Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
loftocean vulnerabilities and exploits
(subscribe to this query)
0.002
EPSS
CVE-2024-13410
The CozyStay and TinySalt plugins for WordPress are vulnerable to PHP Object Injection in all versions up to, and including, 1.7.0, and in all versions up to, and including 3.9.0, respectively, via deserialization of untrusted input in the 'ajax_handler' function. This ...
Loftocean Cozystay - Hotel Booking Wordpress Theme
Loftocean Tinysalt - Personal Food Blog Wordpress Theme
0.000
EPSS
CVE-2024-13412
The CozyStay theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajax_handler function in all versions up to, and including, 1.7.0. This makes it possible for unauthenticated malicious users to execute arbitrary actions.
Loftocean Cozystay - Hotel Booking Wordpress Theme
Preferred Score:
EPSS
CVSSv2
CVSSv3
CVSSv4
EPSS
VMScore
Recommendations:
CVE-2024-9182
CVE-2025-4761
CVE-2025-1289
XML injection
d-link
CVE-2025-4427
camera
local
genesis64
ibm
CVE-2025-47161
spotipy
CVE-2023-21563
Home
/
Search Results
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started