access:pre-auth 类型相关 24863 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞，涵盖18971个CVE。此类漏洞之所以关键，是因为攻击者无需凭证即可直接利用，极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击，常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块，对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2025-6934 | WordPress plugin Opal Estate Pro 安全漏洞 — Opal Estate Pro – Property Management and Submission CWE-269 | 9.8 | Critical | 2025-07-01 |
| CVE-2025-5937 | WordPress plugin MicroPayments 跨站请求伪造漏洞 — MicroPayments – Fans Paysite: Paid Creator Subscriptions, Digital Assets, Wallet CWE-352 | 4.3 | Medium | 2025-06-28 |
| CVE-2025-5304 | WordPress plugin PT Project Notebooks 安全漏洞 — PT Project Notebooks – Take Meeting minutes, create budgets, track task management, and more CWE-862 | 9.8 | Critical | 2025-06-28 |
| CVE-2025-5310 | Dover Fueling Solutions ProGauge MAGLINK LX CONSOLE 访问控制错误漏洞 — ProGauge MagLink LX 4 CWE-306 | 9.8 | Critical | 2025-06-27 |
| CVE-2025-6522 | Trend Makers Sight Bulb Pro 命令注入漏洞 — Sight Bulb Pro Firmware ZJ_CG32-2201 CWE-77 | 5.4 | Medium | 2025-06-27 |
| CVE-2025-53091 | WeGIA SQL注入漏洞 — WeGIA CWE-89 | 9.8AI | Critical AI | 2025-06-27 |
| CVE-2024-12827 | WordPress plugin DWT - Directory & Listing 安全漏洞 — DWT - Directory & Listing WordPress Theme CWE-620 | 9.8 | Critical | 2025-06-27 |
| CVE-2025-2940 | WordPress plugin Ninja Tables – Easy Data Table Builder 代码问题漏洞 — Ninja Tables – Easy Data Table Builder CWE-918 | 7.2 | High | 2025-06-27 |
| CVE-2025-6688 | WordPress plugin Simple Payment 安全漏洞 — Simple Payment CWE-288 | 9.8 | Critical | 2025-06-27 |
| CVE-2025-5936 | WordPress plugin VR Calendar 跨站请求伪造漏洞 — VR Calendar CWE-352 | 4.3 | Medium | 2025-06-27 |
| CVE-2025-3699 | Mitsubishi Electric多款产品 访问控制错误漏洞 — G-50 CWE-306 | 9.8 | Critical | 2025-06-26 |
| CVE-2025-52477 | octo-sts 代码问题漏洞 — app CWE-918 | 8.6 | High | 2025-06-26 |
| CVE-2025-34047 | Leadsec SSL VPN 安全漏洞 — Leadsec SSL VPN CWE-22 | 7.5AI | High AI | 2025-06-26 |
| CVE-2025-34048 | D-Link DSL-2730U和D-Link DSL-2750E 安全漏洞 — DSL-2730U CWE-22 | 7.5AI | High AI | 2025-06-26 |
| CVE-2025-34046 | Weaver E-Office 安全漏洞 — E-Office CWE-434 | 9.8AI | Critical AI | 2025-06-26 |
| CVE-2025-34045 | Weiphp WeiPHP 安全漏洞 — WeiPHP CWE-22 | 7.5AI | High AI | 2025-06-26 |
| CVE-2025-34044 | WIFISKY 7-layer Flow Control Router 安全漏洞 — WIFISKY 7-layer flow control router CWE-78 | 9.8AI | Critical AI | 2025-06-26 |
| CVE-2025-34043 | Vacron Network Video Recorder 安全漏洞 — Network Video Recorder (NVR) CWE-78 | 9.8AI | Critical AI | 2025-06-26 |
| CVE-2025-6561 | Hunt Electronic HBF-09KD 安全漏洞 — HBF-09KD CWE-497 | 9.8 | Critical | 2025-06-26 |
| CVE-2025-6212 | WordPress plugin Ultra Addons for Contact Form 跨站脚本漏洞 — Ultra Addons for Contact Form 7 CWE-79 | 7.2 | High | 2025-06-26 |
| CVE-2025-1754 | GitLab CE/EE 访问控制错误漏洞 — GitLab CWE-306 | 5.3 | Medium | 2025-06-26 |
| CVE-2025-5813 | WordPress plugin Amazon Products to WooCommerce 安全漏洞 — Amazon Products to WooCommerce CWE-862 | 5.3 | Medium | 2025-06-26 |
| CVE-2025-5932 | WordPress plugin Homerunner 跨站请求伪造漏洞 — Homerunner CWE-352 | 4.3 | Medium | 2025-06-26 |
| CVE-2025-4334 | WordPress plugin Simple User Registration 安全漏洞 — Simple User Registration CWE-269 | 9.8 | Critical | 2025-06-26 |
| CVE-2025-30131 | IROAD Dashcam FX2 安全漏洞 — n/a | 9.8AI | Critical AI | 2025-06-26 |
| CVE-2025-52894 | OpenBao 输入验证错误漏洞 — openbao CWE-20 | 7.5AI | High AI | 2025-06-25 |
| CVE-2025-49153 | MICROSENS NMP Web+ 路径遍历漏洞 — NMP Web+ CWE-22 | 9.8AI | Critical AI | 2025-06-25 |
| CVE-2025-49151 | MICROSENS NMP Web+ 安全漏洞 — NMP Web+ CWE-547 | 9.1AI | Critical AI | 2025-06-25 |
| CVE-2025-20282 | Cisco ISE和Cisco ISE-PIC 安全漏洞 — Cisco Identity Services Engine Software CWE-269 | 10.0 | Critical | 2025-06-25 |
| CVE-2025-5015 | Parsons Utility Enterprise Data Management 跨站脚本漏洞 — Parsons Utility Enterprise Data Management CWE-79 | 8.8 | High | 2025-06-25 |
access:pre-auth 是常见的弱点类别，本平台收录该类弱点关联的 24863 条 CVE 漏洞。