目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1336 元

100%
请我们喝杯咖啡

access:pre-auth 标签下的 CVE 漏洞 24905

access:pre-auth 类型相关 24905 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。

“access:pre-auth”标签标识了无需身份验证即可触发的漏洞，涵盖18971个CVE。此类漏洞之所以关键，是因为攻击者无需凭证即可直接利用，极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击，常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块，对系统安全性构成直接且严重的威胁。

CVE ID 标题 CVSS 风险等级 Published
CVE-2025-14875 WordPress plugin HBLPAY Payment Gateway for WooCommerce 跨站脚本漏洞 — HBLPAY Payment Gateway for WooCommerce CWE-79 6.1 Medium 2026-01-07
CVE-2025-14901 WordPress plugin Bit Form – Contact Form Plugin 安全漏洞 — Bit Form – Custom Contact Form, Multi Step, Conversational Form & Payment Form builder CWE-862 6.5 Medium 2026-01-07
CVE-2025-14904 WordPress plugin Newsletter Email Subscribe 跨站请求伪造漏洞 — Newsletter Email Subscribe CWE-352 4.3 Medium 2026-01-07
CVE-2025-14835 WordPress plugin WP Photo Album Plus 安全漏洞 — WP Photo Album Plus CWE-80 7.1 High 2026-01-07
CVE-2025-15474 AuntyFey Smart Combination Lock 安全漏洞 — AuntyFey Smart Combination Lock CWE-770 6.5 - 2026-01-07
CVE-2025-14468 WordPress plugin AMP for WP – Accelerated Mobile Pages 跨站请求伪造漏洞 — AMP for WP – Accelerated Mobile Pages CWE-352 4.3 Medium 2026-01-07
CVE-2025-14891 WordPress plugin Customer Reviews for WooCommerce 跨站脚本漏洞 — Customer Reviews for WooCommerce CWE-79 6.4 Medium 2026-01-07
CVE-2025-12648 WordPress plugin WP-Members Membership Plugin 安全漏洞 — WP-Members Membership Plugin CWE-552 5.3 Medium 2026-01-07
CVE-2020-36921 RED-V Super Digital Signage System 安全漏洞 — RED-V Super Digital Signage System RXV-A740R CWE-548 7.5 High 2026-01-06
CVE-2020-36922 Sony BRAVIA Digital Signage 安全漏洞 — Sony BRAVIA Digital Signage CWE-497 7.5 High 2026-01-06
CVE-2020-36915 Adtec Digital SignEdje Digital Signage Player 安全漏洞 — SignEdje Digital Signage Player CWE-798 7.5 High 2026-01-06
CVE-2020-36907 Extreme Aerohive HiveOS 安全漏洞 — Aerohive HiveOS CWE-770 7.5 High 2026-01-06
CVE-2025-9637 WordPress plugin Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker 安全漏洞 — Quiz and Survey Master (QSM) – Easy Quiz and Survey Maker CWE-862 6.5 Medium 2026-01-06
CVE-2025-5919 WordPress plugin Appointment Booking and Scheduling Calendar Plugin – WP Timetics 安全漏洞 — Timetics – Appointment Booking & Scheduling CWE-862 6.5 Medium 2026-01-06
CVE-2025-13964 WordPress plugin LearnPress – WordPress LMS Plugin 安全漏洞 — LearnPress – WordPress LMS Plugin for Create and Sell Online Courses CWE-862 5.3 Medium 2026-01-06
CVE-2025-13215 WordPress plugin Shortcodes and extra features for Phlox theme 信息泄露漏洞 — Shortcodes and extra features for Phlox theme CWE-200 5.3 Medium 2026-01-06
CVE-2025-14996 WordPress plugin AS Password Field In Default Registration Form 安全漏洞 — AS Password Field In Default Registration Form CWE-639 9.8 Critical 2026-01-06
CVE-2025-15001 WordPress plugin FS Registration Password 安全漏洞 — FS Registration Password CWE-639 9.8 Critical 2026-01-06
CVE-2025-11370 WordPress plugin Depicter 安全漏洞 — Depicter — Popup & Slider Builder CWE-862 5.3 Medium 2026-01-06
CVE-2025-11723 WordPress plugin Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin 安全特征问题漏洞 — Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin CWE-330 6.5 Medium 2026-01-06
CVE-2025-15364 WordPress plugin Download Manager 安全漏洞 — Download Manager CWE-353 7.3 High 2026-01-06
CVE-2025-68456 Craft CMS 安全漏洞 — cms CWE-770 9.1 - 2026-01-05
CVE-2026-0625 D-Link多款产品 访问控制错误漏洞 — DSL-2640B CWE-306 9.8 - 2026-01-05
CVE-2025-15029 Centreon 安全漏洞 — Infra Monitoring CWE-89 9.8 Critical 2026-01-05
CVE-2025-14124 WordPress plugin Team 安全漏洞 — Team 9.8 - 2026-01-05
CVE-2025-67419 EverShop 安全漏洞 — n/a 7.5 - 2026-01-05
CVE-2025-67427 EverShop 安全漏洞 — n/a 7.5 - 2026-01-05
CVE-2025-15115 Petlibro Smart Pet Feeder Platform 安全漏洞 — Smart Pet Feeder Platform CWE-862 6.5 Medium 2026-01-03
CVE-2025-34171 CasaOS 安全漏洞 — CasaOS CWE-862 - - 2026-01-03
CVE-2026-21446 Webkul Software Bagisto 访问控制错误漏洞 — bagisto CWE-306 9.8 - 2026-01-02

access:pre-auth 是常见的弱点类别，本平台收录该类弱点关联的 24905 条 CVE 漏洞。