Even small vulnerabilities can lead to cyberattacks, data breaches, and unauthorized access. Run a Free Basic Pen Test to identify security gaps in your web application. Check for open and vulnerable ports, missing security headers, outdated technologies, XSS risks, open redirections, and more—before attackers do. Strengthen your security today!
Run a Free Security Scan
At Pro Secure Labs, we expose the hidden vulnerabilities that put your site at risk — from outdated plugins and weak configurations to insecure APIs hackers love to exploit.
CVE-2026-77073
n8n versions before 2.34.1 contain a credential validation bypass in the MCP create_workflow_from_code tool when authent...
CVE-2026-77026
Joomla Extension - tassos.gr - Client-controlled validation bypass in Convert Forms extension < 5.2.5 - The front-end Su...
CVE-2026-76610
Joomla Extension - yootheme.com - Unauthenticated tag modifications in Zoo < 4.1.65 - The comment controller endpoint la...
CVE-2026-76569
Joomla Extension - phoca.cz - Reflected XSS via the search GET parameter in Phoca Download 5.0.0-6.1.4
CVE-2026-75948
Joomla Extension - icagenda.com - Authenticated Stored XSS in iCagenda 4.0.8 to 4.0.12 - The frontend "Submit an Event"...
CVE-2026-76564
Joomla Extension - phoca.cz - Stored XSS via User-Agent header in Admin Order View in Phoca Cart 5.0.0-6.1.7
CVE-2026-76565
Joomla Extension - phoca.cz - Reflected XSS via price_from & price_to filter parameters in Phoca Cart 5.0.0-6.1.7
CVE-2026-75860
The JSON Options WordPress plugin through 0.0.4 does not have any capability check or nonce verification on one of its a...
CVE-2026-74992
The Kirki WordPress plugin before 6.2.3 does not properly validate the files contained in archives uploaded by users wi...
CVE-2026-19699
The GutenKit WordPress plugin before 2.5.0 does not have a sufficient capability check on some of its REST API endpoint...
CVE-2026-19615
The Admin and Site Enhancements (ASE) WordPress plugin before 9.0.1 does not sanitise uploaded SVG files on every route...
CVE-2026-19697
The GutenKit WordPress plugin before 2.5.0 does not sanitise uploaded SVG files on all of the upload paths it enables,...
CVE-2026-15049
The Depicter — Popup & Slider Builder WordPress plugin before 4.8.0 does not validate the type of a file uploaded throug...
CVE-2026-13405
The Royal Addons for Elementor WordPress plugin before 1.7.1066 does not correctly sanitise custom widget markup before...
CVE-2026-19582
In binutils 2.46.1 and prior versions, a victim who opens a crafted PE file using binutils could execute arbitrary code...
Comprising accomplished cybersecurity specialists, we offer unmatched insights fortified by a proven track record. Our profound comprehension of the threat landscape empowers you to proactively navigate cyber risks.
Encompassing risk assessment to incident response, our comprehensive cybersecurity services span the entire spectrum. We serve as your steadfast companion throughout the digital journey, ensuring safeguarded passage.
With
cyber threats on the rise, trust Pro Secure
Labs
to empower your defense.
We aren't just
about security; we're about empowerment.
We believe in equipping you with the
knowledge and
tools to take control of your digital landscape.
Partner with us, and let's navigate the
evolving cybersecurity landscape together.
