Themegrill Zakra vulnerabilities

• themegrill zakra Zakra <= 4.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Meta REST API CVE-2026-4804 6.4 MediumJuly 3, 2026
• themegrill zakra Zakra <= 4.1.5 - Missing Authorization to Subscriber+ Demo Import CVE-2025-8595 4.3 MediumAugust 6, 2025