Loftocean

8 CVEs across 5 Loftocean products. Browse Loftocean vulnerabilities, severities, and proof-of-concept exploits.

Loftocean products with known CVEs

ProductCVEs
Cozystay3
Cozystay - Hotel Booking WordPress Theme2
Patiotime2
Tinysalt1
Tinysalt - Personal Food Blog WordPress Theme1
Loftocean CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-67995Critical9.82026-02-20Deserialization of Untrusted Data vulnerability in LoftOcean PatioTime patiotime allows Object Injection.This issue affects PatioTime: from n/a through < 2.1.
CVE-2025-67992High8.12026-02-20Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in LoftOcean PatioTime patiotime allows P…
CVE-2025-67988High8.12026-02-20Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in LoftOcean CozyStay cozystay allows PHP…
CVE-2025-49508High8.12025-06-17Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in LoftOcean CozyStay cozystay allows PHP…
CVE-2025-49507Critical9.82025-06-10Deserialization of Untrusted Data vulnerability in LoftOcean CozyStay cozystay allows Object Injection.This issue affects CozyStay: from n/a through < 1.7.1.
CVE-2025-49454High8.12025-06-10Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in LoftOcean TinySalt tinysalt allows PHP…
CVE-2024-13412High7.52025-03-19The CozyStay theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajax_handler function in all versi…
CVE-2024-13410Critical9.82025-03-19The CozyStay and TinySalt plugins for WordPress are vulnerable to PHP Object Injection in all versions up to, and including, 1.7.0, and in all versions up to…