Themes and plugins

Z-CMS installs themes and plugins as signed packages. A package signature is checked before its contents are imported.

Before installing a plugin

Review the publisher, compatible versions, changelog, requested permissions and data policy.

Installation

1. Open Marketplace in Admin.
2. Select a plugin or theme.
3. Review permissions and compatibility.
4. Select Install.
5. For a plugin, approve the required permissions and activate it.

Danger

Do not install a package received directly from an untrusted source or one without a valid signature.

Plugin lifecycle

Install adds a verified package to the system; Activate lets it run for the site; Deactivate stops its functionality without removing the package. Configuration and plugin data may remain after deactivation, so read the removal guide before uninstalling.

Approve permissions

The manifest lists requested permissions, but an administrator can approve only a subset. Grant only capabilities needed by enabled features. Review content:update, media:delete, mail:send, and any external data transfer especially carefully.

Updates and quarantine

Before updating, read the changelog, new permissions, and migration requirements. The runtime synchronizes a signed revocation list and quarantines revoked packages. Do not reactivate a quarantined package—upgrade to a fixed version or contact its publisher.

See Appearance and theme settings for the theme switching and verification workflow.