What’s Vulnerable › Products

LoftOcean CozyStay vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your LoftOcean CozyStay version is affected

Latest LoftOcean CozyStay vulnerabilities

• CVE-2026-78289 — WordPress CozyStay theme <= 1.10.0 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
• CVE-2025-67988 — WordPress CozyStay theme < 1.9.1 - Local File Inclusion vulnerability (CVSS 8.1)
• CVE-2025-49508 — WordPress CozyStay theme < 1.7.1 - Local File Inclusion vulnerability (CVSS 8.1)
• CVE-2025-49507 — WordPress CozyStay theme < 1.7.1 - PHP Object Injection vulnerability (CVSS 9.8)