目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1336 元

100%
请我们喝杯咖啡

access:pre-auth 标签下的 CVE 漏洞 24886

access:pre-auth 类型相关 24886 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。

“access:pre-auth”标签标识了无需身份验证即可触发的漏洞，涵盖18971个CVE。此类漏洞之所以关键，是因为攻击者无需凭证即可直接利用，极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击，常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块，对系统安全性构成直接且严重的威胁。

CVE ID 标题 CVSS 风险等级 Published
CVE-2025-51990 XWiki Platform 安全漏洞 — n/a 4.8 - 2025-08-20
CVE-2025-57788 Commvault 安全漏洞 — CommCell CWE-259 9.4 - 2025-08-20
CVE-2024-53495 my-site 安全漏洞 — n/a 7.5 - 2025-08-20
CVE-2024-57152 my-site 安全漏洞 — n/a 7.5 - 2025-08-20
CVE-2025-8450 Fortra FileCatalyst Workflow 安全漏洞 — FileCatalyst CWE-434 8.2 High 2025-08-19
CVE-2025-41689 Wiesemann & Theis Motherbox 3 访问控制错误漏洞 — Motherbox 3 CWE-306 7.5 High 2025-08-19
CVE-2025-7670 WordPress plugin JS Archive List SQL注入漏洞 — JS Archive List CWE-89 7.5 High 2025-08-19
CVE-2025-8723 WordPress plugin Cloudflare Image Resizing 代码注入漏洞 — Cloudflare Image Resizing – Optimize & Accelerate Your Images CWE-94 9.8 Critical 2025-08-19
CVE-2025-6758 WordPress plugin Real Spaces 安全漏洞 — Real Spaces - WordPress Properties Directory Theme CWE-269 9.8 Critical 2025-08-19
CVE-2025-8218 WordPress plugin Real Spaces 安全漏洞 — Real Spaces - WordPress Properties Directory Theme CWE-269 8.8 High 2025-08-19
CVE-2025-51539 EzGED 安全漏洞 — n/a 9.1 - 2025-08-19
CVE-2024-44373 Allsky Camera 安全漏洞 — n/a 9.8 - 2025-08-19
CVE-2025-3639 Liferay Portal和Liferay DXP 安全漏洞 — Portal CWE-288 9.8AI Critical AI 2025-08-18
CVE-2025-54118 NamelessMC 信息泄露漏洞 — Nameless CWE-200 5.3 Medium 2025-08-18
CVE-2025-8105 WordPress plugin Soledad 代码注入漏洞 — Soledad CWE-94 7.3 High 2025-08-16
CVE-2025-8878 WordPress plugin The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress 代码注入漏洞 — Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress CWE-94 6.5 Medium 2025-08-16
CVE-2025-7499 WordPress plugin BetterDocs 安全漏洞 — BetterDocs – Knowledge Base Docs & FAQ Solution for Elementor & Block Editor CWE-862 5.3 Medium 2025-08-16
CVE-2025-8464 WordPress plugin Drag and Drop Multiple File Upload for Contact Form 安全漏洞 — Drag and Drop Multiple File Upload for Contact Form 7 CWE-23 5.3 Medium 2025-08-16
CVE-2025-8898 WordPress plugin Taxi Booking Manager for Woocommerce | E-cab 安全漏洞 — E-cab Taxi Booking Manager for Woocommerce CWE-862 9.8 Critical 2025-08-16
CVE-2025-7686 WordPress plugin weichuncai 跨站请求伪造漏洞 — weichuncai(WP伪春菜) CWE-352 6.1 Medium 2025-08-16
CVE-2025-7683 WordPress plugin LatestCheckins 跨站请求伪造漏洞 — LatestCheckins CWE-352 6.1 Medium 2025-08-16
CVE-2025-7441 WordPress plugin StoryChief 代码问题漏洞 — StoryChief CWE-434 9.8 Critical 2025-08-16
CVE-2025-7664 WordPress plugin AL Pack 安全漏洞 — AL Pack CWE-862 7.5 High 2025-08-16
CVE-2025-7668 WordPress plugin Linux Promotional Plugin 跨站请求伪造漏洞 — Linux Promotional Plugin CWE-352 6.1 Medium 2025-08-16
CVE-2025-7684 WordPress plugin Last.fm Recent Album Artwork 跨站请求伪造漏洞 — Last.fm Recent Album Artwork CWE-352 6.1 Medium 2025-08-16
CVE-2024-12612 WordPress plugin School Management System for Wordpress SQL注入漏洞 — School Management System for Wordpress CWE-89 7.5 High 2025-08-16
CVE-2024-12575 WordPress plugin Poll Maker – Versus Polls, Anonymous Polls, Image Polls 信息泄露漏洞 — Poll Maker – Versus Polls, Anonymous Polls, Image Polls CWE-200 5.3 Medium 2025-08-16
CVE-2025-54466 Apache OFBiz 安全漏洞 — Apache OFBiz CWE-94 9.8AI Critical AI 2025-08-15
CVE-2025-7688 WordPress plugin Add User Meta 跨站请求伪造漏洞 — Add User Meta CWE-352 6.1 Medium 2025-08-15
CVE-2025-7778 WordPress plugin Icons Factory 授权问题漏洞 — Icons Factory CWE-285 9.8 Critical 2025-08-15

access:pre-auth 是常见的弱点类别，本平台收录该类弱点关联的 24886 条 CVE 漏洞。