Browse CVEs

MEDIUM 6.1 CVE-2025-23998 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in raratheme UltraLight the-ultralight allows Refl… The Ultralight after 1.2 Fix from $1,6002025-01-21 HIGH 8.8 CVE-2024-37937 Cross-Site Request Forgery (CSRF) vulnerability in raratheme Rara Business rara-business allows Cross Site Request Forgery.This issue affects Rara Bu… Rara Business 1.2.6+ Fix from $1,9502025-01-02 HIGH 8.8 CVE-2024-37503 Cross-Site Request Forgery (CSRF) vulnerability in raratheme Lawyer Landing Page lawyer-landing-page allows Cross Site Request Forgery.This issue aff… Lawyer Landing Page 1.2.5+ Fix from $1,9502025-01-02 HIGH 8.8 CVE-2024-37508 Cross-Site Request Forgery (CSRF) vulnerability in raratheme Construction Landing Page construction-landing-page allows Cross Site Request Forgery.Th… Construction Landing Page 1.3.6+ Fix from $1,9502025-01-02 HIGH 8.8 CVE-2024-37450 Cross-Site Request Forgery (CSRF) vulnerability in raratheme Benevolent benevolent allows Cross Site Request Forgery.This issue affects Benevolent: f… Benevolent 1.3.5+ Fix from $1,9502025-01-02 HIGH 8.8 CVE-2024-37451 Cross-Site Request Forgery (CSRF) vulnerability in raratheme Travel Agency travel-agency allows Cross Site Request Forgery.This issue affects Travel … Travel Agency 1.5.0+ Fix from $1,9502025-01-02 HIGH 8.8 CVE-2024-37435 Cross-Site Request Forgery (CSRF) vulnerability in raratheme Perfect Portfolio perfect-portfolio allows Cross Site Request Forgery.This issue affects… Perfect Portfolio 1.2.1+ Fix from $1,9502025-01-02 MEDIUM 5.4 CVE-2024-37505 Missing Authorization vulnerability in Rara Themes Business One Page allows Exploiting Incorrectly Configured Access Control Security Levels.This iss… Business One Page 1.3.0+ Fix from $1,6002024-11-01 HIGH 8.8 CVE-2024-37230 Cross-Site Request Forgery (CSRF) vulnerability in Rara Theme Book Landing Page.This issue affects Book Landing Page: from n/a through 1.2.3. Book Landing Page 1.2.4+ Fix from $1,9502024-06-21 MEDIUM 6.1 CVE-2023-24404 Reflected Cross-Site Scripting (XSS) vulnerability in VryaSage Marketing Performance plugin <= 2.0.0 versions. Vryasage Marketing Performance after 2.0.0 Fix from $1,6002023-04-23 HIGH 8.8 CVE-2022-29451 Cross-Site Request Forgery (CSRF) leading to Arbitrary File Upload vulnerability in Rara One Click Demo Import plugin <= 1.2.9 on WordPress allows at… Rara One Click Demo Import 1.3.0+ Fix from $1,9502022-04-29