目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1336 元

100%
请我们喝杯咖啡

access:pre-auth 标签下的 CVE 漏洞 24905

access:pre-auth 类型相关 24905 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。

“access:pre-auth”标签标识了无需身份验证即可触发的漏洞，涵盖18971个CVE。此类漏洞之所以关键，是因为攻击者无需凭证即可直接利用，极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击，常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块，对系统安全性构成直接且严重的威胁。

CVE ID 标题 CVSS 风险等级 Published
CVE-2025-13231 WordPress plugin Fancy Product Designer 竞争条件问题漏洞 — Fancy Product Designer CWE-362 6.5 Medium 2025-12-16
CVE-2025-13439 WordPress plugin Fancy Product Designer 信息泄露漏洞 — Fancy Product Designer CWE-200 5.9 Medium 2025-12-16
CVE-2025-11991 WordPress plugin JetFormBuilder 安全漏洞 — JetFormBuilder — Dynamic Blocks Form Builder CWE-862 5.3 Medium 2025-12-16
CVE-2025-12809 WordPress plugin Dokan Pro 安全漏洞 — Dokan Pro CWE-862 5.3 Medium 2025-12-16
CVE-2025-13956 WordPress plugin LearnPress – WordPress LMS Plugin 安全漏洞 — LearnPress – WordPress LMS Plugin for Create and Sell Online Courses CWE-862 5.3 Medium 2025-12-16
CVE-2025-63414 Allsky Camera 安全漏洞 — n/a 9.8AI Critical AI 2025-12-16
CVE-2025-14038 EnterpriseDB Hybrid Manager - LTS 安全漏洞 — Hybrid Manager - LTS CWE-862 7.0 High 2025-12-15
CVE-2025-34179 NetSupport Manager 安全漏洞 — Manager CWE-89 9.1AI Critical AI 2025-12-15
CVE-2025-13950 WordPress plugin OneSignal – Web Push Notifications 安全漏洞 — OneSignal – Web Push Notifications CWE-862 5.3 Medium 2025-12-15
CVE-2025-14156 WordPress plugin Fox LMS – WordPress LMS Plugin 输入验证错误漏洞 — Fox LMS – WordPress LMS Plugin CWE-20 9.8 Critical 2025-12-15
CVE-2025-14383 WordPress plugin Booking Calendar SQL注入漏洞 — Booking Calendar CWE-89 7.5 High 2025-12-15
CVE-2025-14709 SGWBox N3 安全漏洞 — sgwbox N3 CWE-120 9.8 Critical 2025-12-15
CVE-2025-11363 WordPress plugin Royal Addons for Elementor 安全漏洞 — Royal Addons for Elementor 7.5AI High AI 2025-12-15
CVE-2025-14712 JHENG GAO Student Learning Assessment and Support System 安全漏洞 — Student Learning Assessment and Support System CWE-497 7.5 High 2025-12-15
CVE-2025-65742 Newgen OmniDocs 安全漏洞 — n/a 9.8AI Critical AI 2025-12-15
CVE-2025-65779 WeKan 安全漏洞 — n/a 8.6AI High AI 2025-12-15
CVE-2025-65835 PhoneGap / Cordova Social Sharing plugin 安全漏洞 — n/a 7.5AI High AI 2025-12-15
CVE-2025-12696 WordPress plugin HelloLeads CRM Form Shortcode 安全漏洞 — HelloLeads CRM Form Shortcode 5.3AI Medium AI 2025-12-14
CVE-2025-13126 WordPress plugin wpForo Forum SQL注入漏洞 — wpForo Forum CWE-89 7.5 High 2025-12-14
CVE-2025-10289 WordPress plugin Filter & Grids SQL注入漏洞 — YMC Filter CWE-89 5.9 Medium 2025-12-13
CVE-2025-9207 WordPress plugin TI WooCommerce Wishlist 输入验证错误漏洞 — TI WooCommerce Wishlist CWE-20 5.3 Medium 2025-12-13
CVE-2025-10738 WordPress plugin URL Shortener Plugin For WordPress SQL注入漏洞 — URL Shortener Plugin For WordPress CWE-89 9.8 Critical 2025-12-13
CVE-2025-12362 WordPress plugin myCred 安全漏洞 — Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred CWE-862 5.3 Medium 2025-12-13
CVE-2025-11693 WordPress plugin Export WP Page to Static HTML & PDF 信息泄露漏洞 — Export WordPress Pages to Static HTML & PDF — Static Site Export CWE-200 9.8 Critical 2025-12-13
CVE-2025-13092 WordPress plugin Devs CRM – Manage tasks, attendance and teams all together 安全漏洞 — Devs CRM – Manage tasks, attendance and teams all together CWE-862 5.3 Medium 2025-12-13
CVE-2025-14365 WordPress plugin Eyewear prescription form 安全漏洞 — Eyewear prescription form CWE-862 5.3 Medium 2025-12-13
CVE-2025-14394 WordPress plugin Popover Windows 跨站请求伪造漏洞 — Popover Windows CWE-352 4.3 Medium 2025-12-13
CVE-2025-11707 WordPress plugin Login Lockdown & Protection 安全特征问题漏洞 — Login Lockdown & Protection CWE-330 5.3 Medium 2025-12-13
CVE-2025-12077 WordPress plugin WP to LinkedIn Auto Publish 跨站脚本漏洞 — WP to LinkedIn Auto Publish CWE-79 6.1 Medium 2025-12-13
CVE-2025-14440 WordPress plugin JAY Login & Register 安全漏洞 — JAY Login & Register CWE-565 9.8 Critical 2025-12-13

access:pre-auth 是常见的弱点类别，本平台收录该类弱点关联的 24905 条 CVE 漏洞。