ThemeGrill Zakra

• CVE-2026-4804 Medium 6.4 Zakra <= 4.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Meta REST API 0.3%
• CVE-2025-8595 Medium 4.3 Zakra <= 4.1.5 - Missing Authorization to Subscriber+ Demo Import 0.2%