Vandana Lite

Vandana Lite has one disclosed vulnerability in the WordSec catalog, all reported in 2024; it is fixed as of September 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (100%).

The one issue recorded for Vandana Lite has a vendor fix available, so running the current release closes it.

All of these findings were reported by Dhabaleshwar Das. Vandana Lite is installed on roughly 500 WordPress sites, so each unpatched flaw has a wide blast radius.

Strategic Overview

Avg CVSSMedium
4.3/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all Vandana Lite vulnerabilities before they are exploited.

Highest severity on recordCVSS 4.3CVE-2024-37243

Vandana Lite <= 1.1.9 - Cross Site Request Forgery to Notice Dismissal

Read the full analysis

Vulnerability Records

1 records
Vandana Lite screenshot
Latestv1.2.4
5.0(1)
100/100
Last Updated
2026-04-05 (5mo ago)
Active Installs
500+
Downloads
130,085
Requires WP
6.2+
Requires PHP
7.4+
Created
2020-08-31 (6y ago)

Vandana Lite is a service WordPress theme for coaches, mentors, therapists, speakers, leaders, and entrepreneurs. It is easy to use, mobile-friendly and SEO optimized. The theme includes sections such as Banner with Newsletter, About, Services, multiple Call-to-Action, Testimonials, and Contact to showcase your services and generate leads. Vandana Lite is translation-ready, Schema-friendly and RTL script ready. Check theme details at https://blossomthemes.com/downloads/vandana-lite-free-wordpress-theme/, demo at https://blossomthemes.com/theme-demo/?theme=vandana-lite, documentation at https://docs.blossomthemes.com/docs/vandana-lite/, and get support at https://blossomthemes.com/support-ticket/.

Tags
BlogPortfolioE commerceOne columnCustom logoCustom menuTwo columnsLeft sidebarCustom headerRight sidebarTheme optionsFooter widgetsFeatured imagesCustom backgroundThreaded commentsTranslation readyFull width templateRTL language support

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C