WordPress theme
Rara Business security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the theme or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High0
- Medium3
- Low0
All Rara Business vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium5.3 | Missing Authorization ≤1.3.0Update to 1.3.1 | CVE-2026-32336 | |
| Medium4.3 | Cross-Site Request Forgery to Notice Dismissal ≤1.2.5Update to 1.2.6 | CVE-2024-37937 | |
| Medium6.1 | Reflected Cross-Site Scripting <1.2.3Update to 1.2.3 | — |
- Medium5.3Missing Authorization
≤1.3.0Update to 1.3.1
- Medium4.3Cross-Site Request Forgery to Notice Dismissal
≤1.2.5Update to 1.2.6
- Medium6.1Reflected Cross-Site Scripting
<1.2.3Update to 1.2.3
Rara Business: common questions
Does Rara Business have known vulnerabilities?
Yes. VulnCrest Radar lists 3 known vulnerabilities in Rara Business: 3 medium. At least one is not fixed in the latest version.
How do I check which version of Rara Business I run?
In wp-admin open Appearance → Themes and select the theme; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Rara Business vulnerability?
CVE-2026-32336, published Feb 9, 2026: Rara Business <= 1.3.0 - Missing Authorization. Severity: Medium (CVSS 5.3).
Is any Rara Business vulnerability listed in CISA KEV?
No. None of the known Rara Business vulnerabilities is currently listed in the CISA KEV catalog.