目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1336 元

100%
请我们喝杯咖啡

access:pre-auth 标签下的 CVE 漏洞 24923

access:pre-auth 类型相关 24923 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。

“access:pre-auth”标签标识了无需身份验证即可触发的漏洞，涵盖18971个CVE。此类漏洞之所以关键，是因为攻击者无需凭证即可直接利用，极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击，常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块，对系统安全性构成直接且严重的威胁。

CVE ID 标题 CVSS 风险等级 Published
CVE-2025-8572 WordPress plugin Truelysell Core 安全漏洞 — Truelysell Core CWE-269 9.8 Critical 2026-02-14
CVE-2026-0753 WordPress plugin Super Simple Contact Form 跨站脚本漏洞 — Super Simple Contact Form CWE-79 7.2 High 2026-02-14
CVE-2026-1306 WordPress plugin midi-Synth 代码问题漏洞 — midi-Synth CWE-434 9.8 Critical 2026-02-14
CVE-2026-1394 WordPress plugin WP Quick Contact Us 跨站请求伪造漏洞 — WP Quick Contact Us CWE-352 4.3 Medium 2026-02-14
CVE-2026-1944 WordPress plugin CallbackKiller 安全漏洞 — CallbackKiller service widget CWE-862 5.3 Medium 2026-02-14
CVE-2025-14852 WordPress plugin MDirector Newsletter 跨站请求伪造漏洞 — MDirector Newsletter WordPress Plugin CWE-352 4.3 Medium 2026-02-14
CVE-2026-2024 WordPress plugin PhotoStack Gallery SQL注入漏洞 — PhotoStack Gallery CWE-89 7.5 High 2026-02-14
CVE-2026-1795 WordPress plugin Address Bar Ads 跨站脚本漏洞 — Address Bar Ads CWE-79 6.1 Medium 2026-02-14
CVE-2026-1792 WordPress plugin Geo Widget 跨站脚本漏洞 — Geo Widget CWE-79 6.1 Medium 2026-02-14
CVE-2025-14873 WordPress plugin LatePoint 跨站请求伪造漏洞 — LatePoint – Calendar Booking Plugin for Appointments and Events CWE-352 4.3 Medium 2026-02-14
CVE-2025-6792 WordPress plugin One to one user Chat by WPGuppy 访问控制错误漏洞 — One to one user Chat by WPGuppy CWE-306 5.3 Medium 2026-02-14
CVE-2026-1796 WordPress plugin StyleBidet 跨站脚本漏洞 — StyleBidet CWE-79 6.1 Medium 2026-02-14
CVE-2026-1932 WordPress plugin Bookr 安全漏洞 — Appointment Booking Calendar Plugin – Bookr CWE-862 5.3 Medium 2026-02-14
CVE-2026-0692 WordPress plugin BlueSnap Payment Gateway for WooCommerce 安全漏洞 — BlueSnap Payment Gateway for WooCommerce CWE-862 7.5 High 2026-02-14
CVE-2026-1983 WordPress plugin SEATT: Simple Event Attendance 跨站请求伪造漏洞 — SEATT: Simple Event Attendance CWE-352 4.3 Medium 2026-02-14
CVE-2026-1754 WordPress plugin personal-authors-category 跨站脚本漏洞 — personal-authors-category CWE-79 6.1 Medium 2026-02-14
CVE-2026-2144 WordPress plugin Magic Login Mail or QR Code 安全漏洞 — Magic Login Mail or QR Code CWE-269 8.1 High 2026-02-14
CVE-2025-13973 WordPress plugin StickEasy Protected Contact Form 信息泄露漏洞 — StickEasy Protected Contact Form CWE-200 5.3 Medium 2026-02-14
CVE-2026-26273 Known 授权问题漏洞 — known CWE-200 9.8AI Critical AI 2026-02-13
CVE-2026-1841 WordPress plugin PixelYourSite 跨站脚本漏洞 — PixelYourSite – Your smart PIXEL (TAG) & API Manager CWE-79 7.2 High 2026-02-13
CVE-2026-1844 WordPress plugin PixelYourSite PRO 跨站脚本漏洞 — PixelYourSite Pro – Your smart PIXEL (TAG) Manager CWE-79 7.2 High 2026-02-13
CVE-2026-26333 Calero VeraSMART 代码问题漏洞 — VeraSMART CWE-306 9.1AI Critical AI 2026-02-13
CVE-2026-26190 milvus 访问控制错误漏洞 — milvus CWE-306 9.8 Critical 2026-02-13
CVE-2026-26221 Hyland Software Hyland OnBase 安全漏洞 — OnBase Workflow Timer Service CWE-502 9.8 Critical 2026-02-13
CVE-2025-69633 PrestaShop 安全漏洞 — n/a 9.8AI Critical AI 2026-02-13
CVE-2019-25333 Bullwark Momentum Series JAWS 路径遍历漏洞 — Momentum Series JAWS CWE-22 7.5 High 2026-02-12
CVE-2019-25325 Thrive Smart Home SQL注入漏洞 — Smart Home CWE-89 8.2 High 2026-02-12
CVE-2026-1358 Airleader Master 代码问题漏洞 — Airleader Master CWE-434 9.8 Critical 2026-02-12
CVE-2026-26011 Nav2 缓冲区错误漏洞 — navigation2 CWE-787 8.8AI High AI 2026-02-12
CVE-2026-25949 authentik 资源管理错误漏洞 — traefik CWE-400 7.5 High 2026-02-12

access:pre-auth 是常见的弱点类别，本平台收录该类弱点关联的 24923 条 CVE 漏洞。