目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1336 元

100%
请我们喝杯咖啡

access:pre-auth 标签下的 CVE 漏洞 24887

access:pre-auth 类型相关 24887 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。

“access:pre-auth”标签标识了无需身份验证即可触发的漏洞，涵盖18971个CVE。此类漏洞之所以关键，是因为攻击者无需凭证即可直接利用，极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击，常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块，对系统安全性构成直接且严重的威胁。

CVE ID 标题 CVSS 风险等级 Published
CVE-2025-11999 WordPress plugin Add Multiple Marker 安全漏洞 — Multi Location Marker CWE-862 5.3 Medium 2025-11-11
CVE-2025-11986 WordPress plugin Crypto 访问控制错误漏洞 — Crypto Tool CWE-306 5.3 Medium 2025-11-11
CVE-2025-11532 WordPress plugin Wisly 安全漏洞 — Wisly CWE-639 5.3 Medium 2025-11-11
CVE-2025-11170 WordPress plugin WP移行専用プラグイン for CPI 代码问题漏洞 — WP移行専用プラグイン for CPI CWE-434 9.8 Critical 2025-11-11
CVE-2025-11457 WordPress plugin EasyCommerce 安全漏洞 — EasyCommerce – AI-Powered WordPress Ecommerce Plugin to Sell Digital Products, Subscriptions & Physical Goods CWE-269 9.8 Critical 2025-11-11
CVE-2025-12813 WordPress plugin Holiday class post calendar 代码注入漏洞 — Holiday class post calendar CWE-94 9.8 Critical 2025-11-11
CVE-2025-12021 WordPress plugin WP-OAuth 跨站脚本漏洞 — WP-OAuth CWE-79 6.1 Medium 2025-11-11
CVE-2025-12588 WordPress plugin USB Qr Code Scanner For Woocommerce 跨站请求伪造漏洞 — USB Qr Code Scanner For Woocommerce CWE-352 4.3 Medium 2025-11-11
CVE-2025-12590 WordPress plugin YSlider 跨站请求伪造漏洞 — YSlider CWE-352 6.1 Medium 2025-11-11
CVE-2025-12132 WordPress plugin WP Custom Admin Login Page Logo 跨站请求伪造漏洞 — WP Custom Admin Login Page Logo CWE-352 4.3 Medium 2025-11-11
CVE-2025-11997 WordPress plugin Document Pro Elementor 信息泄露漏洞 — Document Pro Elementor – Documentation & Knowledge Base CWE-200 5.3 Medium 2025-11-11
CVE-2025-12589 WordPress plugin WP-Walla 跨站请求伪造漏洞 — WP-Walla CWE-352 6.1 Medium 2025-11-11
CVE-2025-11451 WordPress plugin Auto Amazon Links – Amazon Associates Affiliate Plugin 安全漏洞 — Auto Amazon Links – Amazon Associates Affiliate Plugin CWE-73 7.5 High 2025-11-11
CVE-2025-11886 WordPress plugin CTL Arcade Lite 跨站请求伪造漏洞 — CTL Arcade Lite CWE-352 4.3 Medium 2025-11-11
CVE-2025-11996 WordPress plugin Find Unused Images 安全漏洞 — Find Unused Images CWE-862 5.3 Medium 2025-11-11
CVE-2025-11988 WordPress plugin Crypto 安全漏洞 — Crypto Tool CWE-862 5.3 Medium 2025-11-11
CVE-2025-11891 WordPress plugin Shelf Planner 安全漏洞 — Shelf Planner Inventory Management for WooCommerce CWE-538 5.3 Medium 2025-11-11
CVE-2025-11894 WordPress plugin Shelf Planner 安全漏洞 — Shelf Planner Inventory Management for WooCommerce CWE-862 5.3 Medium 2025-11-11
CVE-2025-42924 SAP S/4HANA 输入验证错误漏洞 — SAP S/4HANA landscape (SAP E-Recruiting BSP) CWE-601 6.1 Medium 2025-11-11
CVE-2025-42919 SAP NetWeaver Application Server Java 路径遍历漏洞 — SAP NetWeaver Application Server Java CWE-22 5.3 Medium 2025-11-11
CVE-2025-42893 SAP Business Connector 输入验证错误漏洞 — SAP Business Connector CWE-601 6.1 Medium 2025-11-11
CVE-2025-42886 SAP Business Connector 跨站脚本漏洞 — SAP Business Connector CWE-79 6.1 Medium 2025-11-11
CVE-2025-42885 SAP HANA 访问控制错误漏洞 — SAP HANA 2.0 (hdbrss) CWE-306 5.8 Medium 2025-11-11
CVE-2025-42884 SAP NetWeaver Enterprise Portal 安全漏洞 — SAP NetWeaver Enterprise Portal CWE-943 6.5 Medium 2025-11-11
CVE-2021-4462 Employee Records System 安全漏洞 — Employee Records System CWE-434 9.8 - 2025-11-10
CVE-2018-25124 Rainbowfish RainbowFish PacsOne Server 安全漏洞 — PacsOne Server CWE-22 7.5 - 2025-11-10
CVE-2025-64513 milvus 授权问题漏洞 — milvus CWE-287 9.8 - 2025-11-10
CVE-2025-43723 Dell PowerScale OneFS 加密问题漏洞 — PowerScale OneFS CWE-327 5.9 Medium 2025-11-10
CVE-2025-41731 Jumo variTRON300 安全特征问题漏洞 — variTRON300 CWE-338 7.4 High 2025-11-10
CVE-2025-12868 CyberTutor New Site Server 安全漏洞 — New Site Server CWE-603 9.8 Critical 2025-11-10

access:pre-auth 是常见的弱点类别，本平台收录该类弱点关联的 24887 条 CVE 漏洞。