LO
Vendor
LoftOcean
10
CVEs
0
On KEV
0
New 30D
Products
CO9.8
CozyStay
LoftOcean
4 CVEs0 on KEV0 new
CH9.8
CozyStay - Hotel Booking WordPress Theme
LoftOcean
2 CVEs0 on KEV0 new
PA9.8
PatioTime
LoftOcean
2 CVEs0 on KEV0 new
TI8.1
TinySalt
LoftOcean
1 CVEs0 on KEV0 new
TP9.8
TinySalt - Personal Food Blog WordPress Theme
LoftOcean
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-78289 | CO CozyStay LoftOcean | 7.1 | Aug 27 | WordPress CozyStay theme <= 1.10.0 - Cross Site Scripting (XSS) vulnerability |
| CVE-2025-67995 | PA PatioTime LoftOcean | 9.8 | Feb 20 | WordPress PatioTime theme < 2.1 - PHP Object Injection vulnerability |
| CVE-2025-67992 | PA PatioTime LoftOcean | 8.1 | Feb 20 | WordPress PatioTime theme < 2.1 - Local File Inclusion vulnerability |
| CVE-2025-67988 | CO CozyStay LoftOcean | 8.1 | Feb 20 | WordPress CozyStay theme < 1.9.1 - Local File Inclusion vulnerability |
| CVE-2025-49508 | CO CozyStay LoftOcean | 8.1 | Jun 17 | WordPress CozyStay theme < 1.7.1 - Local File Inclusion vulnerability |
| CVE-2025-49454 | TI TinySalt LoftOcean | 8.1 | Jun 10 | WordPress TinySalt theme < 3.10.0 - Local File Inclusion vulnerability |
| CVE-2025-49507 | CO CozyStay LoftOcean | 9.8 | Jun 10 | WordPress CozyStay theme < 1.7.1 - PHP Object Injection vulnerability |
| CVE-2024-13412 | CH CozyStay - Hotel Booking WordPress Theme LoftOcean | 7.5 | Mar 19 | CozyStay <= 1.7.0 - Missing Authorization to Arbitrary Action Execution in ajax_handler |
| CVE-2024-13410 | TP TinySalt - Personal Food Blog WordPress Theme LoftOcean | 9.8 | Mar 19 | CozyStay <= 1.7.0 and TinySalt <= 3.9.0 - Unauthenticated PHP Object Injection in ajax_handler |