Vulnerabilidades de LoftOcean
CVEs publicadas que afetam produtos de LoftOcean: 3 registro(s), com severidade, exploração e correções.
CVE-2025-67995
Crítica · 9.8
CWE-502 20/02/2026
WordPress PatioTime theme < 2.1 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in LoftOcean PatioTime patiotime allows Object Injection.This issue affects PatioTime: from n/a through < 2.1.
CVE-2025-67992
Alta · 8.1
CWE-98 20/02/2026
WordPress PatioTime theme < 2.1 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in LoftOcean PatioTime patiotime allows PHP Local File Inclusion.This issue affects PatioTime: from n/a through < 2.1.
CVE-2025-67988
Alta · 8.1
CWE-98 20/02/2026
WordPress CozyStay theme < 1.9.1 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in LoftOcean CozyStay cozystay allows PHP Local File Inclusion.This issue affects CozyStay: from n/a through < 1.9.1.