Skip to content
OpenAdvisories

Vendor

LoftOcean

9 known vulnerabilities.

Products

CozyStay 4 PatioTime 2 CozyStay - Hotel Booking WordPress Theme 2 TinySalt 1 TinySalt - Personal Food Blog WordPress Theme 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2025-67995

    WordPress PatioTime theme < 2.1 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in LoftOcean PatioTime patiotime allows Object Injection.This issue affects PatioTime: from n/a through < 2.1.

    LoftOcean PatioTime
  • Critical 9.8
    CVE-2025-49507

    WordPress CozyStay theme < 1.7.1 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in LoftOcean CozyStay cozystay allows Object Injection.This issue affects CozyStay: from n/a through < 1.7.1.

    LoftOcean CozyStay
  • Critical 9.8
    CVE-2024-13410

    CozyStay <= 1.7.0 and TinySalt <= 3.9.0 - Unauthenticated PHP Object Injection in ajax_handler

    The CozyStay and TinySalt plugins for WordPress are vulnerable to PHP Object Injection in all versions up to, and including, 1.7.0, and in all versions up to, and including 3.9.0, respectively, via deserialization of untrusted input in the 'ajax_handler' func…

    LoftOcean CozyStay - Hotel Booking WordPress Theme TinySalt - Personal Food Blog WordPress Theme Web / CMS