# cve.now: Raratheme

The newest entries naming Raratheme as an affected vendor (up to 200), of 39 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-25009](https://cve.now/CVE-2026-25009.md): WordPress Education Zone theme \<= 1.3.8 - Broken Access Control vulnerability (CVSS 6.5)
- [CVE-2026-32487](https://cve.now/CVE-2026-32487.md): WordPress Lawyer Landing Page theme \<= 1.2.7 - Broken Access Control vulnerability (CVSS 5.3)
- [CVE-2026-32383](https://cve.now/CVE-2026-32383.md): WordPress Ridhi theme \<= 1.1.2 - Broken Access Control vulnerability (CVSS 5.3)
- [CVE-2026-32382](https://cve.now/CVE-2026-32382.md): WordPress Digital Download theme \<= 1.1.4 - Broken Access Control vulnerability (CVSS 5.3)
- [CVE-2026-32381](https://cve.now/CVE-2026-32381.md): WordPress App Landing Page theme \<= 1.2.2 - Broken Access Control vulnerability (CVSS 5.3)
- [CVE-2026-32380](https://cve.now/CVE-2026-32380.md): WordPress Numinous theme \<= 1.3.0 - Broken Access Control vulnerability (CVSS 5.3)
- [CVE-2026-32379](https://cve.now/CVE-2026-32379.md): WordPress Rara Academic theme \<= 1.2.2 - Broken Access Control vulnerability (CVSS 5.3)
- [CVE-2026-32378](https://cve.now/CVE-2026-32378.md): WordPress Book Landing Page theme \<= 1.2.7 - Broken Access Control vulnerability (CVSS 5.3)
- [CVE-2026-32377](https://cve.now/CVE-2026-32377.md): WordPress Pranayama Yoga theme \<= 1.2.2 - Broken Access Control vulnerability (CVSS 5.3)
- [CVE-2026-32376](https://cve.now/CVE-2026-32376.md): WordPress Kalon theme \<= 1.2.9 - Broken Access Control vulnerability (CVSS 5.3)
- [CVE-2026-32375](https://cve.now/CVE-2026-32375.md): WordPress Travel Diaries theme \<= 1.2.4 - Broken Access Control vulnerability (CVSS 5.3)
- [CVE-2026-32374](https://cve.now/CVE-2026-32374.md): WordPress The Minimal theme \<= 1.2.9 - Broken Access Control vulnerability (CVSS 5.3)
- [CVE-2026-32371](https://cve.now/CVE-2026-32371.md): WordPress Elegant Pink theme \<= 1.3.3 - Broken Access Control vulnerability (CVSS 5.3)
- [CVE-2026-32370](https://cve.now/CVE-2026-32370.md): WordPress Influencer theme \<= 1.1.7 - Broken Access Control vulnerability (CVSS 5.3)
- [CVE-2026-32347](https://cve.now/CVE-2026-32347.md): WordPress Restaurant and Cafe theme \<= 1.2.5 - Broken Access Control vulnerability (CVSS 5.3)
- [CVE-2026-32346](https://cve.now/CVE-2026-32346.md): WordPress Travel Agency theme \<= 1.5.5 - Broken Access Control vulnerability (CVSS 5.3)
- [CVE-2026-32345](https://cve.now/CVE-2026-32345.md): WordPress Perfect Portfolio theme \<= 1.2.4 - Broken Access Control vulnerability (CVSS 5.3)
- [CVE-2026-32341](https://cve.now/CVE-2026-32341.md): WordPress Benevolent theme \<= 1.3.9 - Broken Access Control vulnerability (CVSS 5.3)
- [CVE-2026-32340](https://cve.now/CVE-2026-32340.md): WordPress Business One Page theme \<= 1.3.2 - Broken Access Control vulnerability (CVSS 5.3)
- [CVE-2026-32339](https://cve.now/CVE-2026-32339.md): WordPress Bakes And Cakes theme \<= 1.2.9 - Broken Access Control vulnerability (CVSS 5.3)
- [CVE-2026-32338](https://cve.now/CVE-2026-32338.md): WordPress Construction Landing Page theme \<= 1.4.1 - Broken Access Control vulnerability (CVSS 5.3)
- [CVE-2026-32337](https://cve.now/CVE-2026-32337.md): WordPress Preschool and Kindergarten theme \<= 1.2.5 - Broken Access Control vulnerability (CVSS 5.3)
- [CVE-2026-32336](https://cve.now/CVE-2026-32336.md): WordPress Rara Business theme \<= 1.3.0 - Broken Access Control vulnerability (CVSS 5.3)
- [CVE-2026-32335](https://cve.now/CVE-2026-32335.md): WordPress The Conference theme \<= 1.2.5 - Broken Access Control vulnerability (CVSS 5.3)
- [CVE-2026-32334](https://cve.now/CVE-2026-32334.md): WordPress JobScout theme \<= 1.1.7 - Broken Access Control vulnerability (CVSS 5.3)
- [CVE-2026-25374](https://cve.now/CVE-2026-25374.md): WordPress Spa and Salon theme \<= 1.3.2 - Broken Access Control vulnerability (CVSS 5.3)
- [CVE-2025-23998](https://cve.now/CVE-2025-23998.md): WordPress UltraLight theme \<= 1.2 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2024-37937](https://cve.now/CVE-2024-37937.md): WordPress Rara Business theme \<= 1.2.5 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3)
- [CVE-2024-37508](https://cve.now/CVE-2024-37508.md): WordPress Construction Landing Page theme \<= 1.3.5 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3)
- [CVE-2024-37503](https://cve.now/CVE-2024-37503.md): WordPress Lawyer Landing Page theme \<= 1.2.4 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3)
- [CVE-2024-37451](https://cve.now/CVE-2024-37451.md): WordPress Travel Agency theme \<= 1.4.9 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3)
- [CVE-2024-37450](https://cve.now/CVE-2024-37450.md): WordPress Benevolent theme \<= 1.3.4 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3)
- [CVE-2024-37435](https://cve.now/CVE-2024-37435.md): WordPress Perfect Portfolio theme \<= 1.2.0 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3)
- [CVE-2024-37426](https://cve.now/CVE-2024-37426.md): WordPress Elegant Pink theme 1.3.0 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3)
- [CVE-2024-37421](https://cve.now/CVE-2024-37421.md): WordPress JobScout theme \<= 1.1.4 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3)
- [CVE-2024-37413](https://cve.now/CVE-2024-37413.md): WordPress Preschool and Kindergarten theme \<= 1.2.1 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3)
- [CVE-2024-37104](https://cve.now/CVE-2024-37104.md): WordPress Chic Lite theme \<= 1.1.3 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3)
- [CVE-2024-37103](https://cve.now/CVE-2024-37103.md): WordPress Education Zone theme \<= 1.3.4 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3)
- [CVE-2022-29451](https://cve.now/CVE-2022-29451.md): WordPress Rara One Click Demo Import plugin \<= 1.2.9 - Cross-Site Request Forgery (CSRF) leads to Arbitrary File Upload vulnerability (CVSS 8.8)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/raratheme
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.