Loftocean vulnerabilities

Products

• Cozystay 4
• Cozystay - Hotel Booking Wordpress Theme 2
• Patiotime 2

Newest

• loftocean cozystay WordPress CozyStay theme <= 1.10.0 - Cross Site Scripting (XSS) vulnerability CVE-2026-78289 7.1 HighAugust 27, 2026
• loftocean patiotime WordPress PatioTime theme < 2.1 - PHP Object Injection vulnerability CVE-2025-67995 9.8 CriticalFebruary 20, 2026
• loftocean patiotime WordPress PatioTime theme < 2.1 - Local File Inclusion vulnerability CVE-2025-67992 8.1 HighFebruary 20, 2026
• loftocean cozystay WordPress CozyStay theme < 1.9.1 - Local File Inclusion vulnerability CVE-2025-67988 8.1 HighFebruary 20, 2026
• loftocean cozystay WordPress CozyStay theme < 1.7.1 - Local File Inclusion vulnerability CVE-2025-49508 8.1 HighJune 17, 2025
• loftocean tinysalt WordPress TinySalt theme < 3.10.0 - Local File Inclusion vulnerability CVE-2025-49454 8.1 HighJune 10, 2025
• loftocean cozystay WordPress CozyStay theme < 1.7.1 - PHP Object Injection vulnerability CVE-2025-49507 9.8 CriticalJune 10, 2025
• loftocean cozystay - hotel booking wordpress theme CozyStay <= 1.7.0 - Missing Authorization to Arbitrary Action Execution in ajax_handler CVE-2024-13412 7.5 HighMarch 19, 2025
• loftocean cozystay - hotel booking wordpress theme, tinysalt - personal food blog wordpress theme +1 more CozyStay <= 1.7.0 and TinySalt <= 3.9.0 - Unauthenticated PHP Object Injection in ajax_handler CVE-2024-13410 9.8 CriticalMarch 19, 2025