Log in Start free

LoftOcean

Products

ProductCVEsExploitedLatest
CozyStay4–Aug 27, 2026
CozyStay - Hotel Booking WordPress Theme2–Mar 19, 2025
PatioTime2–Feb 20, 2026
TinySalt1–Jun 10, 2025
TinySalt - Personal Food Blog WordPress Theme1–Mar 19, 2025

Exploited and recent CVEs

  • CVE-2026-78289 High 7.1 WordPress CozyStay theme <= 1.10.0 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2025-67995 Critical 9.8 WordPress PatioTime theme < 2.1 - PHP Object Injection vulnerability 0.6%
  • CVE-2025-67992 High 8.1 WordPress PatioTime theme < 2.1 - Local File Inclusion vulnerability 0.6%
  • CVE-2025-67988 High 8.1 WordPress CozyStay theme < 1.9.1 - Local File Inclusion vulnerability 0.6%
  • CVE-2025-49508 High 8.1 WordPress CozyStay theme < 1.7.1 - Local File Inclusion vulnerability 0.6%
  • CVE-2025-49454 High 8.1 WordPress TinySalt theme < 3.10.0 - Local File Inclusion vulnerability 0.8%
  • CVE-2025-49507 Critical 9.8 WordPress CozyStay theme < 1.7.1 - PHP Object Injection vulnerability 0.6%
  • CVE-2024-13412 High 7.5 CozyStay <= 1.7.0 - Missing Authorization to Arbitrary Action Execution in ajax_handler 0.3%
  • CVE-2024-13410 Critical 9.8 CozyStay <= 1.7.0 and TinySalt <= 3.9.0 - Unauthenticated PHP Object Injection in ajax_handler 0.8%
  • CVE-2024-13410 Critical 9.8 CozyStay <= 1.7.0 and TinySalt <= 3.9.0 - Unauthenticated PHP Object Injection in ajax_handler 0.8%