PT-2026-27806 · Unknown · G5Theme Zorka

Published 2026-03-25 · Updated 2026-03-30 · CVE-2025-69096

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions G5Theme Zorka versions n/a through 1.5.7

Description The software contains a flaw due to improper neutralization of input during web page generation, leading to a reflected cross-site scripting issue. The vulnerable component allows an attacker to inject malicious scripts into web pages. The affected product is G5Theme Zorka. The vulnerability allows for Reflected XSS.

Recommendations Update G5Theme Zorka to a version later than 1.5.7.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-69096

Affected Products

G5Theme Zorka

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2025-69096 · Security Note
• https://twitter.com/CVEnew/status/2038618144751665649 · Twitter Post
• https://patchstack.com/database/Wordpress/Theme/zorka/vulnerability/wordpress-zorka-theme-1-5-7-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve · Note