https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-23998.htmlhttps://patchthecve.com/cve/CVE-2025-23998.htmlWed, 17 Jun 2026 08:57:51 +0000HIGH 7.1: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in raratheme UltraLight the-ultralight allows Reflected XSS.This issue affects UltraLight: from n/a through <= 1.2.https://patchthecve.com/cve/CVE-2024-37937.htmlhttps://patchthecve.com/cve/CVE-2024-37937.htmlWed, 17 Jun 2026 07:39:03 +0000MEDIUM 4.3: Cross-Site Request Forgery (CSRF) vulnerability in raratheme Rara Business rara-business allows Cross Site Request Forgery.This issue affects Rara Business: from n/a through <= 1.2.5.https://patchthecve.com/cve/CVE-2024-37508.htmlhttps://patchthecve.com/cve/CVE-2024-37508.htmlWed, 17 Jun 2026 07:38:29 +0000MEDIUM 4.3: Cross-Site Request Forgery (CSRF) vulnerability in raratheme Construction Landing Page construction-landing-page allows Cross Site Request Forgery.This issue affects Construction Landing Page: from n/a through <= 1.3.5.https://patchthecve.com/cve/CVE-2024-37503.htmlhttps://patchthecve.com/cve/CVE-2024-37503.htmlWed, 17 Jun 2026 07:38:29 +0000MEDIUM 4.3: Cross-Site Request Forgery (CSRF) vulnerability in raratheme Lawyer Landing Page lawyer-landing-page allows Cross Site Request Forgery.This issue affects Lawyer Landing Page: from n/a through <= 1.2.4.https://patchthecve.com/cve/CVE-2024-37451.htmlhttps://patchthecve.com/cve/CVE-2024-37451.htmlWed, 17 Jun 2026 07:38:23 +0000MEDIUM 4.3: Cross-Site Request Forgery (CSRF) vulnerability in raratheme Travel Agency travel-agency allows Cross Site Request Forgery.This issue affects Travel Agency: from n/a through <= 1.4.9.https://patchthecve.com/cve/CVE-2024-37450.htmlhttps://patchthecve.com/cve/CVE-2024-37450.htmlWed, 17 Jun 2026 07:38:23 +0000MEDIUM 4.3: Cross-Site Request Forgery (CSRF) vulnerability in raratheme Benevolent benevolent allows Cross Site Request Forgery.This issue affects Benevolent: from n/a through <= 1.3.4.https://patchthecve.com/cve/CVE-2024-37435.htmlhttps://patchthecve.com/cve/CVE-2024-37435.htmlWed, 17 Jun 2026 07:38:21 +0000MEDIUM 4.3: Cross-Site Request Forgery (CSRF) vulnerability in raratheme Perfect Portfolio perfect-portfolio allows Cross Site Request Forgery.This issue affects Perfect Portfolio: from n/a through <= 1.2.0.https://patchthecve.com/cve/CVE-2024-37426.htmlhttps://patchthecve.com/cve/CVE-2024-37426.htmlWed, 17 Jun 2026 07:38:20 +0000MEDIUM 4.3: Cross-Site Request Forgery (CSRF) vulnerability in raratheme Elegant Pink elegant-pink allows Cross Site Request Forgery.This issue affects Elegant Pink: from n/a through <= 1.3.0.https://patchthecve.com/cve/CVE-2024-37421.htmlhttps://patchthecve.com/cve/CVE-2024-37421.htmlWed, 17 Jun 2026 07:38:20 +0000MEDIUM 4.3: Cross-Site Request Forgery (CSRF) vulnerability in raratheme JobScout jobscout allows Cross Site Request Forgery.This issue affects JobScout: from n/a through <= 1.1.4.https://patchthecve.com/cve/CVE-2024-37413.htmlhttps://patchthecve.com/cve/CVE-2024-37413.htmlWed, 17 Jun 2026 07:38:19 +0000MEDIUM 4.3: Cross-Site Request Forgery (CSRF) vulnerability in raratheme Preschool and Kindergarten preschool-and-kindergarten allows Cross Site Request Forgery.This issue affects Preschool and Kindergarten: from n/a through <= 1.2.1.https://patchthecve.com/cve/CVE-2024-37104.htmlhttps://patchthecve.com/cve/CVE-2024-37104.htmlWed, 17 Jun 2026 07:37:45 +0000MEDIUM 4.3: Cross-Site Request Forgery (CSRF) vulnerability in raratheme Chic Lite chic-lite allows Cross Site Request Forgery.This issue affects Chic Lite: from n/a through <= 1.1.3.https://patchthecve.com/cve/CVE-2024-37103.htmlhttps://patchthecve.com/cve/CVE-2024-37103.htmlWed, 17 Jun 2026 07:37:45 +0000MEDIUM 4.3: Cross-Site Request Forgery (CSRF) vulnerability in raratheme Education Zone education-zone allows Cross Site Request Forgery.This issue affects Education Zone: from n/a through <= 1.3.4.https://patchthecve.com/cve/CVE-2024-37505.htmlhttps://patchthecve.com/cve/CVE-2024-37505.htmlWed, 17 Jun 2026 07:38:29 +0000MEDIUM 4.3: Missing Authorization vulnerability in Rara Themes Business One Page allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Business One Page: from n/a through 1.2.9.https://patchthecve.com/cve/CVE-2024-37230.htmlhttps://patchthecve.com/cve/CVE-2024-37230.htmlWed, 17 Jun 2026 07:37:58 +0000MEDIUM 4.3: Cross-Site Request Forgery (CSRF) vulnerability in Rara Theme Book Landing Page.This issue affects Book Landing Page: from n/a through 1.2.3.https://patchthecve.com/cve/CVE-2024-34379.htmlhttps://patchthecve.com/cve/CVE-2024-34379.htmlWed, 17 Jun 2026 07:33:16 +0000MEDIUM 4.3: Cross-Site Request Forgery (CSRF) vulnerability in Rara Theme Restaurant and Cafe.This issue affects Restaurant and Cafe: from n/a through 1.2.1.https://patchthecve.com/cve/CVE-2024-31384.htmlhttps://patchthecve.com/cve/CVE-2024-31384.htmlWed, 17 Jun 2026 07:28:19 +0000MEDIUM 4.3: Cross-Site Request Forgery (CSRF) vulnerability in Rara Theme Spa and Salon.This issue affects Spa and Salon: from n/a through 1.2.7.https://patchthecve.com/cve/CVE-2024-31428.htmlhttps://patchthecve.com/cve/CVE-2024-31428.htmlWed, 17 Jun 2026 07:28:25 +0000MEDIUM 4.3: Cross-Site Request Forgery (CSRF) vulnerability in Rara Theme The Conference.This issue affects The Conference: from n/a through 1.2.0.