access:pre-auth 类型相关 24806 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞，涵盖18971个CVE。此类漏洞之所以关键，是因为攻击者无需凭证即可直接利用，极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击，常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块，对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2024-7381 | WordPress plugin Geo Controller 安全漏洞 — Geo Controller CWE-862 | 5.3 | Medium | 2024-09-05 |
| CVE-2024-5957 | Trellix IPS Manager 安全漏洞 — Intrusion Prevention System (IPS) Manager CWE-305 | 6.3 | Medium | 2024-09-05 |
| CVE-2024-5956 | Trellix IPS Manager 安全漏洞 — Intrusion Prevention System (IPS) Manager CWE-305 | 6.5 | Medium | 2024-09-05 |
| CVE-2024-6332 | WordPress plugin Amelia 安全漏洞 — Booking for Appointments and Events Calendar – Amelia CWE-862 | 6.5 | Medium | 2024-09-05 |
| CVE-2024-6835 | WordPress plugin Ivory Search 信息泄露漏洞 — Ivory Search – WordPress Search Plugin CWE-200 | 5.3 | Medium | 2024-09-05 |
| CVE-2024-6846 | WordPress plugin Chatbot with ChatGPT 安全漏洞 — Chatbot with ChatGPT WordPress | 5.3AI | Medium AI | 2024-09-05 |
| CVE-2024-7627 | WordPress plugin Bit File Manager 代码注入漏洞 — Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress CWE-94 | 8.1 | High | 2024-09-05 |
| CVE-2024-20505 | ClamAV 安全漏洞 — ClamAV | 4.0 | Medium | 2024-09-04 |
| CVE-2024-20440 | Cisco Smart Licensing Utility 安全漏洞 — Cisco Smart License Utility CWE-532 | 7.5 | High | 2024-09-04 |
| CVE-2024-20439 | Cisco Smart Licensing Utility 安全漏洞 — Cisco Smart License Utility CWE-912 | 9.8 | Critical | 2024-09-04 |
| CVE-2024-45052 | Ethyca Fides 安全漏洞 — fides CWE-208 | 5.3 | Medium | 2024-09-04 |
| CVE-2024-8289 | WordPress plugin MultiVendorX 安全漏洞 — MultiVendorX – WooCommerce Multivendor Marketplace Solutions CWE-862 | 9.8 | Critical | 2024-09-04 |
| CVE-2024-7870 | WordPress plugin PixelYourSite–Your smart PIXEL (TAG) & API Manager 授权问题漏洞 — PixelYourSite – Your smart PIXEL (TAG) & API Manager CWE-287 | 6.5 | Medium | 2024-09-04 |
| CVE-2024-8119 | WordPress plugin WP Extended 跨站脚本漏洞 — The Ultimate WordPress Toolkit – WP Extended CWE-79 | 6.1 | Medium | 2024-09-04 |
| CVE-2024-8117 | WordPress plugin WP Extended 跨站脚本漏洞 — The Ultimate WordPress Toolkit – WP Extended CWE-79 | 6.1 | Medium | 2024-09-04 |
| CVE-2024-6926 | WordPress plugin Viral Signup 安全漏洞 — Viral Signup | 9.8AI | Critical AI | 2024-09-04 |
| CVE-2024-7786 | WordPress plugin Sensei LMS 安全漏洞 — Sensei LMS | 5.3AI | Medium AI | 2024-09-04 |
| CVE-2024-7950 | WordPress plugin WP Job Portal 路径遍历漏洞 — WP Job Portal – AI-Powered Recruitment System for Company or Job Board website CWE-22 | 9.8 | Critical | 2024-09-04 |
| CVE-2024-7261 | Zyxel多款产品 操作系统命令注入漏洞 — NWA1123ACv3 firmware CWE-78 | 9.8 | Critical | 2024-09-03 |
| CVE-2024-42058 | Zyxel多款产品 代码问题漏洞 — ATP series firmware CWE-476 | 7.5 | High | 2024-09-03 |
| CVE-2024-42057 | Zyxel多款产品 操作系统命令注入漏洞 — ATP series firmware CWE-78 | 8.1 | High | 2024-09-03 |
| CVE-2024-5412 | Zyxel VMG8825-T50K 安全漏洞 — VMG8825-T50K firmware CWE-120 | 7.5 | High | 2024-09-03 |
| CVE-2024-7691 | WordPress plugin DN Popup 安全漏洞 — Flaming Forms | 6.1AI | Medium AI | 2024-09-02 |
| CVE-2024-3886 | WordPress plugin tagDiv Composer 跨站脚本漏洞 — tagDiv Composer CWE-79 | 6.1 | Medium | 2024-08-31 |
| CVE-2024-5212 | WordPress plugin tagDiv Composer 跨站脚本漏洞 — tagDiv Composer CWE-79 | 6.1 | Medium | 2024-08-31 |
| CVE-2024-8274 | WordPress plugin WP Booking Calendar 跨站脚本漏洞 — Booking Calendar CWE-79 | 6.1 | Medium | 2024-08-30 |
| CVE-2024-8319 | WordPress plugin Tourfic 跨站请求伪造漏洞 — Tourfic – Travel Booking, Hotel Booking & Car Rental WordPress Plugin CWE-352 | 4.3 | Medium | 2024-08-30 |
| CVE-2024-39300 | ELECOM WAB-I1750-PS 安全漏洞 — WAB-I1750-PS | 7.5AI | High AI | 2024-08-30 |
| CVE-2024-5024 | WordPress plugin Memberpress 跨站脚本漏洞 — Memberpress CWE-79 | 6.1 | Medium | 2024-08-30 |
| CVE-2024-8234 | Zyxel NWA1100-N 操作系统命令注入漏洞 — NWA1100-N firmware CWE-78 | 7.5 | High | 2024-08-30 |
access:pre-auth 是常见的弱点类别，本平台收录该类弱点关联的 24806 条 CVE 漏洞。