目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1336 元

100%
请我们喝杯咖啡

access:pre-auth 标签下的 CVE 漏洞 24858

access:pre-auth 类型相关 24858 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。

“access:pre-auth”标签标识了无需身份验证即可触发的漏洞，涵盖18971个CVE。此类漏洞之所以关键，是因为攻击者无需凭证即可直接利用，极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击，常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块，对系统安全性构成直接且严重的威胁。

CVE ID 标题 CVSS 风险等级 Published
CVE-2024-13520 WordPress plugin Gift Cards 安全漏洞 — Gift Cards (Gift Vouchers and Packages) (WooCommerce Supported) CWE-862 5.3 Medium 2025-02-20
CVE-2025-1483 WordPress plugin LTL Freight Quotes 安全漏洞 — LTL Freight Quotes – GlobalTranz Edition CWE-862 5.3 Medium 2025-02-20
CVE-2024-13888 WordPress plugin WPMobile.App 输入验证错误漏洞 — WPMobile.App CWE-601 7.2 High 2025-02-20
CVE-2024-54961 Nagios XI 安全漏洞 — n/a 5.3 - 2025-02-20
CVE-2025-20211 Cisco BroadWorks Application Delivery Platform 跨站脚本漏洞 — Cisco BroadWorks CWE-79 6.1 Medium 2025-02-19
CVE-2025-20153 Cisco Secure Email Gateway 访问控制错误漏洞 — Cisco Secure Email CWE-284 5.8 Medium 2025-02-19
CVE-2024-13533 WordPress plugin Small Package Quotes – USPS Edition SQL注入漏洞 — Small Package Quotes – USPS Edition CWE-89 7.5 High 2025-02-19
CVE-2024-13534 WordPress plugin Small Package Quotes SQL注入漏洞 — Small Package Quotes – Worldwide Express Edition CWE-89 7.5 High 2025-02-19
CVE-2024-13481 WordPress plugin LTL Freight Quotes SQL注入漏洞 — LTL Freight Quotes – R+L Carriers Edition CWE-89 7.5 High 2025-02-19
CVE-2024-13483 WordPress plugin LTL Freight Quotes SQL注入漏洞 — LTL Freight Quotes – SAIA Edition CWE-89 7.5 High 2025-02-19
CVE-2024-13491 WordPress plugin Small Package Quotes SQL注入漏洞 — Small Package Quotes – For Customers of FedEx CWE-89 7.5 High 2025-02-19
CVE-2024-13479 WordPress plugin LTL Freight Quotes SQL注入漏洞 — LTL Freight Quotes – SEFL Edition CWE-89 7.5 High 2025-02-19
CVE-2024-13485 WordPress plugin LTL Freight Quotes SQL注入漏洞 — LTL Freight Quotes – ABF Freight Edition CWE-89 7.5 High 2025-02-19
CVE-2024-13478 WordPress plugin LTL Freight Quotes SQL注入漏洞 — LTL Freight Quotes – TForce Edition CWE-89 7.5 High 2025-02-19
CVE-2025-0968 WordPress plugin ElementsKit Elementor addons 访问控制错误漏洞 — ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor CWE-284 5.3 Medium 2025-02-19
CVE-2025-0916 WordPress plugin YaySMTP and Email Logs 跨站脚本漏洞 — YaySMTP and Email Logs: Amazon SES, SendGrid, Outlook, Mailgun, Brevo, Google and Any SMTP Service CWE-79 7.2 High 2025-02-19
CVE-2024-13489 WordPress plugin LTL Freight Quotes SQL注入漏洞 — LTL Freight Quotes – Old Dominion Edition CWE-89 7.5 High 2025-02-19
CVE-2024-13339 WordPress plugin DeBounce Email Validator 跨站请求伪造漏洞 — DeBounce Email Validator CWE-352 6.1 Medium 2025-02-19
CVE-2024-13363 WordPress plugin Raptive Ads 跨站脚本漏洞 — Raptive Ads CWE-79 6.1 Medium 2025-02-19
CVE-2024-13364 WordPress plugin Raptive Ads 安全漏洞 — Raptive Ads CWE-862 5.3 Medium 2025-02-19
CVE-2024-13231 WordPress plugin WordPress Portfolio Builder 安全漏洞 — WordPress Portfolio Builder – Portfolio Gallery CWE-862 5.3 Medium 2025-02-19
CVE-2024-13336 WordPress plugin Disable Auto Updates 跨站请求伪造漏洞 — Disable Auto Updates CWE-352 4.3 Medium 2025-02-19
CVE-2024-13405 WordPress plugin Apptivo Business Site CRM 跨站请求伪造漏洞 — Apptivo Business Site CWE-352 4.3 Medium 2025-02-19
CVE-2024-13468 WordPress plugin Trash Duplicate and 301 Redirect 安全漏洞 — Trash Duplicate and 301 Redirect CWE-862 7.5 High 2025-02-19
CVE-2024-13736 WordPress plugin Pure Chat – Live Chat & More! 跨站脚本漏洞 — Pure Chat – Live Chat & More! CWE-79 6.1 Medium 2025-02-19
CVE-2024-12339 WordPress plugin Digihood HTML Sitemap 跨站脚本漏洞 — Digihood HTML Sitemap CWE-79 6.1 Medium 2025-02-19
CVE-2024-12069 WordPress plugin Lexicata 跨站脚本漏洞 — Lexicata CWE-79 6.1 Medium 2025-02-19
CVE-2024-13711 WordPress plugin Pollin 跨站脚本漏洞 — Pollin CWE-79 6.1 Medium 2025-02-19
CVE-2024-13719 WordPress plugin PeproDev Ultimate Invoice 安全漏洞 — PeproDev Ultimate Invoice CWE-862 5.3 Medium 2025-02-19
CVE-2024-13712 WordPress plugin Pollin SQL注入漏洞 — Pollin CWE-89 4.9 Medium 2025-02-19

access:pre-auth 是常见的弱点类别，本平台收录该类弱点关联的 24858 条 CVE 漏洞。