access:pre-auth 类型相关 24644 条 CVE 漏洞,含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞,涵盖18971个CVE。此类漏洞之所以关键,是因为攻击者无需凭证即可直接利用,极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击,常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块,对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2023-30262 | MIM Software 代码问题漏洞 — n/a | 9.8 | - | 2023-06-09 |
| CVE-2023-2986 | WordPress Plugin Abandoned Cart Lite for WooCommerce 安全漏洞 — Abandoned Cart Lite for WooCommerce CWE-288 | 9.8 | Critical | 2023-06-08 |
| CVE-2020-36728 | WordPress Plugin Adning Advertising 路径遍历漏洞 — Adning Advertising CWE-22 | 6.5 | Medium | 2023-06-07 |
| CVE-2021-4380 | WordPress Plugin Pinterest Automatic 访问控制错误漏洞 — Pinterest Automatic CWE-284 | 9.8 | Critical | 2023-06-07 |
| CVE-2020-36705 | WordPress Plugin Adning Advertising 代码问题漏洞 — Adning Advertising CWE-434 | 9.8 | Critical | 2023-06-07 |
| CVE-2023-2541 | KNIME Business Hub 安全漏洞 — KNIME Business Hub CWE-497 | 5.3 | Medium | 2023-06-07 |
| CVE-2023-2187 | Triangle MicroWorks SCADA Data Gateway 安全漏洞 — SCADA Data Gateway CWE-306 | 5.3 | Medium | 2023-06-07 |
| CVE-2023-2186 | Triangle MicroWorks SCADA Data Gateway 格式化字符串错误漏洞 — SCADA Data Gateway CWE-134 | 8.2 | High | 2023-06-07 |
| CVE-2021-4381 | WordPress Plugin uListing 安全漏洞 — Directory Listings WordPress plugin – uListing CWE-862 | 9.8 | Critical | 2023-06-07 |
| CVE-2020-36731 | WordPress Plugin Flexible Checkout Fields for WooCommerce 跨站脚本漏洞 — Flexible Checkout Fields for WooCommerce – WooCommerce Checkout Manager CWE-79 | 7.2 | High | 2023-06-07 |
| CVE-2020-36730 | WordPress Plugin CMP 安全漏洞 — CMP – Coming Soon & Maintenance Plugin by NiteoThemes CWE-862 | 8.3 | High | 2023-06-07 |
| CVE-2020-36726 | WordPress Plugin Ultimate Reviews 代码问题漏洞 — Ultimate Reviews CWE-502 | 9.8 | Critical | 2023-06-07 |
| CVE-2020-36727 | WordPress Plugin Newsletter Manager 代码问题漏洞 — Newsletter Manager CWE-502 | 9.8 | Critical | 2023-06-07 |
| CVE-2021-4373 | WordPress Plugin Better Search 跨站请求伪造漏洞 — Better Search – Relevant search results for WordPress CWE-288 | 8.8 | High | 2023-06-07 |
| CVE-2021-4374 | WordPress Plugin WordPress Automatic 安全漏洞 — WordPress Automatic Plugin CWE-862 | 9.1 | Critical | 2023-06-07 |
| CVE-2021-4370 | WordPress Plugin uListing 安全漏洞 — Directory Listings WordPress plugin – uListing CWE-862 | 9.8 | Critical | 2023-06-07 |
| CVE-2021-4369 | WordPress Plugin Frontend File Manager 安全漏洞 — Frontend File Manager Plugin CWE-862 | 5.8 | Medium | 2023-06-07 |
| CVE-2020-36724 | WordPress Plugin Wordable 访问控制错误漏洞 — Wordable – Export Google Docs to WordPress CWE-288 | 9.8 | Critical | 2023-06-07 |
| CVE-2020-36723 | WordPress Theme ListingPro - WordPress Directory & Listing 安全漏洞 — ListingPro - WordPress Directory & Listing Theme CWE-200 | 5.3 | Medium | 2023-06-07 |
| CVE-2021-4372 | WordPress Plugin WooCommerce Dynamic Pricing and Discounts 跨站脚本漏洞 — WooCommerce Dynamic Pricing and Discounts CWE-79 | 6.5 | Medium | 2023-06-07 |
| CVE-2019-25148 | WordPress Plugin WP HTML Mail 跨站脚本漏洞 — Email Template Designer – WP HTML Mail CWE-79 | 6.1 | Medium | 2023-06-07 |
| CVE-2019-25147 | WordPress Plugin Pretty Links 跨站脚本漏洞 — PrettyLinks – Affiliate Links, Link Branding, Link Tracking, Marketing and Stripe Payments Plugin CWE-79 | 7.2 | High | 2023-06-07 |
| CVE-2016-15033 | WordPress Plugin Delete All Comments 代码问题漏洞 — Delete All Comments CWE-434 | 9.8 | Critical | 2023-06-07 |
| CVE-2019-25146 | WordPress Plugin DELUCKS SEO 跨站脚本漏洞 — DELUCKS SEO CWE-79 | 7.2 | High | 2023-06-07 |
| CVE-2020-36721 | WordPress Plugin Brilliance 安全漏洞 — Brilliance CWE-284 | 6.5 | Medium | 2023-06-07 |
| CVE-2021-4365 | WordPress Plugin Frontend File Manager 跨站脚本漏洞 — Frontend File Manager Plugin CWE-79 | 7.2 | High | 2023-06-07 |
| CVE-2020-36717 | WordPress Plugin Kali Forms 跨站请求伪造漏洞 — Kali Forms — Contact Form & Drag-and-Drop Builder CWE-352 | 8.8 | High | 2023-06-07 |
| CVE-2020-36718 | WordPress Plugin GDPR CCPA Compliance Support 代码问题漏洞 — GDPR CCPA Compliance & Cookie Consent Banner CWE-502 | 9.8 | Critical | 2023-06-07 |
| CVE-2020-36719 | WordPress Theme ListingPro - WordPress Directory & Listing 安全漏洞 — ListingPro - WordPress Directory & Listing Theme CWE-862 | 9.8 | Critical | 2023-06-07 |
| CVE-2019-25145 | WordPress Plugin Contact Form & SMTP Plugin by PirateForms 跨站脚本漏洞 — Contact Form & SMTP Plugin for WordPress by PirateForms CWE-79 | 7.2 | High | 2023-06-07 |
access:pre-auth 是常见的弱点类别,本平台收录该类弱点关联的 24644 条 CVE 漏洞。