Zakra

Zakra has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2025 and 2026; all 2 are fixed as of September 2026. Their average CVSS score is 5.3, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (50%). Other recurring categories include Missing Authorization.

Every one of the 2 issues recorded for Zakra has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each. Zakra is installed on roughly 30,000 WordPress sites, so each unpatched flaw has a wide blast radius.

Strategic Overview

Avg CVSSMedium

5.3/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Zakra vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2026-4804

Zakra <= 4.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Meta REST API

Read the full analysis

Vulnerability Records

2 records


2026-07-02 19:01	Zakra <= 4.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Meta REST API Zakra <= 4.2.0	`CVE-2026-4804`	6.4 Medium	Osvaldo Noe Gonzalez Del Rio (Os)	Yes
2025-08-05 13:58	Zakra <= 4.1.5 - Missing Authorization to Subscriber+ Demo Import Zakra <= 4.1.5	`CVE-2025-8595`	4.3 Medium	Dmitrii Ignatyev	Yes

Showing 1–2 of 2 reports

Latestv4.3.1

Zakra

Author

ThemeGrill

4.9(599)

98/100

Last Updated

2026-08-12 (1mo ago)

Active Installs

30,000+

Downloads

2,060,595

Requires WP

Requires PHP

7.4+

Created

2019-01-15 (8y ago)

Zakra is a powerful and versatile multipurpose theme that makes it easy to create beautiful and professional websites. With over free 40 pre-designed starter demo sites to choose from, you can quickly build a unique and functional site that fits your specific needs. Whether you're launching a blog, news site, e-commerce store, showcasing your portfolio, building a business site, LMS, or niche-specific site (such as a cafe, spa, charity, yoga studio, wedding venue, dental practice, photography, restaurant, or educational institution), Zakra has everything you need to succeed. The theme integrates seamlessly with popular page builders like Elementor, Brizy, BlockArt, and the Gutenberg editor, giving you complete freedom to create any layout you can imagine. Importantly, Zakra is optimized for speed, features a mobile-first responsive design, is built with block-based technology, and is optimized for search engines. It is also compatible with a wide range of popular WordPress plugins, allowing you to extend its functionality as needed. Build your next project with Zakra today and see the difference for yourself. Check out all the starter sites at https://zakratheme.com/demos!