access:pre-auth 类型相关 24831 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞，涵盖18971个CVE。此类漏洞之所以关键，是因为攻击者无需凭证即可直接利用，极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击，常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块，对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2024-5333 | WordPress plugin The Events Calendar 安全漏洞 — The Events Calendar | 5.3 | - | 2024-12-16 |
| CVE-2024-11721 | WordPress plugin Frontend Admin by DynamiApps 安全漏洞 — Frontend Admin by DynamiApps CWE-269 | 8.1 | High | 2024-12-14 |
| CVE-2024-11720 | WordPress plugin Frontend Admin by DynamiApps 跨站脚本漏洞 — Frontend Admin by DynamiApps CWE-79 | 7.2 | High | 2024-12-14 |
| CVE-2024-11712 | WordPress plugin WP Job Portal 安全漏洞 — WP Job Portal – AI-Powered Recruitment System for Company or Job Board website CWE-359 | 5.3 | Medium | 2024-12-14 |
| CVE-2024-11711 | WordPress plugin WP Job Portal SQL注入漏洞 — WP Job Portal – AI-Powered Recruitment System for Company or Job Board website CWE-89 | 7.5 | High | 2024-12-14 |
| CVE-2024-11715 | WordPress plugin WP Job Portal 安全漏洞 — WP Job Portal – AI-Powered Recruitment System for Company or Job Board website CWE-862 | 4.8 | Medium | 2024-12-14 |
| CVE-2024-12422 | WordPress plugin Import Eventbrite Events 跨站脚本漏洞 — Import Eventbrite Events CWE-79 | 6.1 | Medium | 2024-12-14 |
| CVE-2024-10646 | WordPress plugin Contact Form 跨站脚本漏洞 — Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder CWE-79 | 7.2 | High | 2024-12-14 |
| CVE-2024-12411 | WordPress plugin WP Ad Guru 跨站脚本漏洞 — WP Ad Guru – Banner ad, Responsive popup, Popup maker, Ad rotator & More CWE-79 | 6.1 | Medium | 2024-12-14 |
| CVE-2024-11462 | WordPress plugin Filestack Official 跨站脚本漏洞 — Filestack WP Upload CWE-79 | 6.1 | Medium | 2024-12-14 |
| CVE-2024-12578 | WordPress plugin Tickera – WordPress Event Ticketing 信息泄露漏洞 — Tickera – Sell Tickets & Manage Events CWE-200 | 5.3 | Medium | 2024-12-14 |
| CVE-2024-12555 | WordPress plugin SIP Calculator 跨站请求伪造漏洞 — SIP Calculator CWE-352 | 6.1 | Medium | 2024-12-14 |
| CVE-2024-28980 | Dell RecoverPoint for Virtual Machines 加密问题漏洞 — RecoverPoint for Virtual Machines CWE-327 | 6.5 | Medium | 2024-12-13 |
| CVE-2024-48007 | Dell RecoverPoint for Virtual Machines 安全漏洞 — RecoverPoint for Virtual Machines | 5.3 | Medium | 2024-12-13 |
| CVE-2024-11986 | CrushFTP 安全漏洞 — CrushFTP CWE-79 | 9.6 | Critical | 2024-12-13 |
| CVE-2024-9608 | WordPress plugin MyParcel 跨站脚本漏洞 — MyParcel CWE-79 | 6.1 | Medium | 2024-12-13 |
| CVE-2024-9290 | WordPress plugin Super Backup & Clone 代码问题漏洞 — Super Backup & Clone - Migrate for WordPress CWE-434 | 9.8 | Critical | 2024-12-13 |
| CVE-2024-10783 | WordPress plugin MainWP Child 安全漏洞 — MainWP Child – Securely Connects to the MainWP Dashboard to Manage Multiple Sites CWE-862 | 8.1 | High | 2024-12-13 |
| CVE-2024-12309 | WordPress plugin Rate My Post – Star Rating Plugin by FeedbackWP 安全漏洞 — Rate My Post – Star Rating Plugin by FeedbackWP CWE-639 | 5.3 | Medium | 2024-12-13 |
| CVE-2024-12417 | WordPress plugin Simple Link Directory 代码注入漏洞 — Simple Link Directory CWE-94 | 6.5 | Medium | 2024-12-13 |
| CVE-2024-12414 | WordPress plugin Themify Store Locator 跨站请求伪造漏洞 — Themify Store Locator CWE-352 | 4.3 | Medium | 2024-12-13 |
| CVE-2024-12420 | WordPress plugin WPMobile.App 代码注入漏洞 — WPMobile.App CWE-94 | 6.5 | Medium | 2024-12-13 |
| CVE-2024-12421 | WordPress plugin The Coupon Affiliates 代码注入漏洞 — Coupon Affiliates – Affiliate Plugin for WooCommerce CWE-94 | 6.5 | Medium | 2024-12-13 |
| CVE-2024-11809 | WordPress plugin Primer MyData for Woocommerce 跨站脚本漏洞 — Primer MyData for Woocommerce CWE-79 | 6.1 | Medium | 2024-12-13 |
| CVE-2024-12574 | WordPress plugin SVG Shortcode 跨站脚本漏洞 — SVG Shortcode CWE-79 | 5.4 | Medium | 2024-12-13 |
| CVE-2024-12579 | WordPress plugin Minify HTML 资源管理错误漏洞 — Minify HTML CWE-400 | 5.3 | Medium | 2024-12-13 |
| CVE-2024-12300 | WordPress plugin AR for WordPress 安全漏洞 — AR for WordPress CWE-862 | 3.7 | Low | 2024-12-13 |
| CVE-2024-12572 | WordPress plugin Hello In All Languages 跨站请求伪造漏洞 — Hello In All Languages CWE-352 | 6.1 | Medium | 2024-12-13 |
| CVE-2019-25221 | WordPress plugin Responsive Filterable Portfolio SQL注入漏洞 — Responsive Filterable Portfolio CWE-89 | 6.5 | Medium | 2024-12-13 |
| CVE-2024-55956 | Cleo多款产品 安全漏洞 — n/a | 9.8 | - | 2024-12-13 |
access:pre-auth 是常见的弱点类别，本平台收录该类弱点关联的 24831 条 CVE 漏洞。