LoftOcean CozyStay

• CVE-2026-78289 High 7.1 WordPress CozyStay theme <= 1.10.0 - Cross Site Scripting (XSS) vulnerability 0.3%
• CVE-2025-67988 High 8.1 WordPress CozyStay theme < 1.9.1 - Local File Inclusion vulnerability 0.6%
• CVE-2025-49508 High 8.1 WordPress CozyStay theme < 1.7.1 - Local File Inclusion vulnerability 0.6%
• CVE-2025-49507 Critical 9.8 WordPress CozyStay theme < 1.7.1 - PHP Object Injection vulnerability 0.6%