目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1336 元

100%
请我们喝杯咖啡

access:pre-auth 标签下的 CVE 漏洞 24863

access:pre-auth 类型相关 24863 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。

“access:pre-auth”标签标识了无需身份验证即可触发的漏洞，涵盖18971个CVE。此类漏洞之所以关键，是因为攻击者无需凭证即可直接利用，极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击，常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块，对系统安全性构成直接且严重的威胁。

CVE ID 标题 CVSS 风险等级 Published
CVE-2025-3431 WordPress plugin ZoomSounds 安全漏洞 — ZoomSounds - WordPress Wave Audio Player with Playlist CWE-73 7.5 High 2025-04-08
CVE-2025-30016 SAP Financial Consolidation 安全漏洞 — SAP Financial Consolidation CWE-921 9.8 Critical 2025-04-08
CVE-2025-27435 SAP Commerce 安全漏洞 — SAP Commerce Cloud CWE-862 4.2 Medium 2025-04-08
CVE-2025-26657 SAP KMC WPC 安全漏洞 — SAP KMC WPC CWE-862 5.3 Medium 2025-04-08
CVE-2025-3428 WordPress plugin 3DPrint Lite SQL注入漏洞 — 3DPrint Lite CWE-89 4.9 Medium 2025-04-08
CVE-2025-3429 WordPress plugin 3DPrint Lite SQL注入漏洞 — 3DPrint Lite CWE-89 4.9 Medium 2025-04-08
CVE-2025-3430 WordPress plugin 3DPrint Lite SQL注入漏洞 — 3DPrint Lite CWE-89 4.9 Medium 2025-04-08
CVE-2025-3427 WordPress plugin 3DPrint Lite SQL注入漏洞 — 3DPrint Lite CWE-89 4.9 Medium 2025-04-08
CVE-2025-0361 AXIS OS 安全漏洞 — AXIS OS CWE-203 4.3 Medium 2025-04-08
CVE-2024-13820 WordPress plugin Melhor Envio 信息泄露漏洞 — Melhor Envio CWE-200 5.3 Medium 2025-04-08
CVE-2025-2004 WordPress plugin Simple WP Events 安全漏洞 — Simple WP Events CWE-73 9.1 Critical 2025-04-08
CVE-2025-3363 HGiga iSherlock 操作系统命令注入漏洞 — iSherlock 4.5 CWE-78 9.8 Critical 2025-04-08
CVE-2025-3362 HGiga iSherlock 操作系统命令注入漏洞 — iSherlock 4.5 CWE-78 9.8 Critical 2025-04-08
CVE-2025-3361 HGiga iSherlock 操作系统命令注入漏洞 — iSherlock 4.5 CWE-78 9.8 Critical 2025-04-08
CVE-2025-2526 WordPress plugin Streamit 安全漏洞 — Streamit CWE-639 8.8 High 2025-04-08
CVE-2025-0942 Jalios JPlatform SQL注入漏洞 — JPlatform CWE-89 8.6 High 2025-04-07
CVE-2025-3248 Langflow 安全漏洞 — langflow CWE-306 9.8 Critical 2025-04-07
CVE-2025-31492 mod_auth_openidc 信息泄露漏洞 — mod_auth_openidc CWE-200 7.5AI High AI 2025-04-06
CVE-2025-32370 Kentico Xperience 安全漏洞 — Xperience CWE-912 7.2 High 2025-04-06
CVE-2025-2941 WordPress plugin Drag and Drop Multiple File Upload for WooCommerce 路径遍历漏洞 — Drag and Drop Multiple File Upload for WooCommerce CWE-22 9.8 Critical 2025-04-05
CVE-2025-2789 WordPress plugin MultiVendorX 安全漏洞 — MultiVendorX – WooCommerce Multivendor Marketplace Solutions CWE-862 5.3 Medium 2025-04-05
CVE-2024-13604 WordPress plugin KB Support 信息泄露漏洞 — KB Support – Customer Support Ticket & Helpdesk Plugin, Knowledge Base Plugin CWE-200 7.5 High 2025-04-05
CVE-2025-0810 WordPress plugin Read More & Accordion 跨站请求伪造漏洞 — Read More & Accordion CWE-352 7.5 High 2025-04-05
CVE-2021-47667 ZendTo 安全漏洞 — ZendTo CWE-78 10.0 Critical 2025-04-05
CVE-2025-27520 BentoML 代码问题漏洞 — BentoML CWE-502 9.8 Critical 2025-04-04
CVE-2025-2798 WordPress plugin Woffice CRM 安全漏洞 — Woffice CRM CWE-269 9.8 Critical 2025-04-04
CVE-2025-2797 WordPress plugin Woffice Core 跨站请求伪造漏洞 — Woffice Core CWE-352 5.4 Medium 2025-04-04
CVE-2024-13708 WordPress plugin Booster for WooCommerce 代码问题漏洞 — Booster for WooCommerce CWE-434 7.2 High 2025-04-04
CVE-2025-2270 WordPress plugin Countdown, Coming Soon, Maintenance 路径遍历漏洞 — Countdown, Coming Soon, Maintenance – Countdown & Clock CWE-22 8.1 High 2025-04-04
CVE-2024-13645 WordPress plugin tagDiv Composer 代码注入漏洞 — tagDiv Composer CWE-94 9.8 Critical 2025-04-04

access:pre-auth 是常见的弱点类别，本平台收录该类弱点关联的 24863 条 CVE 漏洞。