CVE Intelligence

LoftOcean vulnerabilities

🔔 Create alert RSS

Published CVEs affecting LoftOcean products: 3 record(s), with severity, exploitation and fixes.

PatioTime 2CozyStay 1

Exploited only (KEV) →

CVE-2025-67995 Critical · 9.8 CWE-502 Feb 20, 2026
WordPress PatioTime theme < 2.1 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in LoftOcean PatioTime patiotime allows Object Injection.This issue affects PatioTime: from n/a through < 2.1.
CVE-2025-67992 High · 8.1 CWE-98 Feb 20, 2026
WordPress PatioTime theme < 2.1 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in LoftOcean PatioTime patiotime allows PHP Local File Inclusion.This issue affects PatioTime: from n/a through < 2.1.
CVE-2025-67988 High · 8.1 CWE-98 Feb 20, 2026
WordPress CozyStay theme < 1.9.1 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in LoftOcean CozyStay cozystay allows PHP Local File Inclusion.This issue affects CozyStay: from n/a through < 1.9.1.