access:pre-auth 类型相关 24887 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞，涵盖18971个CVE。此类漏洞之所以关键，是因为攻击者无需凭证即可直接利用，极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击，常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块，对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2025-11154 | WordPress plugin IDonate 安全漏洞 — IDonate | 6.5AI | Medium AI | 2025-10-27 |
| CVE-2025-10497 | GitLab CE和EE 安全漏洞 — GitLab CWE-770 | 7.5 | High | 2025-10-27 |
| CVE-2025-11974 | GitLab 安全漏洞 — GitLab CWE-770 | 6.5 | Medium | 2025-10-27 |
| CVE-2025-11447 | GitLab CE和EE 安全漏洞 — GitLab CWE-770 | 7.5 | High | 2025-10-27 |
| CVE-2025-27225 | Rocket TRUfusion Enterprise 安全漏洞 — n/a | 7.5AI | High AI | 2025-10-27 |
| CVE-2023-37749 | HubSpot 安全漏洞 — n/a | 5.3AI | Medium AI | 2025-10-27 |
| CVE-2025-55757 | VirtueMart 安全漏洞 — Virtuemart component for Joomla CWE-79 | 6.1 | - | 2025-10-25 |
| CVE-2025-4203 | WordPress plugin wpForo Forum SQL注入漏洞 — wpForo Forum CWE-89 | 7.5 | High | 2025-10-25 |
| CVE-2025-8416 | WordPress plugin Product Filter by WBW SQL注入漏洞 — Product Filter for WooCommerce by WBW CWE-89 | 7.5 | High | 2025-10-25 |
| CVE-2025-11976 | WordPress plugin FuseWP 安全漏洞 — FuseWP – WordPress User Sync to Email List & Marketing Automation (Mailchimp, Constant Contact, ActiveCampaign etc.) CWE-352 | 4.3 | Medium | 2025-10-25 |
| CVE-2025-10637 | WordPress plugin Social Feed Gallery 安全漏洞 — Social Feed Gallery CWE-862 | 5.3 | Medium | 2025-10-25 |
| CVE-2025-9322 | WordPress plugin WP Full Pay SQL注入漏洞 — Stripe Payment Forms by WP Full Pay – Accept Credit Card Payments, Donations & Subscriptions CWE-89 | 7.5 | High | 2025-10-25 |
| CVE-2025-11497 | WordPress plugin Advanced Database Cleaner 安全漏洞 — Advanced Database Cleaner – Optimize & Clean Database to Speed Up Site Performance CWE-20 | 4.3 | Medium | 2025-10-25 |
| CVE-2025-10488 | WordPress plugin Directorist 安全漏洞 — Directorist: AI-Powered Business Directory, Listings & Classified Ads CWE-22 | 8.1 | High | 2025-10-25 |
| CVE-2025-10694 | WordPress plugin User Feedback 安全漏洞 — UserFeedback – Create Interactive Feedback Form, User Surveys, and Polls in Seconds CWE-862 | 5.3 | Medium | 2025-10-25 |
| CVE-2025-12095 | WordPress plugin Simple Registration for WooCommerce 安全漏洞 — Simple Registration for WooCommerce CWE-352 | 8.8 | High | 2025-10-25 |
| CVE-2025-11564 | WordPress plugin Tutor LMS 安全漏洞 — Tutor LMS – eLearning and online course solution CWE-862 | 5.3 | Medium | 2025-10-25 |
| CVE-2025-11238 | WordPress plugin Watu Quiz 跨站脚本漏洞 — Watu Quiz CWE-79 | 7.2 | High | 2025-10-25 |
| CVE-2025-11269 | WordPress plugin Product Filter by WBW 安全漏洞 — Product Filter for WooCommerce by WBW CWE-862 | 5.3 | Medium | 2025-10-25 |
| CVE-2025-11760 | WordPress plugin eRoom 安全漏洞 — eRoom – Webinar & Meeting Plugin for Zoom, Google Meet, Microsoft Teams CWE-200 | 5.3 | Medium | 2025-10-25 |
| CVE-2025-62716 | Plane 输入验证错误漏洞 — plane CWE-79 | 8.1 | High | 2025-10-24 |
| CVE-2025-62714 | Karmada Dashboard 安全漏洞 — dashboard CWE-862 | 7.5 | - | 2025-10-24 |
| CVE-2025-43994 | Dell Storage Manager 访问控制错误漏洞 — Dell Storage Manager CWE-306 | 8.6 | High | 2025-10-24 |
| CVE-2025-43995 | Dell Storage Manager 授权问题漏洞 — Dell Storage Manager CWE-287 | 9.8 | Critical | 2025-10-24 |
| CVE-2025-11576 | WordPress plugin AI Chatbot Free Models – Customer Support, Live Chat, Virtual Assistant 安全漏洞 — AI Chatbot Free Models – Customer Support, Live Chat, Virtual Assistant CWE-1236 | 4.3 | Medium | 2025-10-24 |
| CVE-2025-10861 | WordPress plugin Popup builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers 安全漏洞 — Popup builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers CWE-918 | 7.5 | High | 2025-10-24 |
| CVE-2025-12134 | WordPress plugin ZoloBlocks 安全漏洞 — ZoloBlocks – Gutenberg Block Editor Plugin with Advanced Blocks, Dynamic Content, Templates & Patterns CWE-862 | 5.3 | Medium | 2025-10-24 |
| CVE-2025-12017 | WordPress plugin VNPAY Payment gateway 跨站脚本漏洞 — VNPAY Payment gateway CWE-79 | 6.1 | Medium | 2025-10-24 |
| CVE-2025-11504 | WordPress plugin Quickcreator 信息泄露漏洞 — Quickcreator – AI Blog Writer CWE-532 | 7.5 | High | 2025-10-24 |
| CVE-2025-12028 | WordPress plugin IndieAuth 跨站请求伪造漏洞 — IndieAuth CWE-352 | 8.8 | High | 2025-10-24 |
access:pre-auth 是常见的弱点类别，本平台收录该类弱点关联的 24887 条 CVE 漏洞。