目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1336 元

100%
请我们喝杯咖啡

access:pre-auth 标签下的 CVE 漏洞 24887

access:pre-auth 类型相关 24887 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。

“access:pre-auth”标签标识了无需身份验证即可触发的漏洞，涵盖18971个CVE。此类漏洞之所以关键，是因为攻击者无需凭证即可直接利用，极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击，常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块，对系统安全性构成直接且严重的威胁。

CVE ID 标题 CVSS 风险等级 Published
CVE-2025-57618 StarNet FastX 安全漏洞 — n/a 9.8AI Critical AI 2025-10-14
CVE-2025-9713 Ivanti Endpoint Manager 路径遍历漏洞 — Endpoint Manager CWE-22 8.8 High 2025-10-13
CVE-2025-59836 Omni 安全漏洞 — omni CWE-703 5.3 Medium 2025-10-13
CVE-2025-62364 Text Generation Web UI 后置链接漏洞 — text-generation-webui CWE-59 6.2 Medium 2025-10-13
CVE-2025-62170 rAthena 资源管理错误漏洞 — rathena CWE-416 7.5 High 2025-10-13
CVE-2025-10720 WordPress plugin WP Private Content Plus 安全漏洞 — WP Private Content Plus 8.2AI High AI 2025-10-13
CVE-2025-11672 EBM Uniweb/SoliPACS WebServer 访问控制错误漏洞 — Uniweb/SoliPACS WebServer CWE-306 5.3 Medium 2025-10-13
CVE-2025-11671 EBM Uniweb/SoliPACS WebServer 访问控制错误漏洞 — Uniweb/SoliPACS WebServer CWE-306 5.3 Medium 2025-10-13
CVE-2025-9265 Kiloview NDI N30 安全漏洞 — NDI CWE-346 7.5AI High AI 2025-10-13
CVE-2025-11652 UTT 518G 安全漏洞 — 进取 518G CWE-120 8.8 High 2025-10-13
CVE-2025-61884 Oracle E-Business Suite 安全漏洞 — Oracle Configurator 7.5 High 2025-10-12
CVE-2025-10376 WordPress plugin Course Redirects for Learndash 跨站请求伪造漏洞 — Course Redirects for Learndash Plugin CWE-352 4.3 Medium 2025-10-11
CVE-2025-10375 WordPress plugin Web Accessibility By accessiBe 跨站请求伪造漏洞 — Web Accessibility by accessiBe CWE-352 4.3 Medium 2025-10-11
CVE-2025-8484 WordPress plugin Code Quality Control Tool 信息泄露漏洞 — Code Quality Control Tool CWE-200 5.3 Medium 2025-10-11
CVE-2025-8682 WordPress plugin Newsup 安全漏洞 — Newsup CWE-862 4.3 Medium 2025-10-11
CVE-2025-9626 WordPress plugin Page Blocks 跨站请求伪造漏洞 — Page Blocks CWE-352 4.3 Medium 2025-10-11
CVE-2025-6439 WordPress plugin WooCommerce Designer Pro 路径遍历漏洞 — WooCommerce Designer Pro CWE-22 9.8 Critical 2025-10-11
CVE-2025-9621 WordPress plugin WidgetPack Comment System 跨站请求伪造漏洞 — WidgetPack Comment System CWE-352 4.3 Medium 2025-10-11
CVE-2025-11167 WordPress plugin CM Registration 输入验证错误漏洞 — CM Registration – Tailored tool for seamless login and invitation-based registrations CWE-601 4.7 Medium 2025-10-11
CVE-2025-11518 WordPress plugin WPC Smart Wishlist for WooCommerce 安全漏洞 — WPC Smart Wishlist for WooCommerce CWE-639 5.3 Medium 2025-10-11
CVE-2025-11254 WordPress plugin Contest Gallery – Upload, Vote & Sell with PayPal and Stripe 安全漏洞 — Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe CWE-1236 4.3 Medium 2025-10-11
CVE-2025-6553 WordPress plugin Ovatheme Events Manager 代码问题漏洞 — Ovatheme Events Manager CWE-434 9.8 Critical 2025-10-11
CVE-2025-9196 WordPress plugin Trinity Audio 信息泄露漏洞 — Trinity Audio – Text to Speech AI audio player to convert content into audio CWE-200 5.3 Medium 2025-10-11
CVE-2025-11533 WordPress plugin WP Freeio 安全漏洞 — WP Freeio CWE-269 9.8 Critical 2025-10-11
CVE-2025-11380 WordPress plugin Everest Backup 安全漏洞 — Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin CWE-862 5.9 Medium 2025-10-11
CVE-2025-62158 Frappe Learning 信息泄露漏洞 — lms CWE-200 7.5AI High AI 2025-10-10
CVE-2025-61928 Better Auth 安全漏洞 — better-auth CWE-285 7.5AI High AI 2025-10-09
CVE-2025-35061 Newforma Project Center Server 安全漏洞 — Project Center CWE-294 5.9 Medium 2025-10-09
CVE-2025-35062 Newforma Project Center Server 安全漏洞 — Project Center CWE-276 5.3 Medium 2025-10-09
CVE-2025-35059 Newforma Project Center Server 安全漏洞 — Project Center CWE-601 4.3 Medium 2025-10-09

access:pre-auth 是常见的弱点类别，本平台收录该类弱点关联的 24887 条 CVE 漏洞。