目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1336 元

100%
请我们喝杯咖啡

access:pre-auth 标签下的 CVE 漏洞 24808

access:pre-auth 类型相关 24808 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。

“access:pre-auth”标签标识了无需身份验证即可触发的漏洞，涵盖18971个CVE。此类漏洞之所以关键，是因为攻击者无需凭证即可直接利用，极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击，常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块，对系统安全性构成直接且严重的威胁。

CVE ID 标题 CVSS 风险等级 Published
CVE-2019-25216 WordPress plugin Rich Review 跨站脚本漏洞 — Rich Reviews by Starfish CWE-79 7.2 High 2024-10-16
CVE-2019-25214 WordPress plugin ShopWP 安全漏洞 — ShopWP CWE-862 7.2 High 2024-10-16
CVE-2016-15041 WordPress plugin MainWP Dashboard 跨站脚本漏洞 — MainWP Dashboard: Self-hosted WordPress Management for Agencies CWE-79 7.2 High 2024-10-16
CVE-2018-25105 WordPress plugin File Manager 安全漏洞 — File Manager CWE-862 9.8 Critical 2024-10-16
CVE-2022-4972 WordPress plugin Download Monitor 安全漏洞 — Download Monitor CWE-862 7.5 High 2024-10-16
CVE-2020-36832 WordPress plugin Ultimate Membership Pro 授权问题漏洞 — Indeed Membership Pro CWE-287 9.8 Critical 2024-10-16
CVE-2017-20192 WordPress plugin Formidable Form Builder 跨站脚本漏洞 — Formidable Forms – Contact Form Plugin, Survey, Quiz, Payment, Calculator Form & Custom Form Builder CWE-79 8.3 High 2024-10-16
CVE-2022-4971 WordPress plugin Sassy Social Share 跨站脚本漏洞 — Social Sharing Plugin – Sassy Social Share CWE-79 6.1 Medium 2024-10-16
CVE-2024-8746 WordPress plugin File Manager Pro 代码问题漏洞 — File Manager Pro CWE-434 7.5 High 2024-10-16
CVE-2019-25215 WordPress plugin ARI-Adminer 安全漏洞 — ARI Adminer – WordPress Database Manager CWE-862 7.3 High 2024-10-16
CVE-2019-25213 WordPress plugin Advanced Access Manager 路径遍历漏洞 — Advanced Access Manager – Access Governance for WordPress CWE-22 9.8 Critical 2024-10-16
CVE-2016-15040 WordPress plugin Kento Post View Counter SQL注入漏洞 — Kento Post View Counter CWE-89 9.8 Critical 2024-10-16
CVE-2021-4448 WordPress plugin Kaswara Modern VC Addons 安全漏洞 — Kaswara Modern VC Addons CWE-862 7.3 High 2024-10-16
CVE-2021-4444 WordPress plugin Product Filter by WooBeWoo 安全漏洞 — Product Filter for WooCommerce by WBW CWE-862 7.3 High 2024-10-16
CVE-2021-4449 WordPress plugin ZoomSounds 代码问题漏洞 — ZoomSounds - WordPress Wave Audio Player with Playlist CWE-434 9.8 Critical 2024-10-16
CVE-2021-4443 WordPress plugin WordPress Mega Menu 代码问题漏洞 — QuadMenu – Mega Menu CWE-434 9.8 Critical 2024-10-16
CVE-2024-8918 WordPress plugin File Manager Pro 代码问题漏洞 — File Manager Pro CWE-434 7.4 High 2024-10-16
CVE-2024-9937 WordPress plugin Woo Manage Fraud Orders 跨站脚本漏洞 — Woo Manage Fraud Orders CWE-79 6.1 Medium 2024-10-16
CVE-2024-9105 WordPress plugin UltimateAI 安全漏洞 — Ultimate AI CWE-288 9.8 Critical 2024-10-16
CVE-2024-9634 WordPress plugin GiveWP – Donation Plugin and Fundraising Platform 代码问题漏洞 — GiveWP – Donation Plugin and Fundraising Platform CWE-502 9.8 Critical 2024-10-16
CVE-2024-9647 WordPress plugin Kama SpamBlock 跨站脚本漏洞 — Kama SpamBlock CWE-79 6.1 Medium 2024-10-16
CVE-2024-9652 WordPress plugin Locatoraid Store Locator 跨站脚本漏洞 — Locatoraid Store Locator CWE-79 6.1 Medium 2024-10-16
CVE-2024-9305 WordPress plugin AppPresser – Mobile App Framework 授权问题漏洞 — AppPresser – Mobile App Framework CWE-640 8.1 High 2024-10-16
CVE-2024-9649 WordPress plugin WP ULike 跨站请求伪造漏洞 — WP ULike – Like & Dislike Buttons for Engagement and Feedback CWE-352 4.3 Medium 2024-10-16
CVE-2024-9104 WordPress plugin UltimateAI 安全漏洞 — Ultimate AI CWE-703 5.6 Medium 2024-10-16
CVE-2024-8787 WordPress plugin Smart Online Order for Clover 跨站脚本漏洞 — Smart Online Order for Clover CWE-79 6.1 Medium 2024-10-16
CVE-2024-8541 WordPress plugin Discount Rules for WooCommerce 跨站脚本漏洞 — Discount Rules for WooCommerce CWE-79 4.7 Medium 2024-10-16
CVE-2024-38190 Microsoft Power Platform 安全漏洞 — Microsoft Power Platform CWE-862 8.6 High 2024-10-15
CVE-2024-21274 Oracle Fusion Middleware 安全漏洞 — Oracle WebLogic Server 7.5 High 2024-10-15
CVE-2024-21262 Oracle MySQL 安全漏洞 — MySQL Connectors 6.5 Medium 2024-10-15

access:pre-auth 是常见的弱点类别，本平台收录该类弱点关联的 24808 条 CVE 漏洞。