access:pre-auth 类型相关 24831 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞，涵盖18971个CVE。此类漏洞之所以关键，是因为攻击者无需凭证即可直接利用，极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击，常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块，对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2024-11219 | WordPress plugin Otter Blocks 路径遍历漏洞 — Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE CWE-22 | 5.3 | Medium | 2024-11-27 |
| CVE-2024-11083 | WordPress plugin ProfilePress 信息泄露漏洞 — Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress CWE-200 | 5.3 | Medium | 2024-11-27 |
| CVE-2024-46054 | OpenVidReview 安全漏洞 — n/a | 9.1AI | Critical AI | 2024-11-27 |
| CVE-2024-53673 | Hewlett Packard Enterprise Insight Remote Support 安全漏洞 — Insight Remote Support CWE-502 | 8.1 | High | 2024-11-26 |
| CVE-2024-49035 | Microsoft Partner Center 安全漏洞 — Microsoft Partner Center CWE-269 | 8.7 | High | 2024-11-26 |
| CVE-2024-10240 | GitLab Enterprise Edition 安全漏洞 — GitLab CWE-497 | 5.3 | Medium | 2024-11-26 |
| CVE-2024-11145 | Valor Apps Easy Folder Listing Pro 安全漏洞 — Easy Folder Listing Pro CWE-502 | 9.8 | Critical | 2024-11-26 |
| CVE-2024-10878 | WordPress plugin Sugar Calendar 跨站脚本漏洞 — Sugar Calendar – Events Calendar, Event Tickets, and Events Management Platform CWE-79 | 6.1 | Medium | 2024-11-26 |
| CVE-2024-52336 | tuned 安全漏洞 CWE-269 | 7.8 | High | 2024-11-26 |
| CVE-2024-11024 | WordPress plugin AppPresser 安全漏洞 — AppPresser – Mobile App Framework CWE-230 | 9.8 | Critical | 2024-11-26 |
| CVE-2024-50375 | Advantech EKI-6333AC-2G和Advantech EKI-6333AC-2GD 安全漏洞 — EKI-6333AC-2G CWE-78 | 9.8 | Critical | 2024-11-26 |
| CVE-2024-50374 | Advantech EKI-6333AC-2G和Advantech EKI-6333AC-2GD 安全漏洞 — EKI-6333AC-2G CWE-78 | 9.8 | Critical | 2024-11-26 |
| CVE-2024-50373 | Advantech EKI-6333AC-2G和Advantech EKI-6333AC-2GD 安全漏洞 — EKI-6333AC-2G CWE-78 | 9.8 | Critical | 2024-11-26 |
| CVE-2024-50372 | Advantech EKI-6333AC-2G和Advantech EKI-6333AC-2GD 安全漏洞 — EKI-6333AC-2G CWE-78 | 9.8 | Critical | 2024-11-26 |
| CVE-2024-50371 | Advantech EKI-6333AC-2G和Advantech EKI-6333AC-2GD 安全漏洞 — EKI-6333AC-2G CWE-78 | 9.8 | Critical | 2024-11-26 |
| CVE-2024-50370 | Advantech EKI-6333AC-2G和Advantech EKI-6333AC-2GD 安全漏洞 — EKI-6333AC-2G CWE-78 | 9.8 | Critical | 2024-11-26 |
| CVE-2024-11680 | ProjectSend 安全漏洞 — ProjectSend CWE-306 | 9.8 | Critical | 2024-11-26 |
| CVE-2024-11032 | WordPress plugin Parsi Date 跨站脚本漏洞 — پارسی دیت – Parsi Date CWE-79 | 6.1 | Medium | 2024-11-26 |
| CVE-2024-11202 | WordPress plugin多款产品 跨站脚本漏洞 — CM Header and Footer – Add custom scripts and styles to your header and footer with ease CWE-79 | 6.1 | Medium | 2024-11-26 |
| CVE-2024-9504 | WordPress plugin Booking calendar, Appointment Booking System 安全漏洞 — Booking calendar, Appointment Booking System CWE-434 | 7.2 | High | 2024-11-26 |
| CVE-2024-10542 | WordPress plugin Spam protection, Anti-Spam, FireWall by CleanTalk 安全漏洞 — Spam protection, Honeypot, Anti-Spam by CleanTalk CWE-862 | 9.8 | Critical | 2024-11-26 |
| CVE-2024-10781 | WordPress plugin Spam protection, Anti-Spam, FireWall by CleanTalk 安全漏洞 — Spam protection, Honeypot, Anti-Spam by CleanTalk CWE-703 | 8.1 | High | 2024-11-26 |
| CVE-2024-10570 | WordPress plugin Security & Malware scan by CleanTalk 安全漏洞 — Login Security, FireWall, Malware removal by CleanTalk CWE-89 | 7.5 | High | 2024-11-26 |
| CVE-2024-11418 | WordPress plugin Additional Order Filters for WooCommerce 跨站脚本漏洞 — Additional Order Filters for WooCommerce CWE-79 | 6.1 | Medium | 2024-11-26 |
| CVE-2024-11342 | WordPress plugin Skt NURCaptcha 跨站请求伪造漏洞 — Skt NURCaptcha CWE-352 | 6.1 | Medium | 2024-11-26 |
| CVE-2024-50672 | Adapt Authoring Tool 安全漏洞 — n/a | 9.8AI | Critical AI | 2024-11-25 |
| CVE-2024-11666 | ONEKEY Platform 数据伪造问题漏洞 — cph2_echarge_firmware CWE-345 | 9.0 | Critical | 2024-11-24 |
| CVE-2024-11034 | WordPress plugin Get a Quote Button 代码注入漏洞 — Request a Quote for WooCommerce – Get a Quote Button CWE-94 | 7.3 | High | 2024-11-23 |
| CVE-2024-10519 | WordPress plugin Wishlist for WooCommerce 跨站脚本漏洞 — Wishlist for WooCommerce: Multi Wishlists Per Customer PRO CWE-79 | 6.1 | Medium | 2024-11-23 |
| CVE-2024-9659 | WordPress plugin School Management System 代码问题漏洞 — School Management System for Wordpress CWE-434 | 9.8 | Critical | 2024-11-23 |
access:pre-auth 是常见的弱点类别，本平台收录该类弱点关联的 24831 条 CVE 漏洞。