目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1336 元

100%
请我们喝杯咖啡

access:pre-auth 标签下的 CVE 漏洞 24831

access:pre-auth 类型相关 24831 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。

“access:pre-auth”标签标识了无需身份验证即可触发的漏洞，涵盖18971个CVE。此类漏洞之所以关键，是因为攻击者无需凭证即可直接利用，极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击，常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块，对系统安全性构成直接且严重的威胁。

CVE ID 标题 CVSS 风险等级 Published
CVE-2024-11336 WordPress plugin Clickbank 跨站请求伪造漏洞 — Clickbank WordPress Plugin (Storefront) CWE-352 6.1 Medium 2024-12-06
CVE-2024-11368 WordPress plugin Splash Sync 跨站脚本漏洞 — Splash Sync CWE-79 6.1 Medium 2024-12-06
CVE-2024-11292 WordPress plugin WP Private Content Plus 安全漏洞 — WP Private Content Plus CWE-200 5.3 Medium 2024-12-06
CVE-2024-10879 WordPress plugin ForumWP 跨站脚本漏洞 — ForumWP – Forum & Discussion Board CWE-79 6.1 Medium 2024-12-06
CVE-2024-11444 WordPress plugin CLUEVO LMS, E-Learning Platform 跨站请求伪造漏洞 — CLUEVO LMS, E-Learning Platform CWE-352 4.3 Medium 2024-12-06
CVE-2024-12060 WordPress plugin WP Media Optimizer 跨站脚本漏洞 — WP Media Optimizer (.webp) CWE-79 6.1 Medium 2024-12-06
CVE-2024-12003 WordPress plugin WP System 跨站请求伪造漏洞 — WP System CWE-352 6.1 Medium 2024-12-06
CVE-2024-11178 WordPress plugin Login With OTP 安全漏洞 — Login with OTP CWE-288 8.1 High 2024-12-06
CVE-2024-11585 WordPress plugin WP Hide & Security Enhancer 安全漏洞 — WP Hide & Security Enhancer CWE-22 7.5 High 2024-12-06
CVE-2024-11379 WordPress plugin Broadcast 跨站脚本漏洞 — Broadcast CWE-79 6.1 Medium 2024-12-06
CVE-2024-10836 WordPress plugin Flixita 跨站脚本漏洞 — Flixita CWE-79 6.1 Medium 2024-12-06
CVE-2024-11324 WordPress plugin Accounting for WooCommerce 跨站脚本漏洞 — Accounting for WooCommerce CWE-79 6.1 Medium 2024-12-05
CVE-2024-11341 WordPress plugin Simple Redirection 跨站请求伪造漏洞 — Simple Redirection CWE-352 4.3 Medium 2024-12-05
CVE-2024-10937 WordPress plugin Related Posts 安全漏洞 — Related Posts By PickPlugins CWE-284 5.3 Medium 2024-12-05
CVE-2024-20397 Cisco NX-OS Software 访问控制错误漏洞 — Cisco NX-OS Software CWE-284 5.2 Medium 2024-12-04
CVE-2024-54155 JetBrains YouTrack 安全漏洞 — YouTrack CWE-862 3.7 Low 2024-12-04
CVE-2024-54153 JetBrains YouTrack 安全漏洞 — YouTrack CWE-862 3.1 Low 2024-12-04
CVE-2024-11814 WordPress plugin Additional Custom Order Status for WooCommerce 跨站脚本漏洞 — Additional Custom Order Status for WooCommerce CWE-79 6.1 Medium 2024-12-04
CVE-2024-10567 WordPress plugin TI WooCommerce Wishlist 安全漏洞 — TI WooCommerce Wishlist CWE-862 7.5 High 2024-12-04
CVE-2023-6978 WordPress plugin WP Job Manager – Company Profiles 跨站脚本漏洞 — WP Job Manager – Company Profiles CWE-79 6.1 Medium 2024-12-04
CVE-2024-11293 WordPress plugin Registration Forms 安全漏洞 — Pie Register - Social Sites Login (Add on) CWE-287 8.1 High 2024-12-04
CVE-2024-11466 WordPress plugin Intro Tour Tutorial DeepPresentation 跨站脚本漏洞 — Intro Tour Tutorial DeepPresentation CWE-79 6.1 Medium 2024-12-04
CVE-2024-11807 WordPress plugin NPS computy 跨站脚本漏洞 — NPS computy CWE-79 6.1 Medium 2024-12-04
CVE-2024-11813 WordPress plugin Pulsating Chat Button 跨站请求伪造漏洞 — Pulsating Chat Button CWE-352 6.1 Medium 2024-12-04
CVE-2024-10952 WordPress plugin The Authors List 安全漏洞 — Authors List CWE-94 7.3 High 2024-12-04
CVE-2024-10832 WordPress plugin Posti Shipping 跨站请求伪造漏洞 — Posti Shipping CWE-79 6.1 Medium 2024-12-04
CVE-2024-52546 Lorex 2K Indoor Wi-Fi Security Camera 安全漏洞 — 2K Indoor Wi-Fi Security Camera CWE-476 5.3 Medium 2024-12-03
CVE-2024-52545 Lorex 2K Indoor Wi-Fi Security Camera 安全漏洞 — 2K Indoor Wi-Fi Security Camera CWE-125 6.5 Medium 2024-12-03
CVE-2024-52544 Lorex 2K Indoor Wi-Fi Security Camera 安全漏洞 — 2K Indoor Wi-Fi Security Camera CWE-121 9.8 Critical 2024-12-03
CVE-2024-37303 Element Synapse 安全漏洞 — synapse CWE-306 5.3 Medium 2024-12-03

access:pre-auth 是常见的弱点类别，本平台收录该类弱点关联的 24831 条 CVE 漏洞。