目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1336 元

100%
请我们喝杯咖啡

access:pre-auth 标签下的 CVE 漏洞 24887

access:pre-auth 类型相关 24887 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。

“access:pre-auth”标签标识了无需身份验证即可触发的漏洞，涵盖18971个CVE。此类漏洞之所以关键，是因为攻击者无需凭证即可直接利用，极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击，常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块，对系统安全性构成直接且严重的威胁。

CVE ID 标题 CVSS 风险等级 Published
CVE-2025-13748 WordPress plugin Fluent Forms 安全漏洞 — Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder CWE-639 5.3 Medium 2025-12-06
CVE-2025-13894 WordPress plugin CSV Sumotto 跨站脚本漏洞 — CSV Sumotto CWE-79 6.1 Medium 2025-12-06
CVE-2025-13308 WordPress plugin Application Passwords 跨站脚本漏洞 — Application Passwords CWE-79 5.4 Medium 2025-12-06
CVE-2025-13666 WordPress plugin Helloprint 安全漏洞 — Plug your WooCommerce into the largest catalog of customized print products from Helloprint CWE-862 5.3 Medium 2025-12-06
CVE-2025-13629 WordPress plugin WP Landing Page 跨站请求伪造漏洞 — WP Landing Page CWE-352 4.3 Medium 2025-12-06
CVE-2025-12673 WordPress plugin Flex QR Code Generator 代码问题漏洞 — Flex QR Code Generator CWE-434 9.8 Critical 2025-12-06
CVE-2025-12720 WordPress plugin g-FFL Cockpit 授权问题漏洞 — g-FFL Cockpit CWE-285 5.3 Medium 2025-12-06
CVE-2025-12721 WordPress plugin g-FFL Cockpit 安全漏洞 — g-FFL Cockpit CWE-862 5.3 Medium 2025-12-06
CVE-2025-13137 WordPress plugin Live Sales Notification for Woocommerce 跨站脚本漏洞 — Live Sales Notification for Woocommerce – Woomotiv CWE-79 6.1 Medium 2025-12-06
CVE-2025-13626 WordPress plugin myLCO 跨站脚本漏洞 — myLCO CWE-79 6.1 Medium 2025-12-06
CVE-2025-11263 WordPress plugin Link Whisper Free 跨站脚本漏洞 — Link Whisper Free CWE-79 6.1 Medium 2025-12-06
CVE-2025-12510 WordPress plugin Widgets for Google Reviews 跨站脚本漏洞 — Widgets for Google Reviews CWE-79 7.2 High 2025-12-06
CVE-2025-46603 Dell CloudBoost Virtual Appliance 安全漏洞 — CloudBoost Virtual Appliance CWE-307 7.0 High 2025-12-05
CVE-2020-36882 Flexsense DiskBoss 代码问题漏洞 — DiskBoss CWE-434 7.5 - 2025-12-05
CVE-2020-36881 Flexsense DiskBoss 缓冲区错误漏洞 — DiskBoss CWE-119 8.4 - 2025-12-05
CVE-2025-34256 Advantech WISE-DeviceOn Server 安全漏洞 — WISE-DeviceOn Server CWE-321 10.0 Critical 2025-12-05
CVE-2020-36879 Flexsense DiskBoss 代码问题漏洞 — DiskBoss CWE-428 9.8 - 2025-12-05
CVE-2020-36878 ReQuest Serious Play Media Player 安全漏洞 — ReQuest Serious Play Media Player CWE-73 7.5 - 2025-12-05
CVE-2020-36877 ReQuest Serious Play F3 Media Server 操作系统命令注入漏洞 — ReQuest Serious Play Pro CWE-78 9.8 - 2025-12-05
CVE-2020-36876 ReQuest Serious Play F3 Media Server 日志信息泄露漏洞 — ReQuest Serious Play Pro CWE-532 8.7 High 2025-12-05
CVE-2025-14092 Edimax BR-6478AC 操作系统命令注入漏洞 — BR-6478AC V3 CWE-78 4.7 Medium 2025-12-05
CVE-2025-14090 AMTT Hotel Broadband Operation System SQL注入漏洞 — Hotel Broadband Operation System CWE-89 4.7 Medium 2025-12-05
CVE-2025-13620 WordPress plugin Wp Social Login and Register Social Counter 安全漏洞 — Wp Social Login and Register Social Counter CWE-862 5.3 Medium 2025-12-05
CVE-2025-12876 WordPress plugin Projectopia 安全漏洞 — Projectopia – Project Management Tool CWE-862 5.3 Medium 2025-12-05
CVE-2025-12879 WordPress plugin User Generator and Importer 跨站请求伪造漏洞 — User Generator and Importer CWE-352 8.8 High 2025-12-05
CVE-2025-12851 WordPress plugin My auctions allegro 安全漏洞 — My auctions allegro CWE-98 8.1 High 2025-12-05
CVE-2025-12130 WordPress plugin WC Vendors 跨站请求伪造漏洞 — WC Vendors – WooCommerce Multivendor, WooCommerce Marketplace, Product Vendors CWE-352 4.3 Medium 2025-12-05
CVE-2025-13684 WordPress plugin ARK Related Posts 跨站请求伪造漏洞 — ARK Related Posts CWE-352 4.3 Medium 2025-12-05
CVE-2025-12850 WordPress plugin My auctions allegro SQL注入漏洞 — My auctions allegro CWE-89 7.5 High 2025-12-05
CVE-2025-12093 WordPress plugin Voidek Employee Portal 安全漏洞 — Voidek Employee Portal CWE-862 5.3 Medium 2025-12-05

access:pre-auth 是常见的弱点类别，本平台收录该类弱点关联的 24887 条 CVE 漏洞。