目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1336 元

100%
请我们喝杯咖啡

access:pre-auth 标签下的 CVE 漏洞 24934

access:pre-auth 类型相关 24934 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。

“access:pre-auth”标签标识了无需身份验证即可触发的漏洞，涵盖18971个CVE。此类漏洞之所以关键，是因为攻击者无需凭证即可直接利用，极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击，常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块，对系统安全性构成直接且严重的威胁。

CVE ID 标题 CVSS 风险等级 Published
CVE-2026-3331 WordPress plugin Lobot Slider Administrator 跨站请求伪造漏洞 — Lobot Slider Administrator CWE-352 4.3 Medium 2026-03-21
CVE-2026-3003 WordPress plugin Vagaro Booking Widget 跨站脚本漏洞 — Vagaro Booking Widget CWE-79 7.2 High 2026-03-21
CVE-2026-1392 WordPress plugin SR WP Minify HTML 跨站请求伪造漏洞 — SR WP Minify HTML CWE-352 4.3 Medium 2026-03-21
CVE-2026-3641 WordPress plugin Appmax 输入验证错误漏洞 — Appmax CWE-20 5.3 Medium 2026-03-21
CVE-2026-2468 WordPress plugin Quentn WP SQL注入漏洞 — Quentn WP CWE-89 7.5 High 2026-03-21
CVE-2026-3332 WordPress plugin Xhanch - My Advanced Settings 跨站请求伪造漏洞 — Xhanch – My Advanced Settings CWE-352 4.3 Medium 2026-03-21
CVE-2026-3651 WordPress plugin Build App Online 安全漏洞 — Build App Online CWE-862 5.3 Medium 2026-03-21
CVE-2025-13910 WordPress plugin WP-WebAuthn 跨站脚本漏洞 — WP-WebAuthn CWE-79 6.1 Medium 2026-03-21
CVE-2026-4069 WordPress plugin Alfie – Feed Plugin 跨站脚本漏洞 — Alfie – Feed Plugin CWE-79 6.1 Medium 2026-03-21
CVE-2026-3506 WordPress plugin WP-Chatbot for Messenger 安全漏洞 — WP-Chatbot for Messenger CWE-862 5.3 Medium 2026-03-21
CVE-2026-2277 WordPress plugin rexCrawler 跨站脚本漏洞 — rexCrawler CWE-79 6.1 Medium 2026-03-21
CVE-2026-1378 WordPress plugin WP Posts Re-order 跨站请求伪造漏洞 — WP Posts Re-order CWE-352 4.3 Medium 2026-03-21
CVE-2026-1390 WordPress plugin Redirect countdown 跨站请求伪造漏洞 — Redirect countdown CWE-352 4.3 Medium 2026-03-21
CVE-2026-1393 WordPress plugin Add Google Social Profiles to Knowledge Graph Box 跨站请求伪造漏洞 — Add Google Social Profiles to Knowledge Graph Box CWE-352 4.3 Medium 2026-03-21
CVE-2026-1800 WordPress plugin Fonts Manager | Custom Fonts SQL注入漏洞 — Fonts Manager | Custom Fonts CWE-89 7.5 High 2026-03-21
CVE-2026-2375 WordPress plugin App Builder – Create Native Android & iOS Apps On The Flight 安全漏洞 — App Builder – Create Native Android & iOS Apps On The Flight CWE-269 6.5 Medium 2026-03-21
CVE-2026-2440 WordPress plugin SurveyJS 跨站脚本漏洞 — SurveyJS: Drag & Drop Form Builder CWE-79 7.2 High 2026-03-21
CVE-2026-3335 WordPress plugin Canto 安全漏洞 — Canto CWE-862 5.3 Medium 2026-03-21
CVE-2026-3570 WordPress plugin Smarter Analytics 安全漏洞 — Smarter Analytics CWE-862 5.3 Medium 2026-03-21
CVE-2026-4302 WordPress plugin WowOptin: Next-Gen Popup Maker 代码问题漏洞 — WowOptin: Next-Gen Popup Maker – Create Stunning Popups and Optins for Lead Generation CWE-918 7.2 High 2026-03-21
CVE-2026-32896 OpenClaw 访问控制错误漏洞 — OpenClaw CWE-306 4.8 Medium 2026-03-21
CVE-2026-32064 OpenClaw 访问控制错误漏洞 — OpenClaw CWE-306 7.7 High 2026-03-21
CVE-2026-3572 WordPress plugin iTracker360 跨站脚本漏洞 — iTracker360 CWE-79 6.1 Medium 2026-03-20
CVE-2026-3368 WordPress plugin Injection Guard 跨站脚本漏洞 — Injection Guard CWE-79 7.2 High 2026-03-20
CVE-2026-33427 Discourse 安全漏洞 — discourse CWE-862 4.3 - 2026-03-20
CVE-2026-33425 Discourse 安全漏洞 — discourse CWE-203 5.3 - 2026-03-20
CVE-2026-29796 IGL-Technologies eParking.fi 访问控制错误漏洞 — eParking.fi CWE-306 9.4 Critical 2026-03-20
CVE-2026-33231 NLTK 访问控制错误漏洞 — nltk CWE-306 7.5 High 2026-03-20
CVE-2026-25192 CTEK Chargeportal 访问控制错误漏洞 — Chargeportal CWE-306 9.4 Critical 2026-03-20
CVE-2026-33204 SimpleJWT 资源管理错误漏洞 — simplejwt CWE-400 7.5 High 2026-03-20

access:pre-auth 是常见的弱点类别，本平台收录该类弱点关联的 24934 条 CVE 漏洞。