access:pre-auth 类型相关 24863 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞，涵盖18971个CVE。此类漏洞之所以关键，是因为攻击者无需凭证即可直接利用，极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击，常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块，对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2021-4455 | WordPress plugin Smart Product Review 代码问题漏洞 — Wordpress Plugin Smart Product Review CWE-434 | 9.8 | Critical | 2025-04-19 |
| CVE-2025-3809 | WordPress plugin Debug Log Manager 跨站脚本漏洞 — Debug Log Manager – Conveniently Monitor and Inspect Errors CWE-79 | 7.2 | High | 2025-04-19 |
| CVE-2025-2111 | WordPress plugin Insert Headers And Footers 跨站请求伪造漏洞 — Insert Headers And Footers CWE-352 | 7.5 | High | 2025-04-19 |
| CVE-2025-3103 | WordPress plugin CLEVER 安全漏洞 — CLEVER - HTML5 Radio Player With History - Shoutcast and Icecast - Elementor Widget Addon CWE-73 | 7.5 | High | 2025-04-19 |
| CVE-2025-1093 | WordPress plugin AIHub 代码问题漏洞 — AI Hub - Startup & Technology WordPress Theme CWE-434 | 9.8 | Critical | 2025-04-19 |
| CVE-2025-2010 | WordPress plugin JobWP SQL注入漏洞 — JobWP – Job Board, Job Listing, Career Page and Recruitment Plugin CWE-89 | 7.5 | High | 2025-04-19 |
| CVE-2025-3278 | WordPress plugin UrbanGo Membership 安全漏洞 — UrbanGo Membership CWE-269 | 9.8 | Critical | 2025-04-19 |
| CVE-2025-3284 | WordPress plugin User Registration & Membership – Custom Registration Form, Login Form, and User Profile 跨站请求伪造漏洞 — User Registration PRO – Custom Registration Form, Login Form, and User Profile WordPress Plugin CWE-352 | 4.3 | Medium | 2025-04-19 |
| CVE-2025-32377 | Rasa Pro 访问控制错误漏洞 — rasa-pro-security-advisories CWE-306 | 6.5 | Medium | 2025-04-18 |
| CVE-2025-31120 | NamelessMC 安全漏洞 — Nameless CWE-565 | 5.3 | Medium | 2025-04-18 |
| CVE-2025-3598 | WordPress plugin Coupon Affiliates – Affiliate Plugin for WooCommerce 跨站脚本漏洞 — Coupon Affiliates – Affiliate Plugin for WooCommerce CWE-79 | 6.1 | Medium | 2025-04-18 |
| CVE-2025-42599 | QUALITIA Active! mail 安全漏洞 — Active! mail 6 CWE-121 | 9.8 | - | 2025-04-18 |
| CVE-2025-28232 | JMBroadcast JMB0150 Firmware 安全漏洞 — n/a | 9.8 | - | 2025-04-18 |
| CVE-2024-42178 | HCL MyXalytics 安全漏洞 — HCL MyXalytics CWE-288 | 2.5 | Low | 2025-04-17 |
| CVE-2025-26478 | Dell ECS 信任管理问题漏洞 — ECS CWE-295 | 3.1 | Low | 2025-04-17 |
| CVE-2025-3479 | WordPress plugin Forminator Forms 安全漏洞 — Forminator Forms – Contact Form, Payment Form & Custom Form Builder CWE-354 | 5.3 | Medium | 2025-04-17 |
| CVE-2025-3453 | WordPress plugin Password Protected 安全漏洞 — Password Protected — Lock Entire Site, Pages, Posts, Categories, and Partial Content CWE-863 | 5.3 | Medium | 2025-04-17 |
| CVE-2025-29931 | Siemens TeleControl Server Basic 安全漏洞 — TeleControl Server Basic CWE-130 | 3.7 | Low | 2025-04-17 |
| CVE-2024-13925 | WordPress plugin Klarna Checkout for WooCommerce 安全漏洞 — Klarna Checkout for WooCommerce | 7.5AI | High AI | 2025-04-17 |
| CVE-2025-29662 | LandChat 安全漏洞 — n/a | 9.8AI | Critical AI | 2025-04-17 |
| CVE-2025-32433 | Erlang/OTP 访问控制错误漏洞 — otp CWE-306 | 10.0 | Critical | 2025-04-16 |
| CVE-2025-27540 | Siemens TeleControl Server Basic SQL注入漏洞 — TeleControl Server Basic CWE-89 | 9.8 | Critical | 2025-04-16 |
| CVE-2025-27539 | Siemens TeleControl Server Basic SQL注入漏洞 — TeleControl Server Basic CWE-89 | 9.8 | Critical | 2025-04-16 |
| CVE-2025-27495 | Siemens TeleControl Server Basic SQL注入漏洞 — TeleControl Server Basic CWE-89 | 9.8 | Critical | 2025-04-16 |
| CVE-2025-20236 | Cisco Webex 安全漏洞 — Cisco Webex Teams CWE-829 | 8.8 | High | 2025-04-16 |
| CVE-2025-20150 | Cisco Nexus Dashboard 安全漏洞 — Cisco Nexus Dashboard CWE-209 | 5.3 | Medium | 2025-04-16 |
| CVE-2025-3104 | WordPress plugin WP STAGING Pro 信息泄露漏洞 — WP STAGING Pro WordPress Backup Plugin CWE-200 | 5.3 | Medium | 2025-04-16 |
| CVE-2025-3247 | WordPress plugin Contact Form 安全漏洞 — Contact Form 7 CWE-354 | 5.3 | Medium | 2025-04-16 |
| CVE-2024-13452 | WordPress plugin Contact Form by Supsystic 跨站脚本漏洞 — Contact Form by Supsystic CWE-79 | 6.1 | Medium | 2025-04-16 |
| CVE-2024-53304 | LRQA Nettitude PoshC2 安全漏洞 — n/a | 9.8AI | Critical AI | 2025-04-16 |
access:pre-auth 是常见的弱点类别，本平台收录该类弱点关联的 24863 条 CVE 漏洞。