LoftOcean vulnerabilities
9 published CVEs name LoftOcean among the affected products.
- 9Published CVEs9 of them scored
- 4Last 12 monthspublished in the last year
- 3Critical6 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-78289
WordPress CozyStay theme <= 1.10.0 - Cross Site Scripting (XSS) vulnerability
LoftOcean · CozyStay
High7.1 - CVE-2025-67995
WordPress PatioTime theme < 2.1 - PHP Object Injection vulnerability
LoftOcean · PatioTime
Critical9.8 - CVE-2025-67992
WordPress PatioTime theme < 2.1 - Local File Inclusion vulnerability
LoftOcean · PatioTime
High8.1 - CVE-2025-67988
WordPress CozyStay theme < 1.9.1 - Local File Inclusion vulnerability
LoftOcean · CozyStay
High8.1 - CVE-2025-49508
WordPress CozyStay theme < 1.7.1 - Local File Inclusion vulnerability
LoftOcean · CozyStay
High8.1 - CVE-2025-49454
WordPress TinySalt theme < 3.10.0 - Local File Inclusion vulnerability
LoftOcean · TinySalt
High8.1 - CVE-2025-49507
WordPress CozyStay theme < 1.7.1 - PHP Object Injection vulnerability
LoftOcean · CozyStay
Critical9.8 - CVE-2024-13412
CozyStay <= 1.7.0 - Missing Authorization to Arbitrary Action Execution in ajax_handler
LoftOcean · CozyStay - Hotel Booking WordPress Theme
High7.5 - CVE-2024-13410
CozyStay <= 1.7.0 and TinySalt <= 3.9.0 - Unauthenticated PHP Object Injection in ajax_handler
LoftOcean · CozyStay - Hotel Booking WordPress Theme
Critical9.8