LoftOcean CozyStay - Hotel Booking WordPress Theme

• CVE-2024-13412 High 7.5 CozyStay <= 1.7.0 - Missing Authorization to Arbitrary Action Execution in ajax_handler 0.3%
• CVE-2024-13410 Critical 9.8 CozyStay <= 1.7.0 and TinySalt <= 3.9.0 - Unauthenticated PHP Object Injection in ajax_handler 0.8%