目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1336 元

100%
请我们喝杯咖啡

access:pre-auth 标签下的 CVE 漏洞 24887

access:pre-auth 类型相关 24887 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。

“access:pre-auth”标签标识了无需身份验证即可触发的漏洞，涵盖18971个CVE。此类漏洞之所以关键，是因为攻击者无需凭证即可直接利用，极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击，常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块，对系统安全性构成直接且严重的威胁。

CVE ID 标题 CVSS 风险等级 Published
CVE-2025-13589 Otsuka Firewall Management Service 跨站脚本漏洞 — FMS CWE-79 6.1AI Medium AI 2025-11-24
CVE-2025-63435 Xtool AnyScan App 安全漏洞 — n/a 7.5AI High AI 2025-11-24
CVE-2025-63958 Millensys Vision Tools Workspace 安全漏洞 — n/a 9.8AI Critical AI 2025-11-24
CVE-2025-13562 D-Link DIR-852 命令注入漏洞 — DIR-852 CWE-77 7.3 High 2025-11-23
CVE-2025-13526 WordPress plugin OneClick Chat to Order 信息泄露漏洞 — OneClick Chat to Order CWE-200 7.5 High 2025-11-22
CVE-2025-13318 WordPress plugin Booking Calendar Contact Form 安全漏洞 — Booking Calendar Contact Form CWE-862 5.3 Medium 2025-11-22
CVE-2025-13384 WordPress plugin CP Contact Form with PayPal 安全漏洞 — CP Contact Form with PayPal CWE-862 7.5 High 2025-11-22
CVE-2025-12752 WordPress plugin Subscriptions & Memberships for PayPal 数据伪造问题漏洞 — Subscriptions & Memberships for PayPal CWE-345 5.3 Medium 2025-11-22
CVE-2025-12877 WordPress plugin IDonate – Blood Donation, Request And Donor Management System 安全漏洞 — IDonate – Blood Donation, Request And Donor Management System CWE-862 5.3 Medium 2025-11-22
CVE-2025-13317 WordPress plugin Appointment Booking Calendar 安全漏洞 — Appointment Booking Calendar CWE-862 5.3 Medium 2025-11-22
CVE-2025-11936 wolfSSL 安全漏洞 — wolfSSL CWE-20 7.5 - 2025-11-21
CVE-2025-11933 wolfSSL 安全漏洞 — wolfSSL CWE-20 7.5 - 2025-11-21
CVE-2025-11087 WordPress plugin Zegen Core 跨站请求伪造漏洞 — Zegen Core CWE-352 8.8 High 2025-11-21
CVE-2025-12747 WordPress plugin Tainacan 安全漏洞 — Tainacan CWE-552 5.3 Medium 2025-11-21
CVE-2025-13357 HashiCorp Vault Terraform Provider 安全漏洞 — Tooling CWE-1188 7.4 High 2025-11-21
CVE-2025-11127 WordPress plugin Mstoreapp Mobile App和Mstoreapp Mobile Multivendor 安全漏洞 — Mstoreapp Mobile App 7.5 - 2025-11-21
CVE-2025-12160 WordPress plugin Simple User Registration 跨站脚本漏洞 — Simple User Registration CWE-79 7.2 High 2025-11-21
CVE-2025-13138 WordPress plugin WP Directory Kit SQL注入漏洞 — WP Directory Kit CWE-89 7.5 High 2025-11-21
CVE-2025-12039 WordPress plugin BigBuy Dropshipping Connector for WooCommerce 信息泄露漏洞 — BigBuy Dropshipping Connector for WooCommerce CWE-200 5.3 Medium 2025-11-21
CVE-2025-11771 WordPress plugin Cryptocurrency (Token), Launchpad (Presale), ICO & IDO, Airdrop by TokenICO 访问控制错误漏洞 — Cryptocurrency (Token), Launchpad (Presale), ICO & IDO, Airdrop by TokenICO CWE-306 5.3 Medium 2025-11-21
CVE-2025-11456 WordPress plugin ELEX WordPress HelpDesk & Customer Ticketing System 代码问题漏洞 — ELEX WordPress HelpDesk & Customer Ticketing System CWE-434 9.8 Critical 2025-11-21
CVE-2025-12135 WordPress plugin WPBookit 跨站脚本漏洞 — WPBookit CWE-79 7.2 High 2025-11-21
CVE-2025-13134 WordPress plugin AuthorSure 跨站请求伪造漏洞 — AuthorSure CWE-352 6.1 Medium 2025-11-21
CVE-2025-13159 WordPress plugin Flo Forms 跨站脚本漏洞 — Flo Forms – Easy Drag & Drop Form Builder CWE-79 7.1 High 2025-11-21
CVE-2025-11885 WordPress plugin EchBay Admin Security 跨站脚本漏洞 — EchBay Admin Security CWE-79 6.1 Medium 2025-11-21
CVE-2025-13142 WordPress plugin Custom Post Type 跨站请求伪造漏洞 — Custom Post Type CWE-352 4.3 Medium 2025-11-21
CVE-2025-12894 WordPress plugin Import WP 安全漏洞 — Import WP – Export and Import CSV and XML files to WordPress CWE-552 5.3 Medium 2025-11-21
CVE-2025-12170 WordPress plugin Checkbox 安全漏洞 — Checkbox CWE-862 5.3 Medium 2025-11-21
CVE-2025-12746 WordPress plugin Tainacan 跨站脚本漏洞 — Tainacan CWE-79 6.1 Medium 2025-11-21
CVE-2025-11368 WordPress plugin LearnPress 信息泄露漏洞 — LearnPress – WordPress LMS Plugin for Create and Sell Online Courses CWE-200 5.3 Medium 2025-11-21

access:pre-auth 是常见的弱点类别，本平台收录该类弱点关联的 24887 条 CVE 漏洞。