Mantra

Mantra has one disclosed vulnerability in the WordSec catalog, all reported in 2024; it is fixed as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for Mantra has a vendor fix available, so running the current release closes it.

All of these findings were reported by stealthcopter. Mantra is installed on roughly 5,000 WordPress sites, so each unpatched flaw has a wide blast radius.

Strategic Overview

Avg CVSSMedium
6.4/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all Mantra vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2024-44056

Mantra <= 3.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records
Mantra screenshot
Latestv3.3.4
4.5(72)
90/100
Last Updated
2026-02-06 (7mo ago)
Active Installs
5,000+
Downloads
1,168,350
Requires WP
0+
Requires PHP
5.6+
Created
2011-05-31 (16y ago)

Mantra is a do-it-yourself WordPress theme, featuring a pack of over 100 customization options and easy to use tweaks capable of tuning WordPress to your very specific needs and likes. With the help of a simple and efficient user interface you can customize everything:the layout (1,2 or 3 columns), total and partial site widths, colors (all texts, links, backgrounds etc.), fonts (over 35 font-families plus all Google Fonts), text and header sizes, post metas, post excerpts, post formats, header and background images, custom menus, 27 social media links and icons, pins, bullets and much much more. With a fully responsive layout,a customizable showcase presentation page, animated slider, magazine and blog layouts, 8 widget areas, modern graphics and an easy and intuitive admin section, you can start creating your dream site right now.

Tags
BlogNewsOne columnCustom menuGrid layoutSticky postTwo columnsLeft sidebarMicroformatsPost formatsCustom colorsCustom headerEntertainmentRight sidebarTheme optionsThree columnsFooter widgetsFeatured imagesCustom backgroundThreaded commentsTranslation readyFull width templateFront page postingRTL language supportFeatured image header

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C