CVE Intelligence

LoftOcean CozyStay vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting LoftOcean CozyStay: 2 record(s), with affected versions and fixes.

CVE-2026-78289 High · 7.1 CWE-79 Aug 27, 2026
WordPress CozyStay theme <= 1.10.0 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in CozyStay <= 1.10.0 versions.
CVE-2025-67988 High · 8.1 CWE-98 Feb 20, 2026
WordPress CozyStay theme < 1.9.1 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in LoftOcean CozyStay cozystay allows PHP Local File Inclusion.This issue affects CozyStay: from n/a through < 1.9.1.