目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1336 元

100%
请我们喝杯咖啡

access:pre-auth 标签下的 CVE 漏洞 24858

access:pre-auth 类型相关 24858 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。

“access:pre-auth”标签标识了无需身份验证即可触发的漏洞，涵盖18971个CVE。此类漏洞之所以关键，是因为攻击者无需凭证即可直接利用，极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击，常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块，对系统安全性构成直接且严重的威胁。

CVE ID 标题 CVSS 风险等级 Published
CVE-2025-21627 GLPI 跨站脚本漏洞 — glpi CWE-79 6.5 Medium 2025-02-25
CVE-2025-1262 WordPress plugin Advanced Google reCaptcha 安全漏洞 — Advanced Google reCAPTCHA CWE-804 5.3 Medium 2025-02-25
CVE-2024-13693 WordPress plugin Enfold 访问控制错误漏洞 — Enfold - Responsive Multi-Purpose Theme CWE-284 5.3 Medium 2025-02-25
CVE-2024-13494 WordPress plugin WordPress File Upload 跨站请求伪造漏洞 — Iptanus File Upload CWE-352 4.3 Medium 2025-02-25
CVE-2025-1063 WordPress plugin Classified Listing 信息泄露漏洞 — Classified Listing – AI-Powered Classified ads & Business Directory Plugin CWE-200 5.3 Medium 2025-02-25
CVE-2025-1128 WordPress plugin Everest Forms 代码问题漏洞 — Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder CWE-434 9.8 Critical 2025-02-25
CVE-2025-1648 WordPress plugin Yawave SQL注入漏洞 — Yawave CWE-89 7.5 High 2025-02-25
CVE-2025-1488 WordPress plugin WPO365 MICROSOFT 365 GRAPH MAILER 输入验证错误漏洞 — WPO365 | MICROSOFT 365 GRAPH MAILER CWE-601 4.7 Medium 2025-02-24
CVE-2025-26201 GreaterWMS 安全漏洞 — n/a 9.8 - 2025-02-24
CVE-2024-13728 WordPress plugin Accept Donations with PayPal & Stripe 跨站脚本漏洞 — Accept Donations with PayPal & Stripe CWE-79 6.1 Medium 2025-02-23
CVE-2025-0957 WordPress plugin SMTP for Amazon SES 跨站脚本漏洞 — SMTP for Amazon SES – YaySMTP CWE-79 7.2 High 2025-02-22
CVE-2025-0953 WordPress plugin SMTP for Sendinblue 跨站脚本漏洞 — SMTP for Sendinblue – YaySMTP CWE-79 7.2 High 2025-02-22
CVE-2025-0918 WordPress plugin SMTP for SendGrid 跨站脚本漏洞 — SMTP for SendGrid – YaySMTP CWE-79 7.2 High 2025-02-22
CVE-2025-1361 WordPress plugin IP2Location Country Blocker 授权问题漏洞 — IP2Location Country Blocker CWE-285 7.5 High 2025-02-22
CVE-2024-12467 WordPress plugin Pago por Redsys 跨站脚本漏洞 — Pago por Redsys CWE-79 6.1 Medium 2025-02-22
CVE-2024-13474 WordPress plugin LTL Freight Quotes – Purolator Edition SQL注入漏洞 — LTL Freight Quotes – Purolator Edition CWE-89 7.5 High 2025-02-22
CVE-2024-13798 WordPress plugin Post Grid and Gutenberg Blocks – ComboBlocks 输入验证错误漏洞 — Post Grid CWE-20 5.3 Medium 2025-02-22
CVE-2025-1509 WordPress plugin Show Me The Cookies 代码注入漏洞 — Show Me The Cookies CWE-94 7.3 High 2025-02-22
CVE-2025-1510 WordPress plugin Custom Post Type Date Archives 代码注入漏洞 — Custom Post Type Date Archives CWE-94 7.3 High 2025-02-22
CVE-2019-8900 SecureROM 安全漏洞 — SecureROM 6.4 - 2025-02-21
CVE-2024-11260 WordPress plugin vents Manager SQL注入漏洞 — Events Manager – Calendar, Bookings, Tickets, and more! CWE-89 7.5 High 2025-02-21
CVE-2024-13537 WordPress plugin C9 Blocks 安全漏洞 — C9 Blocks CWE-209 5.3 Medium 2025-02-21
CVE-2024-13818 WordPress plugin Registration Forms 日志信息泄露漏洞 — Pie Register – User Registration, Profiles & Content Restriction CWE-532 5.3 Medium 2025-02-21
CVE-2024-13883 WordPress plugin WPUpper Share Buttons 跨站请求伪造漏洞 — WPUpper Share Buttons CWE-352 4.3 Medium 2025-02-21
CVE-2025-27091 Cisco OpenH264 安全漏洞 — openh264 CWE-122 6.8 - 2025-02-20
CVE-2025-1039 WordPress plugin Lenix Elementor Leads 安全漏洞 — Lenix Leads Collector CWE-79 7.2 High 2025-02-20
CVE-2024-13792 WordPress plugin WooCommerce Food - Restaurant Menu & Food ordering 代码注入漏洞 — WooCommerce Food - Restaurant Menu & Food ordering CWE-94 7.3 High 2025-02-20
CVE-2024-13476 WordPress plugin LTL Freight Quotes – GlobalTranz Edition SQL注入漏洞 — LTL Freight Quotes – GlobalTranz Edition CWE-89 7.5 High 2025-02-20
CVE-2024-13753 WordPress plugin Ultimate Classified Listings 跨站请求伪造漏洞 — Ultimate Classified Listings CWE-352 8.1 High 2025-02-20
CVE-2024-13789 WordPress plugin Ravpage 代码问题漏洞 — ravpage CWE-502 9.8 Critical 2025-02-20

access:pre-auth 是常见的弱点类别，本平台收录该类弱点关联的 24858 条 CVE 漏洞。