目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1336 元

100%
请我们喝杯咖啡

access:pre-auth 标签下的 CVE 漏洞 24857

access:pre-auth 类型相关 24857 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。

“access:pre-auth”标签标识了无需身份验证即可触发的漏洞，涵盖18971个CVE。此类漏洞之所以关键，是因为攻击者无需凭证即可直接利用，极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击，常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块，对系统安全性构成直接且严重的威胁。

CVE ID 标题 CVSS 风险等级 Published
CVE-2024-13532 WordPress plugin Small Package Quotes SQL注入漏洞 — Small Package Quotes – Purolator Edition CWE-89 7.5 High 2025-02-12
CVE-2025-0511 WordPress plugin Welcart e-Commerce 跨站脚本漏洞 — Welcart e-Commerce CWE-79 7.2 High 2025-02-12
CVE-2024-13475 WordPress plugin Small Package Quotes – UPS Edition SQL注入漏洞 — Small Package Quotes – UPS Edition CWE-89 7.5 High 2025-02-12
CVE-2024-13531 WordPress plugin ShipEngine Shipping Quotes SQL注入漏洞 — ShipEngine Shipping Quotes CWE-89 7.5 High 2025-02-12
CVE-2024-13365 WordPress plugin Security & Malware scan by CleanTalk 代码问题漏洞 — Login Security, FireWall, Malware removal by CleanTalk CWE-434 9.8 Critical 2025-02-12
CVE-2024-13437 WordPress plugin Book a Room 跨站请求伪造漏洞 — Book a Room CWE-352 4.3 Medium 2025-02-12
CVE-2024-12213 WordPress plugin WP Job Board Pro 安全漏洞 — WP Job Board Pro CWE-266 9.8 Critical 2025-02-12
CVE-2024-13490 WordPress plugin LTL Freight Quotes SQL注入漏洞 — LTL Freight Quotes – XPO Edition CWE-89 7.5 High 2025-02-12
CVE-2024-13435 WordPress plugin Ebook Downloader SQL注入漏洞 — Ebook Downloader CWE-89 7.5 High 2025-02-12
CVE-2024-13473 WordPress plugin LTL Freight Quotes SQL注入漏洞 — LTL Freight Quotes – Worldwide Express Edition CWE-89 7.5 High 2025-02-12
CVE-2024-12315 WordPress plugin Export All Posts 安全漏洞 — Export All Posts, Products, Orders, Refunds & Users CWE-922 7.5 High 2025-02-12
CVE-2024-13794 WordPress plugin WP Ghost (Hide My WP Ghost) – Security & Firewall 安全漏洞 — WP Ghost (Hide My WP Ghost) – Security & Firewall CWE-693 5.3 Medium 2025-02-12
CVE-2024-13821 WordPress plugin WP Booking Calendar 授权问题漏洞 — Booking Calendar CWE-285 5.3 Medium 2025-02-12
CVE-2024-13600 WordPress plugin Majestic Support 信息泄露漏洞 — Majestic Support – The Leading-Edge Help Desk & Customer Support Plugin CWE-200 7.5 High 2025-02-12
CVE-2024-13421 WordPress plugin Real Estate 7 安全漏洞 — Real Estate 7 WordPress CWE-266 9.8 Critical 2025-02-12
CVE-2024-13749 WordPress plugin StaffList 跨站脚本漏洞 — StaffList CWE-79 6.1 Medium 2025-02-12
CVE-2025-0808 WordPress plugin Houzez Property Feed 跨站请求伪造漏洞 — Houzez Property Feed CWE-352 4.3 Medium 2025-02-12
CVE-2024-13539 WordPress plugin AForms Eats 安全漏洞 — AForms Eats CWE-209 5.3 Medium 2025-02-12
CVE-2024-13554 WordPress plugin Ultimate WordPress Toolkit 安全漏洞 — The Ultimate WordPress Toolkit – WP Extended CWE-862 5.3 Medium 2025-02-12
CVE-2022-3180 WordPress plugin WPGateway 权限许可和访问控制问题漏洞 — WPGateway CWE-290 9.8 - 2025-02-11
CVE-2025-24406 Adobe Commerce 路径遍历漏洞 — Adobe Commerce CWE-22 7.5 High 2025-02-11
CVE-2025-24472 Fortinet FortiOS 安全漏洞 — FortiOS CWE-288 8.1 High 2025-02-11
CVE-2025-22399 Dell UCC Edge 代码问题漏洞 — UCC Edge CWE-918 7.9 High 2025-02-11
CVE-2024-35279 Fortinet FortiOS 安全漏洞 — FortiOS CWE-121 7.7 High 2025-02-11
CVE-2025-24470 Fortinet FortiPortal 安全漏洞 — FortiPortal CWE-41 8.1 High 2025-02-11
CVE-2024-13830 Ivanti Connect Secure 跨站脚本漏洞 — Connect Secure CWE-79 6.1 Medium 2025-02-11
CVE-2024-11771 Ivanti CSA 路径遍历漏洞 — Cloud Services Application CWE-22 5.3 Medium 2025-02-11
CVE-2025-24812 Siemens SIMATIC S7-1200 安全漏洞 — SIMATIC S7-1200 CPU 1211C AC/DC/Rly CWE-1286 6.5 Medium 2025-02-11
CVE-2025-24811 Siemens SIMATIC S7-1200 安全漏洞 — SIMATIC S7-1200 CPU 1211C AC/DC/Rly CWE-404 7.5 High 2025-02-11
CVE-2024-54015 Siemens SIPROTEC 5 安全漏洞 — SIPROTEC 5 6MD84 (CP300) CWE-1392 7.5 High 2025-02-11

access:pre-auth 是常见的弱点类别，本平台收录该类弱点关联的 24857 条 CVE 漏洞。