raratheme vulnerabilities and threats

38 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	5.3	EPSS 0.2%	CVE-2026-32338Construction Landing Page (WordPress plugin) · Missing Authorization Medium5.3EPSS 0.2%2026-03-13CVE Database V5CVE-2026-32338 Missing Authorization vulnerability in raratheme Construction Landing Page construction-landing-page allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Construction Landing Page: from n/a through <= 1.4.1. EPSS 0.2%Vulnerability raratheme	CVE Database V5	2026-03-13
Medium	5.3	EPSS 0.2%	CVE-2026-32337Preschool and Kindergarten (WordPress plugin) · Missing Authorization Medium5.3EPSS 0.2%2026-03-13CVE Database V5CVE-2026-32337 Missing Authorization vulnerability in raratheme Preschool and Kindergarten preschool-and-kindergarten allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Preschool and Kindergarten: from n/a through <= 1.2.5. EPSS 0.2%Vulnerability raratheme	CVE Database V5	2026-03-13
Medium	5.3	EPSS 0.2%	CVE-2026-32336Rara Business (WordPress plugin) · Missing Authorization Medium5.3EPSS 0.2%2026-03-13CVE Database V5CVE-2026-32336 Missing Authorization vulnerability in raratheme Rara Business rara-business allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Rara Business: from n/a through <= 1.3.0. EPSS 0.2%Vulnerability raratheme	CVE Database V5	2026-03-13
Medium	5.3	EPSS 0.2%	CVE-2026-32335The Conference (WordPress plugin) · Missing Authorization Medium5.3EPSS 0.2%2026-03-13CVE Database V5CVE-2026-32335 Missing Authorization vulnerability in raratheme The Conference the-conference allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects The Conference: from n/a through <= 1.2.5. EPSS 0.2%Vulnerability raratheme	CVE Database V5	2026-03-13
Medium	5.3	EPSS 0.2%	CVE-2026-32334JobScout (WordPress plugin) · Missing Authorization Medium5.3EPSS 0.2%2026-03-13CVE Database V5CVE-2026-32334 Missing Authorization vulnerability in raratheme JobScout jobscout allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JobScout: from n/a through <= 1.1.7. EPSS 0.2%Vulnerability raratheme	CVE Database V5	2026-03-13
Medium	5.3	EPSS 0.3%	CVE-2026-25374Spa and Salon (WordPress plugin) · Missing Authorization Medium5.3EPSS 0.3%2026-02-19CVE Database V5CVE-2026-25374 Missing Authorization vulnerability in raratheme Spa and Salon spa-and-salon allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Spa and Salon: from n/a through <= 1.3.2. EPSS 0.3%Vulnerability raratheme	CVE Database V5	2026-02-19
High	7.1	EPSS 0.3%	CVE-2025-23998UltraLight (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.3%2025-01-21CVE Database V5CVE-2025-23998 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in raratheme UltraLight the-ultralight allows Reflected XSS.This issue affects UltraLight: from n/a through <= 1.2. EPSS 0.3%Vulnerability raratheme	CVE Database V5	2025-01-21
Medium	4.3	EPSS 0.2%	CVE-2024-37937Rara Business (WordPress plugin) · Cross-Site Request Forgery (CSRF) Medium4.3EPSS 0.2%2025-01-02CVE Database V5CVE-2024-37937 Cross-Site Request Forgery (CSRF) vulnerability in raratheme Rara Business rara-business allows Cross Site Request Forgery.This issue affects Rara Business: from n/a through <= 1.2.5. EPSS 0.2%Vulnerability raratheme	CVE Database V5	2025-01-02
Medium	4.3	EPSS 0.2%	CVE-2024-37508Construction Landing Page (WordPress plugin) · Cross-Site Request Forgery (CSRF) Medium4.3EPSS 0.2%2025-01-02CVE Database V5CVE-2024-37508 Cross-Site Request Forgery (CSRF) vulnerability in raratheme Construction Landing Page construction-landing-page allows Cross Site Request Forgery.This issue affects Construction Landing Page: from n/a through <= 1.3.5. EPSS 0.2%Vulnerability raratheme	CVE Database V5	2025-01-02
