PatchTheCVErarathemes vulnerabilities
Recent CVEs affecting rarathemes products. 17 tracked.
rarathemes has 17 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 17. Most recent: 2025-01-21. Highest priority: CVE-2025-23998 (score 30/100).
- CVE-2025-23998 HIGH 7.1 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in rarathem
- CVE-2024-37937 MEDIUM 4.3 UPGRADE Cross-Site Request Forgery (CSRF) vulnerability in raratheme Rara Business rara-business allows Cross Site Req
- CVE-2024-37508 MEDIUM 4.3 UPGRADE Cross-Site Request Forgery (CSRF) vulnerability in raratheme Construction Landing Page construction-landing-pa
- CVE-2024-37505 MEDIUM 4.3 UPGRADE Missing Authorization vulnerability in Rara Themes Business One Page allows Exploiting Incorrectly Configured
- CVE-2024-37503 MEDIUM 4.3 UPGRADE Cross-Site Request Forgery (CSRF) vulnerability in raratheme Lawyer Landing Page lawyer-landing-page allows Cr
- CVE-2024-37451 MEDIUM 4.3 UPGRADE Cross-Site Request Forgery (CSRF) vulnerability in raratheme Travel Agency travel-agency allows Cross Site Req
- CVE-2024-37450 MEDIUM 4.3 UPGRADE Cross-Site Request Forgery (CSRF) vulnerability in raratheme Benevolent benevolent allows Cross Site Request F
- CVE-2024-37435 MEDIUM 4.3 UPGRADE Cross-Site Request Forgery (CSRF) vulnerability in raratheme Perfect Portfolio perfect-portfolio allows Cross
- CVE-2024-37426 MEDIUM 4.3 UPGRADE Cross-Site Request Forgery (CSRF) vulnerability in raratheme Elegant Pink elegant-pink allows Cross Site Reque
- CVE-2024-37421 MEDIUM 4.3 UPGRADE Cross-Site Request Forgery (CSRF) vulnerability in raratheme JobScout jobscout allows Cross Site Request Forge
- CVE-2024-37413 MEDIUM 4.3 UPGRADE Cross-Site Request Forgery (CSRF) vulnerability in raratheme Preschool and Kindergarten preschool-and-kinderga
- CVE-2024-37230 MEDIUM 4.3 UPGRADE Cross-Site Request Forgery (CSRF) vulnerability in Rara Theme Book Landing Page.This issue affects Book Landin
- CVE-2024-37104 MEDIUM 4.3 UPGRADE Cross-Site Request Forgery (CSRF) vulnerability in raratheme Chic Lite chic-lite allows Cross Site Request For
- CVE-2024-37103 MEDIUM 4.3 UPGRADE Cross-Site Request Forgery (CSRF) vulnerability in raratheme Education Zone education-zone allows Cross Site R
- CVE-2024-34379 MEDIUM 4.3 UPGRADE Cross-Site Request Forgery (CSRF) vulnerability in Rara Theme Restaurant and Cafe.This issue affects Restauran
- CVE-2024-31428 MEDIUM 4.3 UPGRADE Cross-Site Request Forgery (CSRF) vulnerability in Rara Theme The Conference.This issue affects The Conference
- CVE-2024-31384 MEDIUM 4.3 UPGRADE Cross-Site Request Forgery (CSRF) vulnerability in Rara Theme Spa and Salon.This issue affects Spa and Salon:
FAQ
How do I fix rarathemes vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is rarathemes being exploited right now?
None of the tracked rarathemes CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which rarathemes CVE should I patch first?
CVE-2025-23998 currently ranks highest (30/100): Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in rarathem.