access:pre-auth 类型相关 24858 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞，涵盖18971个CVE。此类漏洞之所以关键，是因为攻击者无需凭证即可直接利用，极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击，常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块，对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2019-6697 | Fortinet FortiGate 跨站脚本漏洞 — FortiOS CWE-79 | 5.2 | Medium | 2025-03-17 |
| CVE-2025-27102 | Agate 跨站脚本漏洞 — agate CWE-79 | 6.1 | - | 2025-03-17 |
| CVE-2019-17659 | Fortinet FortiSIEM 安全漏洞 — FortiSIEM CWE-798 | 3.6 | Low | 2025-03-17 |
| CVE-2021-32584 | FortiWLC 访问控制错误漏洞 — FortiWLC CWE-284 | 4.8 | Medium | 2025-03-17 |
| CVE-2025-2395 | e-Excellence U-Office Force 安全漏洞 — U-Office Force CWE-565 | 9.8 | Critical | 2025-03-17 |
| CVE-2025-1530 | WordPress plugin Tripetto 跨站请求伪造漏洞 — WordPress form builder plugin for contact forms, surveys and quizzes – Tripetto CWE-352 | 4.3 | Medium | 2025-03-15 |
| CVE-2025-2025 | WordPress plugin GiveWP 安全漏洞 — GiveWP – Donation Plugin and Fundraising Platform CWE-862 | 6.5 | Medium | 2025-03-15 |
| CVE-2019-25222 | WordPress plugin Thumbnail carousel slider SQL注入漏洞 — Thumbnail carousel slider CWE-89 | 4.9 | Medium | 2025-03-15 |
| CVE-2025-2325 | WordPress plugin WP Test Email 跨站脚本漏洞 — WP Test Email CWE-79 | 7.2 | High | 2025-03-15 |
| CVE-2025-1771 | WordPress plugin Traveler 安全漏洞 — Travel Booking WordPress Theme CWE-98 | 9.8 | Critical | 2025-03-15 |
| CVE-2024-13497 | WordPress plugin Tripetto 安全漏洞 — WordPress form builder plugin for contact forms, surveys and quizzes – Tripetto CWE-80 | 7.2 | High | 2025-03-15 |
| CVE-2025-1773 | WordPress plugin Traveler 跨站脚本漏洞 — Travel Booking WordPress Theme CWE-79 | 6.1 | Medium | 2025-03-15 |
| CVE-2025-2164 | WordPress plugin pixelstats 跨站脚本漏洞 — pixelstats CWE-79 | 6.1 | Medium | 2025-03-15 |
| CVE-2025-2163 | WordPress plugin Zoorum Comments 跨站脚本漏洞 — Zoorum Comments CWE-79 | 6.1 | Medium | 2025-03-15 |
| CVE-2024-12245 | LogicalDOC SQL注入漏洞 — LogicalDOC Community CWE-89 | 9.1 | - | 2025-03-14 |
| CVE-2024-12020 | LogicalDOC 跨站脚本漏洞 — LogicalDOC Enterprise CWE-79 | 6.1 | - | 2025-03-14 |
| CVE-2024-54445 | LogicalDOC SQL注入漏洞 — LogicalDOC Community CWE-89 | 9.1 | - | 2025-03-14 |
| CVE-2023-48785 | Fortinet FortiNAC-F 信任管理问题漏洞 — FortiNAC-F CWE-295 | 4.4 | Medium | 2025-03-14 |
| CVE-2024-40590 | Fortinet FortiPortal 信任管理问题漏洞 — FortiPortal CWE-295 | 4.4 | Medium | 2025-03-14 |
| CVE-2024-13773 | WordPress plugin Civi 安全漏洞 — Civi - Job Board & Freelance Marketplace WordPress Theme CWE-321 | 7.3 | High | 2025-03-14 |
| CVE-2024-13772 | WordPress plugin Civi 安全漏洞 — Civi - Job Board & Freelance Marketplace WordPress Theme CWE-288 | 5.6 | Medium | 2025-03-14 |
| CVE-2025-2232 | WordPress plugin Realteo 安全漏洞 — Realteo CWE-269 | 9.8 | Critical | 2025-03-14 |
| CVE-2024-13771 | WordPress plugin Civi 安全漏洞 — Civi - Job Board & Freelance Marketplace WordPress Theme CWE-288 | 9.8 | Critical | 2025-03-14 |
| CVE-2024-26006 | Fortinet FortiOS 安全漏洞 — FortiProxy CWE-79 | 6.9 | High | 2025-03-14 |
| CVE-2025-1507 | WordPress plugin ShareThis Dashboard for Google Analytics 安全漏洞 — ShareThis Dashboard for Google Analytics CWE-862 | 5.3 | Medium | 2025-03-14 |
| CVE-2024-13321 | WordPress plugin AnalyticsWP SQL注入漏洞 — AnalyticsWP CWE-89 | 7.5 | High | 2025-03-14 |
| CVE-2025-2221 | WordPress plugin WPCOM Member SQL注入漏洞 — WPCOM Member CWE-89 | 7.5 | High | 2025-03-14 |
| CVE-2024-13824 | WordPress plugin CiyaShop 代码问题漏洞 — CiyaShop - Multipurpose WooCommerce Theme CWE-502 | 9.8 | Critical | 2025-03-14 |
| CVE-2024-13913 | WordPress plugin InstaWP Connect 跨站请求伪造漏洞 — InstaWP Connect – 1-click WP Staging & Migration CWE-352 | 8.8 | High | 2025-03-14 |
| CVE-2025-1764 | WordPress plugin LoginPress 跨站请求伪造漏洞 — LoginPress | wp-login Custom Login Page Customizer CWE-352 | 7.5 | High | 2025-03-14 |
access:pre-auth 是常见的弱点类别，本平台收录该类弱点关联的 24858 条 CVE 漏洞。