Raratheme vulnerabilities
We track 7 vulnerabilities in Raratheme products across 7 products. 7 are rated high or critical, and none are known to be exploited. The most recent was published on January 2, 2025.
Latest Raratheme vulnerabilities
- 8.8 High severity
Rara Business: Cross-Site Request Forgery
Cross-Site Request Forgery (CSRF) vulnerability in raratheme Rara Business rara-business allows Cross Site Request Forgery.This issue affects Rara Business: from n/a through <= 1.2.5.
- 8.8 High severity
Construction Landing Page: Cross-Site Request Forgery
Cross-Site Request Forgery (CSRF) vulnerability in raratheme Construction Landing Page construction-landing-page allows Cross Site Request Forgery.This issue affects Construction Landing Page: from n/a through <= 1.3.5.
- 8.8 High severity
Lawyer Landing Page: Cross-Site Request Forgery
Cross-Site Request Forgery (CSRF) vulnerability in raratheme Lawyer Landing Page lawyer-landing-page allows Cross Site Request Forgery.This issue affects Lawyer Landing Page: from n/a through <= 1.2.4.
- 8.8 High severity
Travel Agency: Cross-Site Request Forgery
Cross-Site Request Forgery (CSRF) vulnerability in raratheme Travel Agency travel-agency allows Cross Site Request Forgery.This issue affects Travel Agency: from n/a through <= 1.4.9.
- 8.8 High severity
Benevolent: Cross-Site Request Forgery
Cross-Site Request Forgery (CSRF) vulnerability in raratheme Benevolent benevolent allows Cross Site Request Forgery.This issue affects Benevolent: from n/a through <= 1.3.4.
- 8.8 High severity
Perfect Portfolio: Cross-Site Request Forgery
Cross-Site Request Forgery (CSRF) vulnerability in raratheme Perfect Portfolio perfect-portfolio allows Cross Site Request Forgery.This issue affects Perfect Portfolio: from n/a through <= 1.2.0.
- 8.8 High severity
Rara One Click Demo Import (WordPress plugin): Cross-Site Request Forgery
Cross-Site Request Forgery (CSRF) leading to Arbitrary File Upload vulnerability in Rara One Click Demo Import plugin <= 1.2.9 on WordPress allows attackers to trick logged-in admin users into uploading dangerous files into /wp-content/uploads/ directory.