access:pre-auth 类型相关 24644 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞，涵盖18971个CVE。此类漏洞之所以关键，是因为攻击者无需凭证即可直接利用，极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击，常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块，对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2021-4393 | WordPress Plugin eCommerce Product Catalog 跨站请求伪造漏洞 — eCommerce Product Catalog Plugin for WordPress CWE-352 | 4.3 | Medium | 2023-07-01 |
| CVE-2021-4387 | WordPress Plugin WP Opal Estate 跨站请求伪造漏洞 — Opal Estate CWE-352 | 4.3 | Medium | 2023-07-01 |
| CVE-2021-4385 | WordPress Plugin WP Private Content Plus 跨站请求伪造漏洞 — WP Private Content Plus CWE-352 | 4.3 | Medium | 2023-07-01 |
| CVE-2021-4386 | WordPress Plugin WP Security Question 跨站请求伪造漏洞 — WP Security Question CWE-352 | 4.3 | Medium | 2023-07-01 |
| CVE-2020-36738 | WordPress Plugin Cool Timeline 跨站请求伪造漏洞 — Cool Timeline (Horizontal & Vertical Timeline) CWE-352 | 4.3 | Medium | 2023-07-01 |
| CVE-2020-36739 | WordPress Plugin Feed Them Social – Page, Post, Video, and Photo Galleries 跨站请求伪造漏洞 — Feed Them Social – Social Media Feeds, Video, and Photo Galleries CWE-352 | 4.3 | Medium | 2023-07-01 |
| CVE-2020-36736 | WordPress Plugin WooCommerce Checkout & Funnel Builder by CartFlows 跨站请求伪造漏洞 — CartFlows – Funnel Builder & Checkout Plugin for WooCommerce CWE-352 | 4.3 | Medium | 2023-07-01 |
| CVE-2020-36737 | WordPress Plugin Import / Export Customizer Settings 跨站请求伪造漏洞 — Import / Export Customizer Settings CWE-352 | 4.3 | Medium | 2023-07-01 |
| CVE-2021-4384 | WordPress Plugin Photo Gallery – Image Gallery 跨站请求伪造漏洞 — WordPress Photo Gallery – Image Gallery CWE-352 | 4.3 | Medium | 2023-07-01 |
| CVE-2020-36735 | WordPress Plugin WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting 跨站请求伪造漏洞 — ERP: Complete HR, Accounting & CRM Suite with WooCommerce CRM Support CWE-352 | 4.3 | Medium | 2023-07-01 |
| CVE-2023-28323 | Ivanti Endpoint Manager 代码问题漏洞 — Ivanti Endpoint Manager | 10.0 | - | 2023-06-30 |
| CVE-2023-2846 | Mitsubishi Electric MELSEC iQ-F series 安全漏洞 — MELSEC-F Series FX3U-16MR/ES CWE-294 | 7.5 | High | 2023-06-30 |
| CVE-2023-2834 | WordPress Plugin BookIt 访问控制错误漏洞 — Bookit — Booking & Appointment Calendar CWE-288 | 9.8 | Critical | 2023-06-30 |
| CVE-2023-36144 | Intelbras SG 2404 MR 安全漏洞 — n/a | 7.5 | - | 2023-06-30 |
| CVE-2023-36347 | POS Codekop 访问控制错误漏洞 — n/a | 5.3 | - | 2023-06-30 |
| CVE-2015-1313 | JetBrains TeamCity 安全漏洞 — TeamCity | 8.2 | - | 2023-06-29 |
| CVE-2023-2982 | WordPress plugin Social Login and Register 安全漏洞 — miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) CWE-288 | 9.8 | Critical | 2023-06-29 |
| CVE-2023-32610 | SYNCK GRAPHICA Mailform Pro CGI 安全漏洞 — Mailform Pro CGI | 7.5 | - | 2023-06-29 |
| CVE-2023-32623 | WordPress Plugin Snow Monkey Forms 路径遍历漏洞 — Snow Monkey Forms | 9.1 | - | 2023-06-28 |
| CVE-2023-3407 | WordPress Plugin Subscribe2 跨站请求伪造漏洞 — Subscribe2 – Form, Email Subscribers & Newsletters CWE-352 | 4.3 | Medium | 2023-06-28 |
| CVE-2023-3427 | WordPress Plugin Salon Booking System 跨站请求伪造漏洞 — Salon Booking System – Free Version CWE-352 | 5.4 | Medium | 2023-06-28 |
| CVE-2023-20006 | 多款Cisco产品 安全漏洞 — Cisco Adaptive Security Appliance (ASA) Software CWE-681 | 8.6 | High | 2023-06-28 |
| CVE-2023-20108 | Cisco Unified Communications Manager 安全漏洞 — Cisco Unified Communications Manager IM and Presence Service CWE-789 | 7.5 | High | 2023-06-28 |
| CVE-2023-20119 | 多款Cisco产品 跨站脚本漏洞 — Cisco Secure Email and Web Manager CWE-79 | 6.1 | Medium | 2023-06-28 |
| CVE-2023-34761 | 7-Eleven LED Message Cup 安全漏洞 — n/a | 7.1 | - | 2023-06-28 |
| CVE-2023-28857 | Apereo CAS 信息泄露漏洞 — CAS CWE-200 | 4.0 | Medium | 2023-06-27 |
| CVE-2023-2068 | WordPress plugin Advanced File Manager 代码问题漏洞 — file-manager-advanced-shortcode | 9.8 | - | 2023-06-27 |
| CVE-2023-3411 | WordPress Plugin Image Map Pro–Drag-and-drop Builder for Interactive Images–Lite 跨站请求伪造漏洞 — Image Map Pro – Drag-and-drop Builder for Interactive Images – Lite CWE-352 | 6.1 | Medium | 2023-06-27 |
| CVE-2023-3132 | WordPress plugin MainWP Child 信息泄露漏洞 — MainWP Child – Securely Connects to the MainWP Dashboard to Manage Multiple Sites CWE-200 | 5.9 | Medium | 2023-06-27 |
| CVE-2023-3371 | WordPress plugin EmbedPress 安全漏洞 — EmbedPress – PDF Embedder, Embed YouTube Videos, 3D FlipBook, Social feeds, Docs & more CWE-321 | 5.3 | Medium | 2023-06-27 |
access:pre-auth 是常见的弱点类别，本平台收录该类弱点关联的 24644 条 CVE 漏洞。