Medium	4.3	EPSS 0.2%	CVE-2024-37503Lawyer Landing Page (WordPress plugin) · Cross-Site Request Forgery (CSRF) Medium4.3EPSS 0.2%2025-01-02CVE Database V5CVE-2024-37503 Cross-Site Request Forgery (CSRF) vulnerability in raratheme Lawyer Landing Page lawyer-landing-page allows Cross Site Request Forgery.This issue affects Lawyer Landing Page: from n/a through <= 1.2.4. EPSS 0.2%Vulnerability raratheme	CVE Database V5	2025-01-02
Medium	4.3	EPSS 0.2%	CVE-2024-37451Travel Agency (WordPress plugin) · Cross-Site Request Forgery (CSRF) Medium4.3EPSS 0.2%2025-01-02CVE Database V5CVE-2024-37451 Cross-Site Request Forgery (CSRF) vulnerability in raratheme Travel Agency travel-agency allows Cross Site Request Forgery.This issue affects Travel Agency: from n/a through <= 1.4.9. EPSS 0.2%Vulnerability raratheme	CVE Database V5	2025-01-02
Medium	4.3	EPSS 0.2%	CVE-2024-37450Benevolent (WordPress plugin) · Cross-Site Request Forgery (CSRF) Medium4.3EPSS 0.2%2025-01-02CVE Database V5CVE-2024-37450 Cross-Site Request Forgery (CSRF) vulnerability in raratheme Benevolent benevolent allows Cross Site Request Forgery.This issue affects Benevolent: from n/a through <= 1.3.4. EPSS 0.2%Vulnerability raratheme	CVE Database V5	2025-01-02
Medium	4.3	EPSS 0.2%	CVE-2024-37435Perfect Portfolio (WordPress plugin) · Cross-Site Request Forgery (CSRF) Medium4.3EPSS 0.2%2025-01-02CVE Database V5CVE-2024-37435 Cross-Site Request Forgery (CSRF) vulnerability in raratheme Perfect Portfolio perfect-portfolio allows Cross Site Request Forgery.This issue affects Perfect Portfolio: from n/a through <= 1.2.0. EPSS 0.2%Vulnerability raratheme	CVE Database V5	2025-01-02
Medium	4.3	EPSS 0.2%	CVE-2024-37426Elegant Pink (WordPress plugin) · Cross-Site Request Forgery (CSRF) Medium4.3EPSS 0.2%2025-01-02CVE Database V5CVE-2024-37426 Cross-Site Request Forgery (CSRF) vulnerability in raratheme Elegant Pink elegant-pink allows Cross Site Request Forgery.This issue affects Elegant Pink: from n/a through <= 1.3.0. EPSS 0.2%Vulnerability raratheme	CVE Database V5	2025-01-02
Medium	4.3	EPSS 0.2%	CVE-2024-37421JobScout (WordPress plugin) · Cross-Site Request Forgery (CSRF) Medium4.3EPSS 0.2%2025-01-02CVE Database V5CVE-2024-37421 Cross-Site Request Forgery (CSRF) vulnerability in raratheme JobScout jobscout allows Cross Site Request Forgery.This issue affects JobScout: from n/a through <= 1.1.4. EPSS 0.2%Vulnerability raratheme	CVE Database V5	2025-01-02
Medium	4.3	EPSS 0.2%	CVE-2024-37413Preschool and Kindergarten (WordPress plugin) · Cross-Site Request Forgery (CSRF) Medium4.3EPSS 0.2%2025-01-02CVE Database V5CVE-2024-37413 Cross-Site Request Forgery (CSRF) vulnerability in raratheme Preschool and Kindergarten preschool-and-kindergarten allows Cross Site Request Forgery.This issue affects Preschool and Kindergarten: from n/a through <= 1.2.1. EPSS 0.2%Vulnerability raratheme	CVE Database V5	2025-01-02
Medium	4.3	EPSS 0.2%	CVE-2024-37104Chic Lite (WordPress plugin) · Cross-Site Request Forgery (CSRF) Medium4.3EPSS 0.2%2025-01-02CVE Database V5CVE-2024-37104 Cross-Site Request Forgery (CSRF) vulnerability in raratheme Chic Lite chic-lite allows Cross Site Request Forgery.This issue affects Chic Lite: from n/a through <= 1.1.3. EPSS 0.2%Vulnerability raratheme	CVE Database V5	2025-01-02
Medium	4.3	EPSS 0.2%	CVE-2024-37103Education Zone (WordPress plugin) · Cross-Site Request Forgery (CSRF) Medium4.3EPSS 0.2%2025-01-02CVE Database V5CVE-2024-37103 Cross-Site Request Forgery (CSRF) vulnerability in raratheme Education Zone education-zone allows Cross Site Request Forgery.This issue affects Education Zone: from n/a through <= 1.3.4. EPSS 0.2%Vulnerability raratheme	CVE Database V5	2025-01-02

Page 2 of 2