access:pre-auth 标签下的 CVE 漏洞 24863

access:pre-auth 类型相关 24863 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。

“access:pre-auth”标签标识了无需身份验证即可触发的漏洞，涵盖18971个CVE。此类漏洞之所以关键，是因为攻击者无需凭证即可直接利用，极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击，常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块，对系统安全性构成直接且严重的威胁。

CVE ID	标题	CVSS	风险等级	Published
CVE-2025-6169	HAMASTAR Technology WIMP website co-construction management platform SQL注入漏洞 — WIMP CWE-89	9.8	Critical	2025-06-16
CVE-2025-6063	WordPress plugin XiSearch 跨站请求伪造漏洞 — XiSearch bar CWE-352	6.1	Medium	2025-06-14
CVE-2025-6062	WordPress plugin Yougler Blogger Profile Page 跨站请求伪造漏洞 — Yougler Blogger Profile Page CWE-352	4.3	Medium	2025-06-14
CVE-2025-4592	WordPress plugin AI Image Lab – Free AI Image Generator 跨站请求伪造漏洞 — AI Image Lab – Free AI Image Generator CWE-352	4.3	Medium	2025-06-14
CVE-2025-4200	WordPress plugin Zagg - Electronics & Accessories WooCommerce WordPress Theme 安全漏洞 — Zagg - Electronics & Accessories WooCommerce WordPress Theme CWE-98	8.1	High	2025-06-14
CVE-2025-6055	WordPress plugin Zen Sticky Social 跨站请求伪造漏洞 — Zen Sticky Social CWE-352	6.1	Medium	2025-06-14
CVE-2025-4187	WordPress plugin UserPro - Community and User Profile 路径遍历漏洞 — UserPro - Community and User Profile WordPress Plugin CWE-22	5.9	Medium	2025-06-14
CVE-2025-6040	WordPress plugin Easy Flashcards 跨站脚本漏洞 — Easy Flashcards CWE-79	6.1	Medium	2025-06-14
CVE-2025-6064	WordPress plugin WP URL Shortener 跨站请求伪造漏洞 — WP URL Shortener CWE-352	6.1	Medium	2025-06-14
CVE-2025-6065	WordPress plugin Image Resizer On The Fly 路径遍历漏洞 — Image Resizer On The Fly CWE-22	9.1	Critical	2025-06-14
CVE-2025-6059	WordPress plugin Seraphinite Accelerator 跨站请求伪造漏洞 — Seraphinite Accelerator CWE-352	4.3	Medium	2025-06-14
CVE-2025-49596	MCP Inspector 访问控制错误漏洞 — inspector CWE-306	9.8^AI	Critical ^AI	2025-06-13
CVE-2025-5282	WordPress plugin WP Travel Engine – Tour Booking Plugin – Tour Operator Software 安全漏洞 — WP Travel Engine – Tour Booking Plugin – Tour Operator Software CWE-862	7.5	High	2025-06-13
CVE-2025-5815	WordPress plugin Traffic Monitor 安全漏洞 — Traffic Monitor CWE-862	5.3	Medium	2025-06-13
CVE-2025-5928	WordPress plugin WP Sliding Login/Dashboard Panel 跨站请求伪造漏洞 — WP Sliding Login/Dashboard Panel CWE-352	4.3	Medium	2025-06-13
CVE-2025-5938	WordPress plugin Digital Marketing and Agency Templates Addons for Elementor 跨站请求伪造漏洞 — Digital Marketing and Agency Templates Addons for Elementor CWE-352	5.3	Medium	2025-06-13
CVE-2025-5930	WordPress plugin WP2HTML 跨站请求伪造漏洞 — WP2HTML CWE-352	4.3	Medium	2025-06-13
CVE-2025-5926	WordPress plugin Link Shield 跨站请求伪造漏洞 — Link Shield CWE-352	6.1	Medium	2025-06-13
CVE-2025-5288	WordPress plugin REST API \| Custom API Generator For Cross Platform And Import Export In WP 安全漏洞 — REST API \| Custom API Generator For Cross Platform And Import Export In WP CWE-862	9.8	Critical	2025-06-13
CVE-2025-6003	WordPress plugin Single Sign-On (SSO) 安全漏洞 — WordPress Single Sign-On (SSO) - Single Site Standard CWE-863	5.3	Medium	2025-06-12
CVE-2025-4973	WordPress plugin Workreap 安全漏洞 — Workreap CWE-288	9.8	Critical	2025-06-12
CVE-2025-46035	Tenda AC6 安全漏洞 — n/a	7.5^AI	High ^AI	2025-06-12
CVE-2025-3302	WordPress plugin Xagio SEO 跨站脚本漏洞 — Xagio SEO – AI Powered SEO CWE-79	7.2	High	2025-06-11
CVE-2025-41663	Weidmueller Interface IE-SR-2TX-WL 操作系统命令注入漏洞 — IE-SR-2TX-WL CWE-78	9.8	Critical	2025-06-11
CVE-2025-41661	Weidmueller Interface IE-SR-2TX-WL 跨站请求伪造漏洞 — IE-SR-2TX-WL CWE-352	8.8	High	2025-06-11
CVE-2025-35940	GFI Archiver 信任管理问题漏洞 — Archiver CWE-798	8.1	High	2025-06-10
CVE-2025-2474	Blueberry QNX SDP 安全漏洞 — QNX Software Development Platform (SDP) CWE-787	9.8	Critical	2025-06-10
CVE-2025-36574	Dell Wyse Management Suite WMS 安全漏洞 — Wyse Management Suite CWE-36	8.2	High	2025-06-10
CVE-2025-36575	Dell Wyse Management Suite WMS 安全漏洞 — Wyse Management Suite CWE-202	7.5	High	2025-06-10
CVE-2024-50568	Fortinet FortiOS 安全漏洞 — FortiOS CWE-300	5.6	Medium	2025-06-10

access:pre-auth 是常见的弱点类别，本平台收录该类弱点关联的 24863 条 CVE 漏洞。

目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

access:pre-auth 标签下的 CVE 漏洞 24863

目标达成感谢每一位支持者 — 我们达成了 100% 目标！