access:pre-auth 标签下的 CVE 漏洞 24858

access:pre-auth 类型相关 24858 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。

“access:pre-auth”标签标识了无需身份验证即可触发的漏洞，涵盖18971个CVE。此类漏洞之所以关键，是因为攻击者无需凭证即可直接利用，极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击，常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块，对系统安全性构成直接且严重的威胁。

CVE ID	标题	CVSS	风险等级	Published
CVE-2025-2319	WordPress plugin EZ SQL Reports Shortcode Widget and DB Backup 跨站请求伪造漏洞 — EZ SQL Reports Shortcode Widget and DB Backup CWE-352	8.8	High	2025-03-25
CVE-2024-13690	WordPress plugin WP Church Donation 跨站脚本漏洞 — WP Church Donation CWE-79	7.2	High	2025-03-25
CVE-2024-13710	WordPress plugin Estatebud 跨站请求伪造漏洞 — Estatebud – Properties & Listings CWE-352	4.3	Medium	2025-03-25
CVE-2025-1320	WordPress plugin teachPress 跨站请求伪造漏洞 — teachPress CWE-352	4.3	Medium	2025-03-25
CVE-2025-2252	WordPress plugin Easy Digital Downloads 信息泄露漏洞 — Easy Digital Downloads – eCommerce Payments and Subscriptions made easy CWE-200	5.3	Medium	2025-03-25
CVE-2025-1798	WordPress plugin Design Comuni Italia 安全漏洞 — design-comuni-wordpress-theme	6.1	-	2025-03-25
CVE-2024-13617	WordPress plugin aoa-downloadable 安全漏洞 — aoa-downloadable	7.5	-	2025-03-25
CVE-2024-13618	WordPress plugin aoa-downloadable 安全漏洞 — aoa-downloadable	7.5	-	2025-03-25
CVE-2025-2224	WordPress plugin Directorist 安全漏洞 — Directorist: AI-Powered Business Directory, Listings & Classified Ads CWE-862	5.3	Medium	2025-03-25
CVE-2024-45484	B&R Industrial Automation B&R APROL 安全漏洞 — APROL CWE-770	6.5^AI	Medium ^AI	2025-03-25
CVE-2024-45483	B&R Industrial Automation B&R APROL 访问控制错误漏洞 — APROL CWE-306	6.1^AI	Medium ^AI	2025-03-25
CVE-2024-45480	B&R Industrial Automation B&R APROL 代码注入漏洞 — B&R APROL CWE-94	9.1^AI	Critical ^AI	2025-03-25
CVE-2024-10206	B&R Industrial Automation B&R APROL 代码问题漏洞 — APROL CWE-918	8.2^AI	High ^AI	2025-03-25
CVE-2024-8313	B&R Industrial Automation B&R APROL 安全漏洞 — APROL CWE-497	8.8^AI	High ^AI	2025-03-25
CVE-2025-30091	Tiny MoxieManager 安全漏洞 — MoxieManager PHP CWE-96	9.8^AI	Critical ^AI	2025-03-25
CVE-2025-1974	Kubernetes ingress-nginx 安全漏洞 — ingress-nginx CWE-653	9.8	Critical	2025-03-24
CVE-2023-25610	Fortinet FortiOS和FortiProxy 安全漏洞 — FortiSwitchManager CWE-124	9.3	Critical	2025-03-24
CVE-2021-26091	Fortinet FortiMail 安全特征问题特征问题漏洞 — FortiMail CWE-338	6.9	High	2025-03-24
CVE-2025-2186	WordPress plugin Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit SQL注入漏洞 — FunnelKit Automations – Email Marketing Automation and CRM for WordPress & WooCommerce CWE-89	7.5	High	2025-03-22
CVE-2024-13666	WordPress plugin Fluent Forms 输入验证错误漏洞 — Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder CWE-20	5.3	Medium	2025-03-22
CVE-2024-13768	WordPress plugin CITS Support svg, webp Media and TTF,OTF File Upload, Use Custom Fonts 跨站请求伪造漏洞 — CITS Support svg, webp Media and TTF,OTF File Upload, Use Custom Fonts CWE-352	4.3	Medium	2025-03-22
CVE-2025-2482	WordPress plugin Gotcha \| Gesture-based Captcha 跨站脚本漏洞 — Gotcha \| Gesture-based Captcha CWE-79	6.1	Medium	2025-03-22
CVE-2025-2484	WordPress plugin Multi Video Box 跨站脚本漏洞 — Multi Video Box CWE-79	6.1	Medium	2025-03-22
CVE-2025-2477	WordPress plugin CryoKey 跨站脚本漏洞 — CryoKey CWE-79	4.7	Medium	2025-03-22
CVE-2025-0807	WordPress plugin CITS Support svg, webp Media and TTF,OTF File Upload, Use Custom Fonts 跨站请求伪造漏洞 — CITS Support svg, webp Media and TTF,OTF File Upload, Use Custom Fonts CWE-352	4.3	Medium	2025-03-22
CVE-2025-2479	WordPress plugin Easy Custom Admin Bar 跨站脚本漏洞 — Easy Custom Admin Bar CWE-79	6.1	Medium	2025-03-22
CVE-2024-13739	WordPress plugin Newsletters 跨站脚本漏洞 — Newsletters CWE-79	6.1	Medium	2025-03-22
CVE-2025-2609	MagnusBilling 安全漏洞 — MagnusBilling CWE-79	8.2	High	2025-03-21
CVE-2019-16151	Fortinet FortiOS 跨站脚本漏洞 — FortiOS CWE-79	4.7	Medium	2025-03-21
CVE-2025-26336	Dell PowerEdge FX2和Dell PowerEdge VRTX 安全漏洞 — Dell Chassis Management Controller (CMC) for Dell PowerEdge FX2 CWE-121	8.3	High	2025-03-21

access:pre-auth 是常见的弱点类别，本平台收录该类弱点关联的 24858 条 CVE 漏洞。

目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

access:pre-auth 标签下的 CVE 漏洞 24858

目标达成感谢每一位支持者 — 我们达成了 100% 目标！