access:pre-auth 类型相关 24863 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞，涵盖18971个CVE。此类漏洞之所以关键，是因为攻击者无需凭证即可直接利用，极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击，常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块，对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2025-46661 | IPW Systems Metazo 安全漏洞 — Metazo CWE-1336 | 10.0 | Critical | 2025-04-28 |
| CVE-2025-31144 | SIOS Technology Quick Agent 安全漏洞 — Quick Agent V3 CWE-923 | 9.8 | - | 2025-04-27 |
| CVE-2025-26692 | SIOS Technology Quick Agent 路径遍历漏洞 — Quick Agent V3 CWE-22 | 9.8 | - | 2025-04-27 |
| CVE-2025-2101 | WordPress plugin Edumall 安全漏洞 — EduMall - Professional LMS Education Center WordPress Theme CWE-98 | 8.1 | High | 2025-04-26 |
| CVE-2024-13812 | WordPress plugin Anps Theme plugin 代码注入漏洞 — Anps Theme plugin CWE-94 | 6.5 | Medium | 2025-04-26 |
| CVE-2025-2105 | WordPress plugin Jupiter X Core 代码问题漏洞 — Jupiter X Core CWE-502 | 8.1 | High | 2025-04-26 |
| CVE-2025-2801 | WordPress plugin abcsubmit 代码注入漏洞 — Create custom forms for WordPress with a smart form plugin for smart businesses – Form builder for WordPress CWE-94 | 7.3 | High | 2025-04-26 |
| CVE-2025-32044 | Moodle 信息泄露漏洞 CWE-200 | 7.5 | High | 2025-04-25 |
| CVE-2024-6199 | Viasat多款产品 安全漏洞 — RM5110 CWE-120 | 7.5 | - | 2025-04-25 |
| CVE-2025-2470 | WordPress plugin Service Finder Bookings 安全漏洞 — Service Finder Bookings CWE-266 | 9.8 | Critical | 2025-04-25 |
| CVE-2024-11917 | WordPress plugin JobSearch WP Job Board 授权问题漏洞 — JobSearch WP Job Board CWE-287 | 8.1 | High | 2025-04-25 |
| CVE-2025-3912 | WordPress plugin WS Form LITE 安全漏洞 — WS Form LITE – Drag & Drop Contact Form Builder CWE-862 | 5.3 | Medium | 2025-04-25 |
| CVE-2025-1565 | WordPress plugin Mayosis Core 路径遍历漏洞 — Mayosis Core CWE-22 | 7.5 | High | 2025-04-25 |
| CVE-2025-3870 | WordPress plugin 1 Decembrie 1918 跨站脚本漏洞 — 1 Decembrie 1918 CWE-79 | 6.1 | Medium | 2025-04-25 |
| CVE-2025-3743 | WordPress plugin Upsell Funnel Builder for WooCommerce 安全漏洞 — Upsell Funnel Builder for WooCommerce – Create Upsells, Cross-Sells, Order Bumps, Frequently Bought, and Popups. CWE-472 | 5.3 | Medium | 2025-04-25 |
| CVE-2025-3867 | WordPress plugin Ajax Comment Form CST 跨站脚本漏洞 — Ajax Comment Form CST CWE-79 | 6.1 | Medium | 2025-04-25 |
| CVE-2025-3868 | WordPress plugin Custom Admin-Bar Favorites 跨站脚本漏洞 — Custom Admin-Bar Favorites CWE-79 | 6.1 | Medium | 2025-04-25 |
| CVE-2025-3866 | WordPress plugin Add Google +1 跨站脚本漏洞 — Add Google +1 (Plus one) social share Button CWE-79 | 6.1 | Medium | 2025-04-25 |
| CVE-2025-3923 | WordPress plugin Prevent Direct Access 信息泄露漏洞 — Prevent Direct Access – Protect WordPress Files CWE-200 | 5.3 | Medium | 2025-04-25 |
| CVE-2025-3511 | Mitsubishi Electric多款产品 安全漏洞 — CC-Link IE TSN Remote I/O module NZ2GN2S1-32D CWE-1284 | 7.5 | High | 2025-04-25 |
| CVE-2025-3775 | WordPress plugin ShopLentor 代码问题漏洞 — ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin CWE-918 | 6.5 | Medium | 2025-04-25 |
| CVE-2025-46599 | k3s 安全漏洞 — K3s CWE-1188 | 6.8 | Medium | 2025-04-25 |
| CVE-2025-46274 | PLANET UNI-NMS-Lite 信任管理问题漏洞 — UNI-NMS-Lite CWE-798 | 9.8 | Critical | 2025-04-24 |
| CVE-2025-46273 | PLANET UNI-NMS-Lite 信任管理问题漏洞 — UNI-NMS-Lite CWE-798 | 9.8 | Critical | 2025-04-24 |
| CVE-2025-46272 | PLANET WGS-804HPT和PLANET WGS-4215-8T2S 操作系统命令注入漏洞 — WGS-804HPT-V2 CWE-78 | 9.1 | Critical | 2025-04-24 |
| CVE-2025-46271 | PLANET UNI-NMS-Lite 操作系统命令注入漏洞 — UNI-NMS-Lite CWE-78 | 9.1 | Critical | 2025-04-24 |
| CVE-2025-1294 | WordPress plugin eForm 跨站脚本漏洞 — eForm - WordPress Form Builder CWE-79 | 7.2 | High | 2025-04-24 |
| CVE-2025-31324 | SAP NetWeaver Visual Composer Metadata Uploader 代码问题漏洞 — SAP NetWeaver (Visual Composer development server) CWE-434 | 10.0 | Critical | 2025-04-24 |
| CVE-2025-43855 | tRPC 安全漏洞 — trpc CWE-248 | 7.5 | - | 2025-04-24 |
| CVE-2021-47664 | Franka Emika Robot 安全漏洞 — Franka Emika Robot CWE-203 | 5.3 | Medium | 2025-04-24 |
access:pre-auth 是常见的弱点类别，本平台收录该类弱点关联的 24863 条 CVE 漏洞。