目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1336 元

100%
请我们喝杯咖啡

access:pre-auth 标签下的 CVE 漏洞 24858

access:pre-auth 类型相关 24858 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。

“access:pre-auth”标签标识了无需身份验证即可触发的漏洞，涵盖18971个CVE。此类漏洞之所以关键，是因为攻击者无需凭证即可直接利用，极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击，常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块，对系统安全性构成直接且严重的威胁。

CVE ID 标题 CVSS 风险等级 Published
CVE-2024-13518 WordPress plugin Simple:Press Forum 跨站请求伪造漏洞 — Simple:Press Forum CWE-352 4.3 Medium 2025-03-01
CVE-2024-13746 WordPress plugin Booking Calendar and Notification 安全漏洞 — Booking Calendar and Notification CWE-862 6.5 Medium 2025-03-01
CVE-2024-9217 WordPress plugin Currency Switcher for WooCommerce 跨站脚本漏洞 — Currency Switcher for WooCommerce CWE-79 6.1 Medium 2025-03-01
CVE-2024-13568 WordPress plugin Fluent Support 信息泄露漏洞 — Fluent Support – Helpdesk & Customer Support Ticket System CWE-200 7.5 High 2025-03-01
CVE-2025-23405 Dario Health USB-C Blood Glucose Monitoring System 安全漏洞 — USB-C Blood Glucose Monitoring System Starter Kit Android Applications CWE-117 5.3 Medium 2025-02-28
CVE-2025-1319 WordPress plugin Site Mailer – SMTP Replacement, Email API Deliverability & Email Log 跨站脚本漏洞 — Site Mailer – SMTP Replacement, Email API Deliverability & Email Log CWE-79 7.2 High 2025-02-28
CVE-2024-8420 WordPress plugin DHVC Form 安全漏洞 — DHVC Form CWE-266 9.8 Critical 2025-02-28
CVE-2025-1570 WordPress plugin Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings 授权问题漏洞 — Directorist: AI-Powered Business Directory, Listings & Classified Ads CWE-640 8.1 High 2025-02-28
CVE-2024-13638 WordPress plugin Order Attachments for WooCommerce 信息泄露漏洞 — Order Attachments for WooCommerce CWE-200 5.9 Medium 2025-02-28
CVE-2024-8425 WordPress plugin WooCommerce Ultimate Gift Card 代码问题漏洞 — WooCommerce Ultimate Gift Card CWE-434 9.8 Critical 2025-02-28
CVE-2024-9193 WordPress plugin WHMpress 安全漏洞 — WHMpress - WHMCS WordPress Integration Plugin CWE-98 9.8 Critical 2025-02-28
CVE-2025-1506 WordPress plugin Wp Social Login and Register Social Counter 跨站请求伪造漏洞 — Wp Social Login and Register Social Counter CWE-352 4.3 Medium 2025-02-28
CVE-2025-1513 WordPress plugin contest gallery 跨站脚本漏洞 — Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe CWE-79 7.2 High 2025-02-28
CVE-2025-1511 WordPress plugin User Registration & Membership – Custom Registration Form, Login Form, and User Profile 跨站脚本漏洞 — User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder CWE-79 6.1 Medium 2025-02-28
CVE-2025-1505 WordPress plugin Advanced AJAX Product Filters 跨站脚本漏洞 — Advanced AJAX Product Filters CWE-79 6.1 Medium 2025-02-28
CVE-2025-0801 WordPress plugin RateMyAgent Official 跨站请求伪造漏洞 — RateMyAgent Official CWE-352 4.3 Medium 2025-02-28
CVE-2024-13796 WordPress plugin Post Grid and Gutenberg Blocks 信息泄露漏洞 — Post Grid CWE-200 5.3 Medium 2025-02-28
CVE-2025-1687 WordPress plugin Cardealer 跨站请求伪造漏洞 — Car Dealer Automotive WordPress Theme – Responsive CWE-352 8.8 High 2025-02-27
CVE-2025-1717 WordPress plugin Login Me Now 安全漏洞 — Login Me Now – Passwordless, Magic Link, OTP & Social Login for WordPress CWE-288 8.1 High 2025-02-27
CVE-2024-13647 WordPress plugin SakolaWP 跨站请求伪造漏洞 — School Management System – SakolaWP CWE-352 4.3 Medium 2025-02-27
CVE-2024-13905 WordPress plugin OneStore Sites 代码问题漏洞 — OneStore Sites CWE-918 5.3 Medium 2025-02-27
CVE-2024-53944 Tuoshi LT15D 安全漏洞 — n/a 9.8 - 2025-02-27
CVE-2025-0941 Beckman Coulter MET ONE 3400+ instruments running software 安全漏洞 — MET ONE 3400+ CWE-209 5.8 Medium 2025-02-26
CVE-2025-20111 Cisco Nexus 3000 Series Switches和Cisco Nexus 9000 Series Switches 安全漏洞 — Cisco NX-OS Software CWE-1220 7.4 High 2025-02-26
CVE-2025-0719 IBM Cloud Pak for Data 跨站脚本漏洞 — Cloud Pak for Data CWE-79 6.1 Medium 2025-02-26
CVE-2025-0731 SMA Solar Sunny Portal 代码问题漏洞 — www.sunnyportal.com CWE-434 6.5 Medium 2025-02-26
CVE-2024-13560 WordPress plugin Subscriptions & Memberships for PayPal 跨站请求伪造漏洞 — Subscriptions & Memberships for PayPal CWE-352 4.3 Medium 2025-02-26
CVE-2024-12434 WordPress plugin SureMembers 信息泄露漏洞 — SureMembers CWE-200 5.3 Medium 2025-02-26
CVE-2024-30150 HCL MyCloud 安全漏洞 — MyCloud CWE-269 5.3 Medium 2025-02-25
CVE-2024-45424 Zoom Workplace 安全漏洞 — Zoom Workplace Apps CWE-840 5.3 Medium 2025-02-25

access:pre-auth 是常见的弱点类别，本平台收录该类弱点关联的 24858 条 CVE 漏洞。