Sinatra

Sinatra has one disclosed vulnerability in the WordSec catalog, all reported in 2024; it is fixed as of October 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for Sinatra has a vendor fix available, so running the current release closes it.

All of these findings were reported by stealthcopter. Sinatra is installed on roughly 20,000 WordPress sites, so each unpatched flaw has a wide blast radius.

Strategic Overview

Avg CVSSMedium

6.4/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Sinatra vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2024-37116

Sinatra <= 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records


2024-06-20 00:00	Sinatra <= 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting Sinatra <= 1.4	`CVE-2024-37116`	6.4 Medium	stealthcopter	Yes

Showing 1–1 of 1 reports

Latestv1.5.0

Sinatra

Author

sinatrateam

5.0(41)

100/100

Last Updated

2026-10-12 (17d ago)

Active Installs

20,000+

Downloads

2,032,245

Requires WP

6.0+

Requires PHP

7.4+

Created

2020-02-11 (7y ago)

Sinatra is a lightweight and highly customizable multi-purpose theme that makes it easy for anyone to create their perfect website. You can use it for any type of website from blogs, businesses, online shops, creatives, hotels, restaurants, startups and more. With Sinatra you get the perfect blend of performance, modern design and powerful, yet simple to use options. Works perfectly with the new block editor (Gutenberg) and your favorite plugins such as: WooCommerce, JetPack, page builders, SEO plugins and others. It comes with microdata integration, unlimited colors, multiple layouts, pre-built demo websites and so much more. It's also translatable and built with best SEO practices. Try Sinatra theme today on https://try.sinatrawp.com