access:pre-auth 类型相关 24858 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞，涵盖18971个CVE。此类漏洞之所以关键，是因为攻击者无需凭证即可直接利用，极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击，常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块，对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2024-12039 | dify 安全漏洞 — langgenius/dify CWE-307 | 9.8 | - | 2025-03-20 |
| CVE-2024-11044 | Stable Diffusion web UI 输入验证错误漏洞 — automatic1111/stable-diffusion-webui CWE-601 | 6.1 | - | 2025-03-20 |
| CVE-2024-8984 | LiteLLM 资源管理错误漏洞 — berriai/litellm CWE-770 | 7.5 | - | 2025-03-20 |
| CVE-2024-10821 | Invoke 资源管理错误漏洞 — invoke-ai/invokeai CWE-835 | 7.5 | - | 2025-03-20 |
| CVE-2024-10553 | H2O 代码问题漏洞 — h2oai/h2o-3 CWE-502 | 9.8 | - | 2025-03-20 |
| CVE-2024-9340 | ZenML 资源管理错误漏洞 — zenml-io/zenml CWE-835 | 7.5 | - | 2025-03-20 |
| CVE-2024-10713 | HyperLPR 资源管理错误漏洞 — szad670401/hyperlpr CWE-770 | 7.5 | - | 2025-03-20 |
| CVE-2025-2505 | WordPress plugin Age Gate 路径遍历漏洞 — Age Gate CWE-22 | 9.8 | Critical | 2025-03-20 |
| CVE-2025-1766 | WordPress plugin Eventin 安全漏洞 — Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) CWE-862 | 5.3 | Medium | 2025-03-20 |
| CVE-2025-1314 | WordPress plugin Custom Twitter Feeds 跨站请求伪造漏洞 — Custom Twitter Feeds – A Tweets Widget or X Feed Widget CWE-352 | 4.3 | Medium | 2025-03-20 |
| CVE-2025-0431 | Proofpoint Enterprise Protection 安全漏洞 — Enterprise Protection CWE-790 | 5.8 | Medium | 2025-03-19 |
| CVE-2025-2512 | WordPress plugin File Away 代码问题漏洞 — File Away CWE-434 | 9.8 | Critical | 2025-03-19 |
| CVE-2024-13442 | WordPress plugin Service Finder Bookings 安全漏洞 — Service Finder Bookings CWE-288 | 9.8 | Critical | 2025-03-19 |
| CVE-2024-13933 | WordPress plugin FoodBakery | Delivery Restaurant Directory 跨站请求伪造漏洞 — FoodBakery | Delivery Restaurant Directory WordPress Theme CWE-352 | 8.8 | High | 2025-03-19 |
| CVE-2024-13790 | WordPress plugin MinimogWP 安全漏洞 — MinimogWP – The High Converting eCommerce WordPress Theme CWE-98 | 9.8 | Critical | 2025-03-19 |
| CVE-2024-13412 | WordPress plugin CozyStay 安全漏洞 — CozyStay - Hotel Booking WordPress Theme CWE-862 | 7.5 | High | 2025-03-19 |
| CVE-2024-13410 | WordPress plugin CozyStay和WordPress plugin TinySalt 代码问题漏洞 — CozyStay - Hotel Booking WordPress Theme CWE-502 | 9.8 | Critical | 2025-03-19 |
| CVE-2025-1232 | WordPress plugin Site Reviews 安全漏洞 — Site Reviews | 6.1 | - | 2025-03-19 |
| CVE-2024-12922 | WordPress plugin Altair 安全漏洞 — Altair CWE-862 | 9.8 | Critical | 2025-03-19 |
| CVE-2025-2290 | WordPress plugin LifterLMS 安全漏洞 — LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes CWE-862 | 5.3 | Medium | 2025-03-19 |
| CVE-2025-24799 | GLPI SQL注入漏洞 — glpi CWE-89 | 7.5 | High | 2025-03-18 |
| CVE-2023-22514 | Atlassian Sourcetree 安全漏洞 — Sourcetree for Mac | - | - | 2025-03-18 |
| CVE-2023-47539 | Fortinet FortiMail 安全漏洞 — FortiMail CWE-284 | 9.0 | Critical | 2025-03-18 |
| CVE-2024-41975 | CODESYS Edge Gateway 安全漏洞 — CODESYS Edge Gateway CWE-1188 | 5.3 | Medium | 2025-03-18 |
| CVE-2024-23943 | MB Connect Line mbCONNECT24 访问控制错误漏洞 — mbCONNECT24 CWE-306 | 9.1 | Critical | 2025-03-18 |
| CVE-2025-1468 | CODESYS Runtime Toolkit 安全漏洞 — CODESYS Runtime Toolkit CWE-203 | 7.5 | High | 2025-03-18 |
| CVE-2025-2262 | WordPress plugin Logo Slider 安全漏洞 — Logo Slider – Logo Showcase, Logo Carousel, Logo Gallery and Client Logo Presentation CWE-862 | 7.3 | High | 2025-03-18 |
| CVE-2025-26137 | Systemic RiskValue 安全漏洞 — n/a | 7.5 | - | 2025-03-18 |
| CVE-2023-22512 | Atlassian Confluence 安全漏洞 — Confluence Data Center | - | - | 2025-03-17 |
| CVE-2024-48831 | Dell SmartFabric OS10 安全漏洞 — SmartFabric OS10 Software CWE-259 | 8.4 | High | 2025-03-17 |
access:pre-auth 是常见的弱点类别，本平台收录该类弱点关联的 24858 条 CVE 漏洞。