Vandana Lite
Vandana Lite has one disclosed vulnerability in the WordSec catalog, all reported in 2024; it is fixed as of September 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10.
The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (100%).
The one issue recorded for Vandana Lite has a vendor fix available, so running the current release closes it.
All of these findings were reported by Dhabaleshwar Das. Vandana Lite is installed on roughly 500 WordPress sites, so each unpatched flaw has a wide blast radius.
CVE-2024-37243Vandana Lite <= 1.1.9 - Cross Site Request Forgery to Notice Dismissal
Read the full analysisVulnerability Records

Vandana Lite
Author
Blossom Themes
Vandana Lite is a service WordPress theme for coaches, mentors, therapists, speakers, leaders, and entrepreneurs. It is easy to use, mobile-friendly and SEO optimized. The theme includes sections such as Banner with Newsletter, About, Services, multiple Call-to-Action, Testimonials, and Contact to showcase your services and generate leads. Vandana Lite is translation-ready, Schema-friendly and RTL script ready. Check theme details at https://blossomthemes.com/downloads/vandana-lite-free-wordpress-theme/, demo at https://blossomthemes.com/theme-demo/?theme=vandana-lite, documentation at https://docs.blossomthemes.com/docs/vandana-lite/, and get support at https://blossomthemes.com/support-ticket/.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C