目标达成 感谢每一位支持者 — 我们达成了 100% 目标!

目标: 1000 元 · 已筹: 1336

100%

access:pre-auth 标签下的 CVE 漏洞 24887

access:pre-auth 类型相关 24887 条 CVE 漏洞,含 AI 中文分析、CVSS、参考链接与 POC。

“access:pre-auth”标签标识了无需身份验证即可触发的漏洞,涵盖18971个CVE。此类漏洞之所以关键,是因为攻击者无需凭证即可直接利用,极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击,常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块,对系统安全性构成直接且严重的威胁。

CVE ID 标题 CVSS 风险等级 Published
CVE-2025-12456 WordPress plugin Centangle-Team 跨站请求伪造漏洞 — Centangle-Team CWE-352 6.1 Medium 2025-11-04
CVE-2025-11890 WordPress plugin Crypto Payment Gateway with Payeer for WooCommerce 安全漏洞 — Crypto Payment Gateway with Payeer for WooCommerce CWE-862 7.5 High 2025-11-04
CVE-2025-12400 WordPress plugin LMB Box Smileys 跨站请求伪造漏洞 — LMB^Box Smileys CWE-352 6.1 Medium 2025-11-04
CVE-2025-12157 WordPress plugin Simple User Capabilities 安全漏洞 — Simple User Capabilities CWE-862 5.3 Medium 2025-11-04
CVE-2025-12410 WordPress plugin SH Contextual Help 跨站请求伪造漏洞 — SH Contextual Help CWE-352 6.1 Medium 2025-11-04
CVE-2025-11758 WordPress plugin All in One Time Clock Lite 安全漏洞 — All in One Time Clock Lite – Tracking Employee Time Has Never Been Easier CWE-862 6.5 Medium 2025-11-04
CVE-2025-12350 WordPress plugin DominoKit 安全漏洞 — DominoKit CWE-862 5.3 Medium 2025-11-04
CVE-2025-12413 WordPress plugin Social Media WPCF7 Stop Words 跨站请求伪造漏洞 — WPCF7 Stop words CWE-352 5.4 Medium 2025-11-04
CVE-2025-12416 WordPress plugin Pagerank Tools 跨站请求伪造漏洞 — Pagerank tools CWE-352 6.1 Medium 2025-11-04
CVE-2025-12412 WordPress plugin Top Bar Notification 跨站请求伪造漏洞 — Top Bar Notification CWE-352 6.1 Medium 2025-11-04
CVE-2025-12188 WordPress plugin Posts Navigation Links for Sections and Headings Free by WP Masters 跨站请求伪造漏洞 — Posts Navigation Links for Sections and Headings – Free by WP Masters CWE-352 4.3 Medium 2025-11-04
CVE-2025-11008 WordPress plugin CE21 Suite 日志信息泄露漏洞 — CE21 Suite CWE-532 9.8 Critical 2025-11-04
CVE-2025-12069 WordPress plugin WP Global Screen Options 跨站请求伪造漏洞 — WP Global Screen Options CWE-352 4.3 Medium 2025-11-04
CVE-2025-11007 WordPress plugin CE21 Suite 访问控制错误漏洞 — CE21 Suite CWE-306 9.8 Critical 2025-11-04
CVE-2025-12401 WordPress plugin Label Plugins 跨站请求伪造漏洞 — Label Plugins CWE-352 6.1 Medium 2025-11-04
CVE-2025-12070 WordPress plugin ViaAds 跨站请求伪造漏洞 — ViaAds CWE-352 4.3 Medium 2025-11-04
CVE-2025-8558 Proofpoint Insider Threat Management Server 安全漏洞 — Insider Threat Management (ITM) Server CWE-306 6.3AI Medium AI 2025-11-03
CVE-2025-12463 Geutebruck G-Cam E-Series 安全漏洞 — G-Cam CWE-89 9.8 Critical 2025-11-03
CVE-2025-11953 React Native Community CLI 安全漏洞 CWE-78 9.8 Critical 2025-11-03
CVE-2025-8900 WordPress plugin Doccure Core 安全漏洞 — Doccure Core CWE-269 9.8 Critical 2025-11-03
CVE-2025-10487 WordPress plugin Advanced Ads – Ad Manager & AdSense 代码注入漏洞 — Advanced Ads – Ad Manager & AdSense CWE-94 7.3 High 2025-11-01
CVE-2025-11499 WordPress plugin Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent 代码问题漏洞 — Tablesome Table – Contact Form DB – WPForms, CF7, Gravity, Forminator, Fluent CWE-434 9.8 Critical 2025-11-01
CVE-2025-11995 WordPress plugin Community Events 跨站脚本漏洞 — Community Events CWE-79 7.2 High 2025-11-01
CVE-2025-11833 WordPress plugin Post SMTP 安全漏洞 — Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App CWE-862 9.8 Critical 2025-11-01
CVE-2025-11174 WordPress plugin Document Library Lite 授权问题漏洞 — Document Library Lite CWE-285 5.3 Medium 2025-11-01
CVE-2025-11816 WordPress plugin WP Legal Pages 安全漏洞 — Privacy Policy Generator – WPLP Legal Pages CWE-862 5.3 Medium 2025-11-01
CVE-2025-12521 WordPress plugin Analytify Pro 信息泄露漏洞 — Analytify Pro CWE-200 5.3 Medium 2025-10-31
CVE-2025-12115 WordPress plugin WPC Name Your Price for WooCommerce 安全漏洞 — WPC Name Your Price for WooCommerce CWE-602 7.5 High 2025-10-31
CVE-2025-12041 WordPress plugin ERI File Library 安全漏洞 — ERI File Library CWE-862 5.3 Medium 2025-10-31
CVE-2025-8383 WordPress plugin Depicter 跨站请求伪造漏洞 — Depicter — Popup & Slider Builder CWE-352 4.3 Medium 2025-10-31

access:pre-auth 是常见的弱点类别,本平台收录该类弱点关联的 24887 条 CVE 漏洞。