Sirat
Sirat has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10.
The most common weakness is Missing Authorization, behind 1 of the records (100%).
The one issue recorded for Sirat has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.
All of these findings were reported by Peter Thaleikis. Sirat is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius.
CVE-2025-39385Sirat <= 1.5.1 - Missing Authorization
Read the full analysisVulnerability Records

Sirat
Author
VW THEMES
Sirat is a highly versatile WordPress theme notable for its simplicity and clean design, making it an excellent option for various business applications. Whether you're building an app landing page, designing a website for an architect, or promoting a startup, Sirat provides all the necessary features. It serves multiple fields, including social media management, virtual assistant services, webinar sign-ups, ebook downloads, and one-page websites. Organizations such as consultants, manufacturers, and IT firms, along with online businesses like retailers and wholesalers, benefit from Sirat’s professional and visually appealing design, which effectively supports a WooCommerce storefront. This theme's extensive capabilities also cater to fitness programs, event planning, and creative projects, ensuring it meets diverse needs. With customizable sidebars, header layouts, and various width options, Sirat enhances content presentation. One of its standout features includes a lightweight design and extensibility, allowing users to tailor their experience by enabling or disabling certain elements. Robust options like WooCommerce support, retina-ready visuals, clean coding, and mobile responsiveness further enhance its appeal. Moreover, Sirat follows best SEO practices, making it ideal for digital health platforms or insurance agencies aiming to optimize their online presence. Customization is user-friendly, positioning Sirat as a perfect choice for personal portfolios or businesses with a creative edge. Its modern, luxurious aesthetics paired with animated elements create a stunning visual experience, and it supports multiple languages, including Arabic, German, Spanish, French, Italian, Russian, Chinese, and Turkish. You can explore Sirat through its demo at https://preview.vwthemesdemo.com/vw-sirat/. Demo: https://preview.vwthemesdemo.com/vw-sirat/
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C