access:pre-auth 类型相关 24921 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞，涵盖18971个CVE。此类漏洞之所以关键，是因为攻击者无需凭证即可直接利用，极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击，常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块，对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2025-15380 | WordPress plugin NotificationX 跨站脚本漏洞 — NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar CWE-79 | 7.2 | High | 2026-01-20 |
| CVE-2026-0726 | WordPress plugin Nexter Extension – Site Enhancements Toolkit 代码问题漏洞 — Nexter Extension – Security, Performance, Code Snippets & Site Toolkit CWE-502 | 8.1 | High | 2026-01-20 |
| CVE-2025-14533 | WordPress plugin Advanced Custom Fields: Extended 安全漏洞 — Advanced Custom Fields: Extended CWE-269 | 9.8 | Critical | 2026-01-20 |
| CVE-2026-1221 | Browan Communications PrismX MX100 信任管理问题漏洞 — PrismX MX100 AP controller CWE-798 | 9.8 | Critical | 2026-01-20 |
| CVE-2025-14348 | WordPress plugin weMail 授权问题漏洞 — weMail: Email Marketing, Email Automation, Newsletters, Subscribers & Email Optins for WooCommerce CWE-285 | 5.3 | Medium | 2026-01-20 |
| CVE-2025-14798 | WordPress plugin LearnPress 安全漏洞 — LearnPress – WordPress LMS Plugin for Create and Sell Online Courses CWE-862 | 5.3 | Medium | 2026-01-20 |
| CVE-2025-14351 | WordPress plugin Custom Fonts 安全漏洞 — Custom Fonts – Host Your Fonts Locally CWE-862 | 5.3 | Medium | 2026-01-20 |
| CVE-2026-1051 | WordPress plugin Newsletter – Send awesome emails from WordPress 跨站请求伪造漏洞 — Newsletter – Send awesome emails from WordPress CWE-352 | 4.3 | Medium | 2026-01-20 |
| CVE-2025-14978 | WordPress plugin PeachPay 安全漏洞 — PeachPay — Payments & Express Checkout for WooCommerce (supports Stripe, PayPal, Square, Authorize.net, NMI) CWE-862 | 5.3 | Medium | 2026-01-20 |
| CVE-2026-23944 | arcane 访问控制错误漏洞 — arcane CWE-306 | 8.6AI | High AI | 2026-01-19 |
| CVE-2026-23849 | FileBrowser 安全漏洞 — filebrowser CWE-208 | 5.3 | Medium | 2026-01-19 |
| CVE-2026-23848 | MyTube 安全漏洞 — MyTube CWE-807 | 6.5 | Medium | 2026-01-19 |
| CVE-2026-23837 | MyTube 安全漏洞 — MyTube CWE-863 | 9.8 | Critical | 2026-01-19 |
| CVE-2026-23838 | Tandoor Recipes 安全漏洞 — nixpkgs CWE-538 | 7.5AI | High AI | 2026-01-19 |
| CVE-2026-23833 | ESPHome 输入验证错误漏洞 — esphome CWE-190 | 8.6AI | High AI | 2026-01-19 |
| CVE-2026-23646 | OpenProject 安全漏洞 — openproject CWE-488 | 6.5 | Medium | 2026-01-19 |
| CVE-2026-22850 | WordPress plugin Koko Analytics SQL注入漏洞 — koko-analytics CWE-89 | 8.4 | High | 2026-01-19 |
| CVE-2025-11043 | B&R Automation Studio 信任管理问题漏洞 — B&R Automation Studio CWE-295 | 7.4 | High | 2026-01-19 |
| CVE-2026-1119 | itsourcecode Society Management System SQL注入漏洞 — Society Management System CWE-89 | 7.3 | High | 2026-01-18 |
| CVE-2025-14078 | WordPress plugin PAYGENT for WooCommerce 安全漏洞 — PAYGENT for WooCommerce CWE-862 | 5.3 | Medium | 2026-01-17 |
| CVE-2025-10484 | WordPress plugin Registration & Login with Mobile Phone Number for WooCommerce 安全漏洞 — Registration & Login with Mobile Phone Number for WooCommerce CWE-288 | 9.8 | Critical | 2026-01-17 |
| CVE-2025-12129 | WordPress plugin CubeWP – All-in-One Dynamic Content Framework 信息泄露漏洞 — CubeWP Framework CWE-200 | 5.3 | Medium | 2026-01-17 |
| CVE-2026-0808 | WordPress plugin Spin Wheel 安全漏洞 — Spin Wheel – Interactive spinning wheel that offers coupons CWE-602 | 5.3 | Medium | 2026-01-17 |
| CVE-2025-12825 | WordPress plugin User Registration Using Contact Form 安全漏洞 — User Registration Using Contact Form 7 CWE-862 | 5.3 | Medium | 2026-01-17 |
| CVE-2025-14029 | WordPress plugin Community Events 安全漏洞 — Community Events CWE-862 | 5.3 | Medium | 2026-01-17 |
| CVE-2025-14463 | WordPress plugin Payment Button for PayPal 安全漏洞 — Payment Button for PayPal CWE-862 | 5.3 | Medium | 2026-01-17 |
| CVE-2025-12002 | WordPress plugin Feeds for YouTube Pro 路径遍历漏洞 — YouTube Feed Pro CWE-22 | 5.9 | Medium | 2026-01-17 |
| CVE-2025-12718 | WordPress plugin Quick Contact Form 输入验证错误漏洞 — Quick Contact Form CWE-20 | 5.8 | Medium | 2026-01-17 |
| CVE-2025-15403 | WordPress plugin RegistrationMagic 安全漏洞 — RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login CWE-269 | 9.8 | Critical | 2026-01-17 |
| CVE-2025-14075 | WordPress plugin WP Hotel Booking 信息泄露漏洞 — WP Hotel Booking CWE-200 | 5.3 | Medium | 2026-01-17 |
access:pre-auth 是常见的弱点类别，本平台收录该类弱点关联的 24921 条 CVE 漏洞。