目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1336 元

100%
请我们喝杯咖啡

access:pre-auth 标签下的 CVE 漏洞 24850

access:pre-auth 类型相关 24850 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。

“access:pre-auth”标签标识了无需身份验证即可触发的漏洞，涵盖18971个CVE。此类漏洞之所以关键，是因为攻击者无需凭证即可直接利用，极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击，常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块，对系统安全性构成直接且严重的威胁。

CVE ID 标题 CVSS 风险等级 Published
CVE-2024-53850 Fields GLPI plugin 安全漏洞 — addressing CWE-470 8.2 High 2024-12-26
CVE-2024-53291 Dell NativeEdge 安全漏洞 — NativeEdge CWE-1230 7.5 High 2024-12-25
CVE-2023-5117 GitLab Community Edition和GitLab Enterprise Edition 安全漏洞 — GitLab CWE-213 3.7 Low 2024-12-25
CVE-2024-10862 WordPress plugin NEX-Forms SQL注入漏洞 — NEX-Forms – Ultimate Forms Plugin for WordPress CWE-89 4.9 Medium 2024-12-25
CVE-2024-11281 WordPress plugin WooCommerce Point of Sale 安全漏洞 — WooCommerce Point of Sale CWE-862 9.8 Critical 2024-12-25
CVE-2024-12428 WordPress plugin WP Data Access SQL注入漏洞 — WP Data Access – App Builder for Tables, Forms, Charts, Maps & Dashboards CWE-89 7.5 High 2024-12-25
CVE-2024-12636 WordPress plugin WP Legal Pages 跨站请求伪造漏洞 — Privacy Policy Generator – WPLP Legal Pages CWE-352 4.3 Medium 2024-12-25
CVE-2024-12413 WordPress plugin MarketKing — Ultimate WooCommerce Multivendor Marketplace Solution 安全漏洞 — MarketKing — Ultimate WooCommerce Multivendor Marketplace Solution CWE-862 5.3 Medium 2024-12-25
CVE-2019-2483 Oracle iStore 安全漏洞 — Oracle iStore 6.1 - 2024-12-24
CVE-2024-10584 WordPress plugin DirectoryPress 代码问题漏洞 — DirectoryPress – Business Directory And Classified Ad Listing CWE-434 5.4 Medium 2024-12-24
CVE-2024-12103 WordPress plugin Content No Cache 安全漏洞 — Content No Cache | Serve uncached partial content even when you add it to a page that is fully cached. CWE-639 5.3 Medium 2024-12-24
CVE-2024-12468 WordPress plugin WP Datepicker 跨站脚本漏洞 — WP Datepicker CWE-79 6.1 Medium 2024-12-24
CVE-2024-12100 WordPress plugin Bitcoin Lightning Publisher 跨站脚本漏洞 — Bitcoin Lightning Publisher for WordPress CWE-79 6.1 Medium 2024-12-24
CVE-2024-12405 WordPress plugin Export Customers Data 跨站脚本漏洞 — Export Customers Data CWE-79 6.1 Medium 2024-12-24
CVE-2024-12034 WordPress plugin Advanced Google reCAPTCHA 安全漏洞 — Advanced Google reCAPTCHA CWE-340 5.3 Medium 2024-12-24
CVE-2024-12266 WordPress plugin ELEX WooCommerce Dynamic Pricing and Discounts 安全漏洞 — ELEX WooCommerce Dynamic Pricing and Discounts CWE-862 6.5 Medium 2024-12-24
CVE-2024-12710 WordPress plugin WP-Appbox 跨站脚本漏洞 — WP-Appbox CWE-79 6.1 Medium 2024-12-24
CVE-2024-52321 Sharp多款产品 安全漏洞 — home 5G HR02 CWE-497 7.5 - 2024-12-23
CVE-2024-47864 Sharp HR02、Sharp SH-52B和Sharp SH-54C 安全漏洞 — home 5G HR02 CWE-120 7.5 - 2024-12-23
CVE-2024-46873 Sharp SH-05L、SH-52B、SH-54C和HR02 安全漏洞 — home 5G HR02 CWE-489 9.8 - 2024-12-23
CVE-2024-11688 WordPress plugin LaTeX2HTML 跨站脚本漏洞 — LaTeX2HTML CWE-79 6.1 Medium 2024-12-21
CVE-2024-11722 WordPress plugin Frontend Admin by DynamiApps SQL注入漏洞 — Frontend Admin by DynamiApps CWE-89 5.9 Medium 2024-12-21
CVE-2024-12408 WordPress plugin WP on AWS 跨站脚本漏洞 — WP on AWS CWE-79 6.1 Medium 2024-12-21
CVE-2024-11808 WordPress plugin Pingmeter Uptime Monitoring 跨站脚本漏洞 — Pingmeter Uptime Monitoring CWE-79 6.1 Medium 2024-12-21
CVE-2024-11682 WordPress plugin G Web Pro Store Locator 跨站脚本漏洞 — G Web Pro Store Locator CWE-79 6.1 Medium 2024-12-21
CVE-2024-11975 WordPress plugin Reactflow Visitor Recording and Heatmaps 跨站请求伪造漏洞 — Reactflow Visitor Recording and Heatmaps CWE-79 6.1 Medium 2024-12-21
CVE-2024-12262 WordPress plugin Ebook Store 跨站脚本漏洞 — Ebook Store CWE-79 6.1 Medium 2024-12-21
CVE-2024-12771 WordPress plugin eCommerce Product Catalog Plugin for WordPress 跨站请求伪造漏洞 — eCommerce Product Catalog Plugin for WordPress CWE-352 8.8 High 2024-12-21
CVE-2024-11287 WordPress plugin Ebook Store 跨站脚本漏洞 — Ebook Store CWE-79 6.1 Medium 2024-12-21
CVE-2024-11977 WordPress plugin The kk Star Ratings 代码注入漏洞 — kk Star Ratings – Rate Post & Collect User Feedbacks CWE-94 7.3 High 2024-12-21

access:pre-auth 是常见的弱点类别，本平台收录该类弱点关联的 24850 条 CVE 漏洞。