Rara Themes

Products

ProductCVEsExploitedLatest
Metro Magazine2–Jun 17, 2026
Business One Page1–Nov 1, 2024
Rara One Click Demo Import1–Sep 9, 2026

Exploited and recent CVEs

  • CVE-2026-26212 High 7.2 Rara One Click Demo Import < 1.3.5 Arbitrary File Upload RCE 0.8%
  • CVE-2024-37496 Medium 4.3 WordPress Metro Magazine theme <= 1.3.7 - Broken Access Control on Notice Dismissal vulnerability 0.2%
  • CVE-2026-40809 Medium 6.5 WordPress Metro Magazine theme <= 1.4.1 - Broken Access Control vulnerability 0.2%
  • CVE-2024-37505 Medium 4.3 WordPress Business One Page theme <= 1.2.9 - Broken Access Control on Notice Dismissal vulnerability 0.3%