目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1336 元

100%
请我们喝杯咖啡

access:pre-auth 标签下的 CVE 漏洞 24905

access:pre-auth 类型相关 24905 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。

“access:pre-auth”标签标识了无需身份验证即可触发的漏洞，涵盖18971个CVE。此类漏洞之所以关键，是因为攻击者无需凭证即可直接利用，极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击，常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块，对系统安全性构成直接且严重的威胁。

CVE ID 标题 CVSS 风险等级 Published
CVE-2025-14539 WordPress plugin The Shortcode Ajax 代码注入漏洞 — Shortcode Ajax CWE-94 5.4 Medium 2025-12-13
CVE-2025-12076 WordPress plugin Social Media Auto Publish 跨站脚本漏洞 — Social Media Auto Publish CWE-79 6.1 Medium 2025-12-13
CVE-2025-13077 WordPress plugin payamito sms woocommerce SQL注入漏洞 — افزونه پیامک ووکامرس فوق حرفه ای (جدید) payamito sms woocommerce CWE-89 7.5 High 2025-12-13
CVE-2025-13093 WordPress plugin Devs CRM – Manage tasks, attendance and teams all together 安全漏洞 — Devs CRM – Manage tasks, attendance and teams all together CWE-862 5.3 Medium 2025-12-13
CVE-2025-14451 WordPress plugin Solutions Ad Manager 输入验证错误漏洞 — Solutions Ad Manager CWE-601 4.7 Medium 2025-12-13
CVE-2025-9218 WordPress plugin rtMedia for WordPress、BuddyPress和bbPress 安全漏洞 — rtMedia for WordPress, BuddyPress and bbPress CWE-862 3.7 Low 2025-12-13
CVE-2025-14475 WordPress plugin Extensive VC Addons for WPBakery page builder 安全漏洞 — Extensive VC Addons for WPBakery page builder CWE-98 8.1 High 2025-12-13
CVE-2025-14462 WordPress plugin Lucky Draw Contests 跨站请求伪造漏洞 — Lucky Draw Contests CWE-352 4.3 Medium 2025-12-13
CVE-2025-14366 WordPress plugin Eyewear prescription form 安全漏洞 — Eyewear prescription form CWE-862 5.3 Medium 2025-12-13
CVE-2025-14454 WordPress plugin Image Slider by Ays- Responsive Slider and Carousel 跨站请求伪造漏洞 — Image Slider by Ays- Responsive Slider and Carousel CWE-352 4.3 Medium 2025-12-13
CVE-2025-13089 WordPress plugin WP Directory Kit SQL注入漏洞 — WP Directory Kit CWE-89 7.5 High 2025-12-13
CVE-2025-13970 OpenPLC Runtime version 3 跨站请求伪造漏洞 — OpenPLC_V3 CWE-352 8.0 High 2025-12-13
CVE-2025-14611 Gladinet CentreStack 安全漏洞 — CentreStack and TrioFox 9.8AI Critical AI 2025-12-12
CVE-2025-36743 SolarEdge SE3680H 安全漏洞 — SE3680H 9.8AI Critical AI 2025-12-12
CVE-2025-36744 SolarEdge SE3680H 安全漏洞 — SE3680H 7.5AI High AI 2025-12-12
CVE-2025-12407 WordPress plugin Events Manager 跨站请求伪造漏洞 — Events Manager – Calendar, Bookings, Tickets, and more! CWE-352 4.3 Medium 2025-12-12
CVE-2025-12408 WordPress plugin Events Manager 信息泄露漏洞 — Events Manager – Calendar, Bookings, Tickets, and more! CWE-200 5.3 Medium 2025-12-12
CVE-2025-14159 WordPress plugin Secure Copy Content Protection and Content Locking 跨站请求伪造漏洞 — Secure Copy Content Protection and Content Locking CWE-352 4.3 Medium 2025-12-12
CVE-2025-14442 WordPress plugin Secure Copy Content Protection and Content Locking 安全漏洞 — Secure Copy Content Protection and Content Locking CWE-552 5.3 Medium 2025-12-12
CVE-2025-12841 WordPress plugin Bookit 安全漏洞 — Bookit 7.5AI High AI 2025-12-12
CVE-2025-12348 WordPress plugin Icegram Express 访问控制错误漏洞 — Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress CWE-306 5.3 Medium 2025-12-12
CVE-2025-14169 WordPress plugin FunnelKit - Funnel Builder for WooCommerce Checkout SQL注入漏洞 — FunnelKit – Funnel Builder for WooCommerce Checkout CWE-89 7.5 High 2025-12-12
CVE-2025-14049 WordPress plugin VikRentItems Flexible Rental Management System 跨站脚本漏洞 — VikRentItems Flexible Rental Management System CWE-79 6.1 Medium 2025-12-12
CVE-2025-67728 Fireshare 命令注入漏洞 — fireshare CWE-77 9.8 Critical 2025-12-12
CVE-2025-12655 WordPress plugin Hippoo Mobile App for WooCommerce 安全漏洞 — Hippoo Mobile App for WooCommerce CWE-862 5.3 Medium 2025-12-12
CVE-2025-14068 WordPress plugin WPNakama SQL注入漏洞 — WPNakama – Team and multi-Client Collaboration, Editorial and Project Management CWE-89 7.5 High 2025-12-12
CVE-2025-13660 WordPress plugin Guest Support 信息泄露漏洞 — Guest Support CWE-200 5.3 Medium 2025-12-12
CVE-2025-12570 WordPress plugin Fancy Product Designer 跨站脚本漏洞 — Fancy Product Designer CWE-79 7.2 High 2025-12-12
CVE-2025-14138 WordPress plugin WPLG Default Mail From 跨站脚本漏洞 — WPLG Default Mail From CWE-79 6.1 Medium 2025-12-12
CVE-2025-13366 WordPress plugin Rabbit Hole 跨站请求伪造漏洞 — Rabbit Hole CWE-352 4.3 Medium 2025-12-12

access:pre-auth 是常见的弱点类别，本平台收录该类弱点关联的 24905 条 CVE 漏洞。