Loftocean
8 CVEs across 5 Loftocean products. Browse Loftocean vulnerabilities, severities, and proof-of-concept exploits.
Loftocean products with known CVEs
Loftocean CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2025-67995 | Critical | 9.8 | 2026-02-20 | Deserialization of Untrusted Data vulnerability in LoftOcean PatioTime patiotime allows Object Injection.This issue affects PatioTime: from n/a through < 2.1. |
CVE-2025-67992 | High | 8.1 | 2026-02-20 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in LoftOcean PatioTime patiotime allows P… |
CVE-2025-67988 | High | 8.1 | 2026-02-20 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in LoftOcean CozyStay cozystay allows PHP… |
CVE-2025-49508 | High | 8.1 | 2025-06-17 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in LoftOcean CozyStay cozystay allows PHP… |
CVE-2025-49507 | Critical | 9.8 | 2025-06-10 | Deserialization of Untrusted Data vulnerability in LoftOcean CozyStay cozystay allows Object Injection.This issue affects CozyStay: from n/a through < 1.7.1. |
CVE-2025-49454 | High | 8.1 | 2025-06-10 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in LoftOcean TinySalt tinysalt allows PHP… |
CVE-2024-13412 | High | 7.5 | 2025-03-19 | The CozyStay theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajax_handler function in all versi… |
CVE-2024-13410 | Critical | 9.8 | 2025-03-19 | The CozyStay and TinySalt plugins for WordPress are vulnerable to PHP Object Injection in all versions up to, and including, 1.7.0, and in all versions up to… |