What’s Vulnerable › Products

LoftOcean CozyStay - Hotel Booking WordPress Theme vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your LoftOcean CozyStay - Hotel Booking WordPress Theme version is affected

Latest LoftOcean CozyStay - Hotel Booking WordPress Theme vulnerabilities

• CVE-2024-13412 — CozyStay <= 1.7.0 - Missing Authorization to Arbitrary Action Execution in ajax_handler (CVSS 7.5)
• CVE-2024-13410 — CozyStay <= 1.7.0 and TinySalt <= 3.9.0 - Unauthenticated PHP Object Injection in ajax_handler (CVSS 9.8)