Control vulnerability

Priority LOW 30

Missing Authorization vulnerability in raratheme Ridhi ridhi allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ridhi: from n/a through <= 1.1.2.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00249 Published 2026-03-13 No fix listed CWE-862
TI-2026-24910 CVE-2026-32382 · GHSA-wrqm-wwq5-qcrm

WordPress Digital Download theme <= 1.1.4 - Broken Access Control vulnerability

Priority LOW 30

Missing Authorization vulnerability in raratheme Digital Download digital-download allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Digital Download: from n/a through <= 1.1.4.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00249 Published 2026-03-13 No fix listed CWE-862
TI-2026-24909 CVE-2026-32381 · GHSA-95c7-hrr2-x2wc

WordPress App Landing Page theme <= 1.2.2 - Broken Access Control vulnerability

Priority LOW 30

Missing Authorization vulnerability in raratheme App Landing Page app-landing-page allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects App Landing Page: from n/a through <= 1.2.2.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0026 Published 2026-03-13 No fix listed CWE-862
TI-2026-24908 CVE-2026-32380 · GHSA-mh8x-5f3h-6m5x

WordPress Numinous theme <= 1.3.0 - Broken Access Control vulnerability

Priority LOW 30

Missing Authorization vulnerability in raratheme Numinous numinous allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Numinous: from n/a through <= 1.3.0.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0026 Published 2026-03-13 No fix listed CWE-862
TI-2026-24907 CVE-2026-32379 · GHSA-6vfq-34cw-634x

WordPress Rara Academic theme <= 1.2.2 - Broken Access Control vulnerability

Priority LOW 30

Missing Authorization vulnerability in raratheme Rara Academic rara-academic allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Rara Academic: from n/a through <= 1.2.2.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00249 Published 2026-03-13 No fix listed CWE-862
TI-2026-24906 CVE-2026-32378 · GHSA-rq7h-c9f9-r775

WordPress Book Landing Page theme <= 1.2.7 - Broken Access Control vulnerability

Priority LOW 30

Missing Authorization vulnerability in raratheme Book Landing Page book-landing-page allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Book Landing Page: from n/a through <= 1.2.7…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0026 Published 2026-03-13 No fix listed CWE-862
TI-2026-24905 CVE-2026-32377 · GHSA-56hx-88qj-8268

WordPress Pranayama Yoga theme <= 1.2.2 - Broken Access Control vulnerability

Priority LOW 30

Missing Authorization vulnerability in raratheme Pranayama Yoga pranayama-yoga allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Pranayama Yoga: from n/a through <= 1.2.2.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0026 Published 2026-03-13 No fix listed CWE-862
TI-2026-24904 CVE-2026-32376 · GHSA-4mvh-jg3r-rmj5

WordPress Kalon theme <= 1.2.9 - Broken Access Control vulnerability

Priority LOW 30

Missing Authorization vulnerability in raratheme Kalon kalon allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Kalon: from n/a through <= 1.2.9.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00249 Published 2026-03-13 No fix listed CWE-862
TI-2026-24903 CVE-2026-32375 · GHSA-cmrw-vccp-w5q5

WordPress Travel Diaries theme <= 1.2.4 - Broken Access Control vulnerability

Priority LOW 30

Missing Authorization vulnerability in raratheme Travel Diaries travel-diaries allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Travel Diaries: from n/a through <= 1.2.4.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0026 Published 2026-03-13 No fix listed CWE-862
TI-2026-24902 CVE-2026-32374 · GHSA-wgwq-p9vf-fm4g

WordPress The Minimal theme <= 1.2.9 - Broken Access Control vulnerability

Priority LOW 30

Missing Authorization vulnerability in raratheme The Minimal the-minimal allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects The Minimal: from n/a through <= 1.2.9.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0026 Published 2026-03-13 No fix listed CWE-862
TI-2026-24899 CVE-2026-32371 · GHSA-97m7-23wx-7893

WordPress Elegant Pink theme <= 1.3.3 - Broken Access Control vulnerability

Priority LOW 30

Missing Authorization vulnerability in raratheme Elegant Pink elegant-pink allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Elegant Pink: from n/a through <= 1.3.3.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0026 Published 2026-03-13 No fix listed CWE-862
TI-2026-24898 CVE-2026-32370 · GHSA-247f-frvc-wqqm

WordPress Influencer theme <= 1.1.7 - Broken Access Control vulnerability

Priority LOW 30

Missing Authorization vulnerability in raratheme Influencer influencer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Influencer: from n/a through <= 1.1.7.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0026 Published 2026-03-13 No fix listed CWE-862
TI-2026-24875 CVE-2026-32347 · GHSA-7pqc-8gch-qr97

WordPress Restaurant and Cafe theme <= 1.2.5 - Broken Access Control vulnerability

Priority LOW 30

Missing Authorization vulnerability in raratheme Restaurant and Cafe restaurant-and-cafe allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Restaurant and Cafe: from n/a through <=…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00249 Published 2026-03-13 No fix listed CWE-862
TI-2026-24874 CVE-2026-32346 · GHSA-59mw-82vh-f4q5

WordPress Travel Agency theme <= 1.5.5 - Broken Access Control vulnerability

Priority LOW 30

Missing Authorization vulnerability in raratheme Travel Agency travel-agency allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Travel Agency: from n/a through <= 1.5.5.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00249 Published 2026-03-13 No fix listed CWE-862
TI-2026-24873 CVE-2026-32345 · GHSA-whj7-77jg-rg2q

WordPress Perfect Portfolio theme <= 1.2.4 - Broken Access Control vulnerability

Priority LOW 30

Missing Authorization vulnerability in raratheme Perfect Portfolio perfect-portfolio allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Perfect Portfolio: from n/a through <= 1.2.4…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00249 Published 2026-03-13 No fix listed CWE-862
TI-2026-24869 CVE-2026-32341 · GHSA-wfp3-438j-9p4x

WordPress Benevolent theme <= 1.3.9 - Broken Access Control vulnerability

Priority LOW 30

Missing Authorization vulnerability in raratheme Benevolent benevolent allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Benevolent: from n/a through <= 1.3.9.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00249 Published 2026-03-13 No fix listed CWE-862
TI-2026-24868 CVE-2026-32340 · GHSA-2622-7mvw-7jrg

WordPress Business One Page theme <= 1.3.2 - Broken Access Control vulnerability

Priority LOW 30

Missing Authorization vulnerability in raratheme Business One Page business-one-page allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Business One Page: from n/a through <= 1.3.2…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0026 Published 2026-03-13 No fix listed CWE-862
TI-2026-24867 CVE-2026-32339 · GHSA-4x4m-8c2x-4hq3

WordPress Bakes And Cakes theme <= 1.2.9 - Broken Access Control vulnerability

Priority LOW 30

Missing Authorization vulnerability in raratheme Bakes And Cakes bakes-and-cakes allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bakes And Cakes: from n/a through <= 1.2.9.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0026 Published 2026-03-13 No fix listed CWE-862
Load more