目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1336 元

100%
请我们喝杯咖啡

access:pre-auth 标签下的 CVE 漏洞 24921

access:pre-auth 类型相关 24921 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。

“access:pre-auth”标签标识了无需身份验证即可触发的漏洞，涵盖18971个CVE。此类漏洞之所以关键，是因为攻击者无需凭证即可直接利用，极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击，常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块，对系统安全性构成直接且严重的威胁。

CVE ID 标题 CVSS 风险等级 Published
CVE-2025-14173 WordPress plugin Perfit WooCommerce 安全漏洞 — Perfit WooCommerce CWE-862 5.3 Medium 2026-01-14
CVE-2025-14846 WordPress plugin SocialChamp with WordPress 跨站请求伪造漏洞 — Auto Post to Social Media from Social Champ CWE-352 4.3 Medium 2026-01-14
CVE-2025-15376 WordPress plugin Stopwords for comments 跨站请求伪造漏洞 — Stopwords for comments CWE-352 4.3 Medium 2026-01-14
CVE-2025-15513 WordPress plugin Float Payment Gateway 安全漏洞 — Float Payment Gateway CWE-863 5.3 Medium 2026-01-14
CVE-2025-15512 WordPress plugin Aplazo Payment Gateway 安全漏洞 — Aplazo Payment Gateway CWE-862 5.3 Medium 2026-01-14
CVE-2025-14770 WordPress plugin Shipping Rate By Cities SQL注入漏洞 — Shipping Rate By Cities CWE-89 7.5 High 2026-01-14
CVE-2025-14502 WordPress plugin News and Blog Designer Bundle 安全漏洞 — News and Blog Designer Bundle CWE-98 9.8 Critical 2026-01-14
CVE-2025-15266 WordPress plugin GeekyBot — Generate AI Content Without Prompt, Chatbot and Lead Generation 跨站脚本漏洞 — GeekyBot — Generate AI Content Without Prompt, Chatbot and Lead Generation CWE-79 7.2 High 2026-01-14
CVE-2025-14464 WordPress plugin PDF Resume Parser 信息泄露漏洞 — PDF Resume Parser CWE-200 5.3 Medium 2026-01-14
CVE-2025-14880 WordPress plugin Netcash WooCommerce Payment Gateway 安全漏洞 — Netcash WooCommerce Payment Gateway CWE-862 5.3 Medium 2026-01-14
CVE-2025-15378 WordPress plugin AJS Footnotes 跨站脚本漏洞 — AJS Footnotes CWE-79 7.2 High 2026-01-14
CVE-2025-15283 WordPress plugin Name Directory 跨站脚本漏洞 — Name Directory CWE-79 7.2 High 2026-01-14
CVE-2025-15377 WordPress plugin Sosh Share Buttons 跨站请求伪造漏洞 — Sosh Share Buttons CWE-352 4.3 Medium 2026-01-14
CVE-2025-14301 WordPress plugin Integration Opvius AI for WooCommerce 路径遍历漏洞 — Integration Opvius AI for WooCommerce CWE-22 9.8 Critical 2026-01-14
CVE-2026-0717 WordPress plugin LottieFiles – Lottie block for Gutenberg 信息泄露漏洞 — LottieFiles CWE-200 5.3 Medium 2026-01-14
CVE-2025-14389 WordPress plugin WPBlogSyn 跨站请求伪造漏洞 — WPBlogSyn CWE-352 4.3 Medium 2026-01-14
CVE-2025-14615 WordPress plugin DASHBOARD BUILDER – WordPress plugin for Charts and Graphs 跨站请求伪造漏洞 — DASHBOARD BUILDER – WordPress plugin for Charts and Graphs CWE-352 7.1 High 2026-01-14
CVE-2026-0594 WordPress plugin List Site Contributors 跨站脚本漏洞 — List Site Contributors CWE-79 6.1 Medium 2026-01-14
CVE-2025-67833 Paessler PRTG Network Monitor 安全漏洞 — n/a 6.1AI Medium AI 2026-01-14
CVE-2025-67834 Paessler PRTG Network Monitor 安全漏洞 — n/a 6.1AI Medium AI 2026-01-14
CVE-2022-50893 VIAVIWEB Wallpaper Admin 代码问题漏洞 — VIAVIWEB Wallpaper Admin CWE-434 9.8 Critical 2026-01-13
CVE-2023-54341 Webgrind 跨站脚本漏洞 — Webgrind CWE-79 6.1 Medium 2026-01-13
CVE-2023-54339 Webgrind 操作系统命令注入漏洞 — Webgrind CWE-78 9.8 Critical 2026-01-13
CVE-2023-54340 WorkOrder CMS SQL注入漏洞 — WorkOrder CMS CWE-89 8.2 High 2026-01-13
CVE-2023-54330 Linbit csync2 安全漏洞 — Inbit Messenger CWE-121 9.8 Critical 2026-01-13
CVE-2023-54329 Inbit Messenger 安全漏洞 — Inbit Messenger CWE-121 9.8 Critical 2026-01-13
CVE-2022-50932 Kyocera Command Center RX 路径遍历漏洞 — Kyocera Command Center RX CWE-22 7.5 High 2026-01-13
CVE-2022-50926 WAGO 安全漏洞 — WAGO 750-8212 PFC200 CWE-565 9.8 Critical 2026-01-13
CVE-2022-50919 Tdarr 操作系统命令注入漏洞 — Tdarr CWE-78 9.8 Critical 2026-01-13
CVE-2021-47749 YouPHPTube 路径遍历漏洞 — YouPHPTube CWE-22 5.5 Medium 2026-01-13

access:pre-auth 是常见的弱点类别，本平台收录该类弱点关联的 24921 条 CVE 漏洞。