目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1336 元

100%
请我们喝杯咖啡

access:pre-auth 标签下的 CVE 漏洞 24863

access:pre-auth 类型相关 24863 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。

“access:pre-auth”标签标识了无需身份验证即可触发的漏洞，涵盖18971个CVE。此类漏洞之所以关键，是因为攻击者无需凭证即可直接利用，极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击，常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块，对系统安全性构成直接且严重的威胁。

CVE ID 标题 CVSS 风险等级 Published
CVE-2025-40624 Tcman Gim SQL注入漏洞 — GIM CWE-89 9.8AI Critical AI 2025-05-06
CVE-2025-40623 Tcman Gim SQL注入漏洞 — GIM CWE-89 9.8AI Critical AI 2025-05-06
CVE-2025-40622 Tcman Gim SQL注入漏洞 — GIM CWE-89 9.8AI Critical AI 2025-05-06
CVE-2025-40621 Tcman Gim SQL注入漏洞 — GIM CWE-89 9.8AI Critical AI 2025-05-06
CVE-2025-40620 Tcman Gim SQL注入漏洞 — GIM CWE-89 9.8AI Critical AI 2025-05-06
CVE-2025-2011 WordPress plugin Slider & Popup Builder by Depicter 安全漏洞 — Depicter — Popup & Slider Builder CWE-89 7.5 High 2025-05-06
CVE-2025-3281 WordPress plugin User Registration & Membership – Custom Registration Form, Login Form, and User Profile 安全漏洞 — User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder CWE-639 5.3 Medium 2025-05-06
CVE-2025-2802 WordPress plugin LayoutBoxx 代码注入漏洞 — LayoutBoxx CWE-94 7.3 High 2025-05-06
CVE-2025-4337 WordPress plugin AHAthat Plugin 跨站请求伪造漏洞 — AHAthat Plugin CWE-352 4.3 Medium 2025-05-06
CVE-2025-3609 WordPress plugin Reales WP STPT 安全漏洞 — Reales WP STPT CWE-863 5.3 Medium 2025-05-06
CVE-2025-3610 WordPress plugin Reales WP STPT 安全漏洞 — Reales WP STPT CWE-639 8.8 High 2025-05-06
CVE-2025-46813 Discourse 信息泄露漏洞 — discourse CWE-200 5.8 Medium 2025-05-05
CVE-2025-1909 WordPress plugin BuddyBoss Platform Pro 安全漏洞 — BuddyBoss Platform Pro CWE-288 9.8 Critical 2025-05-05
CVE-2024-11615 WordPress plugin Envolve Plugin 路径遍历漏洞 — Envolve Plugin CWE-22 5.3 Medium 2025-05-05
CVE-2025-2905 WSO2 API Manager 安全漏洞 — WSO2 API Manager CWE-611 9.1 Critical 2025-05-05
CVE-2025-25504 Gefen WebFWC 安全漏洞 — n/a 9.8AI Critical AI 2025-05-05
CVE-2024-41753 IBM Cloud Pak for Business Automation 跨站脚本漏洞 — Cloud Pak for Business Automation CWE-79 6.1 Medium 2025-05-03
CVE-2024-13738 WordPress plugin The Motors - Car Dealer, Rental & Listing 代码注入漏洞 — Motors - Car Dealer, Rental & Listing WordPress theme CWE-94 7.3 High 2025-05-03
CVE-2025-4222 WordPress plugin Database Toolset 信息泄露漏洞 — Database Toolset CWE-200 5.9 Medium 2025-05-03
CVE-2025-3918 WordPress plugin Job Listings 授权问题漏洞 — Job Listings CWE-285 9.8 Critical 2025-05-03
CVE-2025-4198 WordPress plugin Alink Tap 跨站请求伪造漏洞 — Alink Tap CWE-352 6.1 Medium 2025-05-03
CVE-2025-4199 WordPress plugin Abundatrade Plugin 跨站请求伪造漏洞 — Abundatrade Plugin CWE-352 6.1 Medium 2025-05-03
CVE-2025-4188 WordPress plugin Advanced Reorder Image Text Slider 跨站请求伪造漏洞 — Advanced Reorder Image Text Slider CWE-352 6.1 Medium 2025-05-03
CVE-2025-4204 WordPress plugin Ultimate Auction Pro SQL注入漏洞 — Ultimate Auction Pro CWE-89 7.5 High 2025-05-02
CVE-2025-3438 WordPress plugin MStore API 安全漏洞 — MStore API – Create Native Android & iOS Apps On The Cloud CWE-269 6.5 Medium 2025-05-02
CVE-2024-13322 WordPress plugin Ads Pro Plugin SQL注入漏洞 — Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager CWE-89 7.5 High 2025-05-02
CVE-2024-13344 WordPress plugin Advance Seat Reservation Management for WooCommerce SQL注入漏洞 — Advance Seat Reservation Management for WooCommerce CWE-89 7.5 High 2025-05-02
CVE-2025-3709 Flowring Technology Agentflow BPM 安全漏洞 — Agentflow CWE-307 9.8 Critical 2025-05-02
CVE-2025-3708 Le-show Medical Practice Management System SQL注入漏洞 — Le-show CWE-89 9.8 Critical 2025-05-02
CVE-2025-4177 WordPress plugin Flynax Bridge 安全漏洞 — Flynax Bridge CWE-862 5.3 Medium 2025-05-02

access:pre-auth 是常见的弱点类别，本平台收录该类弱点关联的 24863 条 CVE 漏洞。