CozyStay - Hotel Booking WordPress Theme vulnerabilities

2 known vulnerabilities in CozyStay - Hotel Booking WordPress Theme from LoftOcean. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  CozyStay - Hotel Booking WordPress Theme: Missing Authorization

  CVE-2024-13412Mar 19, 2025LoftOcean

  The CozyStay theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajax_handler function in all versions up to, and including, 1.7.0. This makes it possible for unauthenticated attackers to execute arbi

• 9.8 Critical severity

  CozyStay - Hotel Booking WordPress Theme: Deserialization of Untrusted Data

  CVE-2024-13410Mar 19, 2025LoftOcean

  The CozyStay and TinySalt plugins for WordPress are vulnerable to PHP Object Injection in all versions up to, and including, 1.7.0, and in all versions up to, and including 3.9.0, respectively, via deserialization of untrusted input in the 'ajax_handler' funct