access:pre-auth 类型相关 24786 条 CVE 漏洞,含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞,涵盖18971个CVE。此类漏洞之所以关键,是因为攻击者无需凭证即可直接利用,极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击,常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块,对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2024-21514 | OpenCart 安全漏洞 — opencart/opencart CWE-89 | 7.4 | High | 2024-06-22 |
| CVE-2024-5791 | WordPress plugin Appointment Booking and Online Scheduling 安全漏洞 — Online Booking & Scheduling Calendar for WordPress by vcita CWE-79 | 7.2 | High | 2024-06-22 |
| CVE-2024-6027 | WordPress plugin Themify 安全漏洞 — Themify – WooCommerce Product Filter CWE-89 | 9.8 | Critical | 2024-06-21 |
| CVE-2024-5859 | WordPress plugin Online Booking & Scheduling Calendar for WordPress by vcita 安全漏洞 — Online Booking & Scheduling Calendar for WordPress by vcita CWE-79 | 6.1 | Medium | 2024-06-21 |
| CVE-2024-4477 | WordPress plugin WP Logs Book 安全漏洞 — WP Logs Book | 6.1 | - | 2024-06-21 |
| CVE-2024-4616 | WordPress plugin Widget Bundle 安全漏洞 — Widget Bundle | 6.1 | - | 2024-06-21 |
| CVE-2024-5756 | WordPress plugin Email Subscribers by Icegram Express 安全漏洞 — Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPress CWE-89 | 9.8 | Critical | 2024-06-21 |
| CVE-2024-3961 | WordPress plugin ConvertKit 安全漏洞 — Kit (formerly ConvertKit) – Email Newsletter, Email Marketing, Membership, Subscribers and Landing Pages CWE-862 | 5.3 | Medium | 2024-06-21 |
| CVE-2024-3610 | WordPress plugin WP Child Theme Generator 安全漏洞 — WP Child Theme Generator CWE-862 | 5.3 | Medium | 2024-06-21 |
| CVE-2024-5344 | WordPress plugin The Plus Addons for Elementor Page Builder 安全漏洞 — The Plus Addons for Elementor Page Builder Pro CWE-79 | 6.1 | Medium | 2024-06-21 |
| CVE-2024-38874 | TYPO3 安全漏洞 — n/a | 5.4 | Medium | 2024-06-21 |
| CVE-2023-49111 | Kiuwan SAST 跨站脚本漏洞 — SAST CWE-79 | 6.1 | - | 2024-06-20 |
| CVE-2024-4098 | WordPress plugin Shariff Wrapper 安全漏洞 — Shariff Wrapper CWE-22 | 9.8 | Critical | 2024-06-20 |
| CVE-2024-5522 | WordPress plugin HTML5 Video Player 安全漏洞 — HTML5 Video Player | 9.8AI | Critical AI | 2024-06-20 |
| CVE-2024-3597 | WordPress plugin Export WP Page to Static HTML/CSS 安全漏洞 — Export WordPress Pages to Static HTML & PDF — Static Site Export CWE-601 | 7.1 | High | 2024-06-20 |
| CVE-2024-3605 | WordPress plugin WP Hotel Booking 安全漏洞 — WP Hotel Booking CWE-89 | 10.0 | Critical | 2024-06-20 |
| CVE-2024-5432 | WordPress plugin Lifeline Donation 安全漏洞 — Lifeline Donation CWE-288 | 9.8 | Critical | 2024-06-20 |
| CVE-2024-0789 | WordPress plugin WP Maintenance 安全漏洞 — WP Maintenance CWE-348 | 5.3 | Medium | 2024-06-19 |
| CVE-2024-1407 | WordPress plugin Paid Memberships Pro 安全漏洞 — Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions CWE-352 | 5.4 | Medium | 2024-06-19 |
| CVE-2024-5343 | WordPress plugin Photo Gallery, Images, Slider in Rbs Image Gallery 安全漏洞 — Robo Gallery – Photo & Image Slider CWE-352 | 8.8 | High | 2024-06-19 |
| CVE-2024-3229 | WordPress plugin Salon booking system 安全漏洞 — Salon Booking System – Free Version CWE-434 | 9.8 | Critical | 2024-06-19 |
| CVE-2024-4541 | WordPress plugin Custom Product List Table 安全漏洞 — Custom Product List Table CWE-352 | 4.3 | Medium | 2024-06-19 |
| CVE-2024-4663 | WordPress plugin OSM Map Widget for Elementor 安全漏洞 — OSM Map Widget for Elementor CWE-79 | 6.4 | Medium | 2024-06-19 |
| CVE-2024-5021 | WordPress plugin WordPress Picture / Portfolio / Media Gallery 安全漏洞 — WordPress Picture / Portfolio / Media Gallery CWE-918 | 9.3 | Critical | 2024-06-19 |
| CVE-2024-4787 | WordPress plugin Cost Calculator Builder PRO 安全漏洞 — Cost Calculator Builder PRO CWE-20 | 5.8 | Medium | 2024-06-19 |
| CVE-2024-6125 | WordPress plugin Login with phone number 安全漏洞 — OTP Login With Phone Number, OTP Verification CWE-640 | 8.1 | High | 2024-06-19 |
| CVE-2024-21685 | Atlassian JIRA Data Center 安全漏洞 — Jira Core Data Center | 4.3AI | Medium AI | 2024-06-18 |
| CVE-2024-34024 | Fujitsu ID Link Manager和Fujitsu TIME CREATOR 安全漏洞 — FUJITSU Business Application ID Link Manager II | 5.3AI | Medium AI | 2024-06-18 |
| CVE-2024-33620 | Fujitsu ID Link Manager和Fujitsu TIME CREATOR 安全漏洞 — FUJITSU Business Application ID Link Manager II | 7.5AI | High AI | 2024-06-18 |
| CVE-2024-1634 | WordPress plugin Scheduling Plugin – Online Booking 安全漏洞 — Scheduling Plugin – Online Booking for WordPress CWE-862 | 6.5 | Medium | 2024-06-18 |
access:pre-auth 是常见的弱点类别,本平台收录该类弱点关联的 24786 条 CVE 漏洞。