access:pre-auth 类型相关 24863 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞，涵盖18971个CVE。此类漏洞之所以关键，是因为攻击者无需凭证即可直接利用，极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击，常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块，对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2025-20129 | Cisco Customer Collaboration Platform 信息泄露漏洞 — Cisco SocialMiner CWE-200 | 4.3 | Medium | 2025-06-04 |
| CVE-2018-25112 | PHOENIX CONTACT ILC 安全漏洞 — ILC 131 CWE-770 | 7.5 | High | 2025-06-04 |
| CVE-2025-4578 | WordPress plugin File Provider SQL注入漏洞 — File Provider | 9.8AI | Critical AI | 2025-06-04 |
| CVE-2025-48710 | kro（Kube Resource Orchestrator） 安全漏洞 — kro CWE-441 | 4.1 | Medium | 2025-06-04 |
| CVE-2025-24015 | Deno 数据伪造问题漏洞 — deno CWE-347 | 9.8AI | Critical AI | 2025-06-03 |
| CVE-2025-25022 | IBM Cloud Pak for Security和IBM QRadar Suite 安全漏洞 — QRadar Suite Software CWE-260 | 9.6 | Critical | 2025-06-03 |
| CVE-2025-4392 | WordPress plugin Shared Files 跨站脚本漏洞 — Shared Files – Frontend File Upload Form & Secure File Sharing CWE-79 | 7.2 | High | 2025-06-03 |
| CVE-2025-41428 | Keiyo System TimeWorks 路径遍历漏洞 — TimeWorks CWE-22 | 5.3AI | Medium AI | 2025-06-03 |
| CVE-2025-3662 | WordPress plugin FancyBox 安全漏洞 — FancyBox for WordPress | 6.1AI | Medium AI | 2025-06-03 |
| CVE-2025-4797 | WordPress plugin Golo 安全漏洞 — Golo - City Travel Guide WordPress Theme CWE-288 | 9.8 | Critical | 2025-06-03 |
| CVE-2025-2939 | WordPress plugin Ninja Tables 代码问题漏洞 — Ninja Tables – Easy Data Table Builder CWE-502 | 5.6 | Medium | 2025-06-03 |
| CVE-2025-32105 | Sangoma IMG2020 HTTP server 安全漏洞 — n/a | 9.8AI | Critical AI | 2025-06-03 |
| CVE-2025-32106 | AudioCodes Audiocodes Mediapack MP-11x 安全漏洞 — n/a | 9.8AI | Critical AI | 2025-06-03 |
| CVE-2025-48996 | open-apis 安全漏洞 — issues CWE-201 | 5.3 | Medium | 2025-06-02 |
| CVE-2024-7073 | WSO2多款产品 安全漏洞 — WSO2 Identity Server as Key Manager CWE-918 | 6.5 | Medium | 2025-06-02 |
| CVE-2025-48958 | Froxlor 安全漏洞 — Froxlor CWE-79 | 5.5 | Medium | 2025-06-02 |
| CVE-2025-4691 | WordPress plugin eaSYNC Booking 安全漏洞 — eaSYNC Booking – Hotels, Restaurants & Car Rentals CWE-639 | 5.3 | Medium | 2025-05-31 |
| CVE-2025-4631 | WordPress plugin Profitori 授权问题漏洞 — The E-Commerce ERP: Purchasing, Inventory, Fulfillment, Manufacturing, BOM, Accounting, Sales Analysis CWE-285 | 9.8 | Critical | 2025-05-31 |
| CVE-2025-4607 | WordPress plugin PSW Front-end Login & Registration 安全特征问题漏洞 — PSW Front-end Login & Registration CWE-330 | 9.8 | Critical | 2025-05-31 |
| CVE-2025-5016 | WordPress plugin Relevanssi 跨站脚本漏洞 — Relevanssi Premium CWE-79 | 4.7 | Medium | 2025-05-31 |
| CVE-2025-5142 | WordPress plugin Simple Page Access Restriction 跨站请求伪造漏洞 — Simple Page Access Restriction CWE-352 | 6.5 | Medium | 2025-05-30 |
| CVE-2025-4633 | jct-aq Airpointer 2D 安全漏洞 — Airpointer CWE-798 | 6.5 | Medium | 2025-05-30 |
| CVE-2025-47697 | Uchida Yoko wivia 安全漏洞 — wivia 5 CWE-602 | 9.8AI | Critical AI | 2025-05-30 |
| CVE-2025-48889 | Gradio 安全漏洞 — gradio CWE-434 | 5.3 | Medium | 2025-05-30 |
| CVE-2025-4659 | WordPress plugin Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms 信息泄露漏洞 — Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms CWE-200 | 5.3 | Medium | 2025-05-30 |
| CVE-2025-44619 | Tinxy WiFi Lock Controller v1 RF 安全漏洞 — n/a | 8.1AI | High AI | 2025-05-30 |
| CVE-2025-48757 | Lovable 安全漏洞 — Lovable CWE-863 | 9.3 | Critical | 2025-05-30 |
| CVE-2025-4967 | Esri Portal For ArcGIS 代码问题漏洞 — Portal for ArcGIS CWE-918 | 9.1 | Critical | 2025-05-29 |
| CVE-2025-48045 | MICI NetFax Server 安全漏洞 — NetFax Server CWE-201 | 7.5AI | High AI | 2025-05-29 |
| CVE-2025-3755 | Mitsubishi Electric MELSEC iQ-F series 安全漏洞 — MELSEC iQ-F Series FX5U-32MT/ES CWE-1285 | 9.1 | Critical | 2025-05-29 |
access:pre-auth 是常见的弱点类别，本平台收录该类弱点关联的 24863 条 CVE 漏洞。