目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1336 元

100%
请我们喝杯咖啡

access:pre-auth 标签下的 CVE 漏洞 21072

access:pre-auth 类型相关 21072 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。

“access:pre-auth”标签标识了无需身份验证即可触发的漏洞，涵盖18971个CVE。此类漏洞之所以关键，是因为攻击者无需凭证即可直接利用，极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击，常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块，对系统安全性构成直接且严重的威胁。

CVE ID标题CVSS风险等级Published
CVE-2025-14365 WordPress plugin Eyewear prescription form 安全漏洞 — Eyewear prescription formCWE-862 5.3 Medium2025-12-13
CVE-2025-14394 WordPress plugin Popover Windows 跨站请求伪造漏洞 — Popover WindowsCWE-352 4.3 Medium2025-12-13
CVE-2025-11707 WordPress plugin Login Lockdown & Protection 安全特征问题漏洞 — Login Lockdown & ProtectionCWE-330 5.3 Medium2025-12-13
CVE-2025-12077 WordPress plugin WP to LinkedIn Auto Publish 跨站脚本漏洞 — WP to LinkedIn Auto PublishCWE-79 6.1 Medium2025-12-13
CVE-2025-14440 WordPress plugin JAY Login & Register 安全漏洞 — JAY Login & RegisterCWE-565 9.8 Critical2025-12-13
CVE-2025-14539 WordPress plugin The Shortcode Ajax 代码注入漏洞 — Shortcode AjaxCWE-94 5.4 Medium2025-12-13
CVE-2025-12076 WordPress plugin Social Media Auto Publish 跨站脚本漏洞 — Social Media Auto PublishCWE-79 6.1 Medium2025-12-13
CVE-2025-13077 WordPress plugin payamito sms woocommerce SQL注入漏洞 — افزونه پیامک ووکامرس فوق حرفه ای (جدید) payamito sms woocommerceCWE-89 7.5 High2025-12-13
CVE-2025-13093 WordPress plugin Devs CRM – Manage tasks, attendance and teams all together 安全漏洞 — Devs CRM – Manage tasks, attendance and teams all togetherCWE-862 5.3 Medium2025-12-13
CVE-2025-14451 WordPress plugin Solutions Ad Manager 输入验证错误漏洞 — Solutions Ad ManagerCWE-601 4.7 Medium2025-12-13
CVE-2025-9218 WordPress plugin rtMedia for WordPress、BuddyPress和bbPress 安全漏洞 — rtMedia for WordPress, BuddyPress and bbPressCWE-862 3.7 Low2025-12-13
CVE-2025-14475 WordPress plugin Extensive VC Addons for WPBakery page builder 安全漏洞 — Extensive VC Addons for WPBakery page builderCWE-98 8.1 High2025-12-13
CVE-2025-14462 WordPress plugin Lucky Draw Contests 跨站请求伪造漏洞 — Lucky Draw ContestsCWE-352 4.3 Medium2025-12-13
CVE-2025-14366 WordPress plugin Eyewear prescription form 安全漏洞 — Eyewear prescription formCWE-862 5.3 Medium2025-12-13
CVE-2025-14454 WordPress plugin Image Slider by Ays- Responsive Slider and Carousel 跨站请求伪造漏洞 — Image Slider by Ays- Responsive Slider and CarouselCWE-352 4.3 Medium2025-12-13
CVE-2025-13089 WordPress plugin WP Directory Kit SQL注入漏洞 — WP Directory KitCWE-89 7.5 High2025-12-13
CVE-2025-13970 OpenPLC Runtime version 3 跨站请求伪造漏洞 — OpenPLC_V3CWE-352 8.0 High2025-12-13
CVE-2025-14611 Gladinet CentreStack 安全漏洞 — CentreStack and TrioFox 9.8AICriticalAI2025-12-12
CVE-2025-36743 SolarEdge SE3680H 安全漏洞 — SE3680H 9.8AICriticalAI2025-12-12
CVE-2025-36744 SolarEdge SE3680H 安全漏洞 — SE3680H 7.5AIHighAI2025-12-12
CVE-2025-12407 WordPress plugin Events Manager 跨站请求伪造漏洞 — Events Manager – Calendar, Bookings, Tickets, and more!CWE-352 4.3 Medium2025-12-12
CVE-2025-12408 WordPress plugin Events Manager 信息泄露漏洞 — Events Manager – Calendar, Bookings, Tickets, and more!CWE-200 5.3 Medium2025-12-12
CVE-2025-14159 WordPress plugin Secure Copy Content Protection and Content Locking 跨站请求伪造漏洞 — Secure Copy Content Protection and Content LockingCWE-352 4.3 Medium2025-12-12
CVE-2025-14442 WordPress plugin Secure Copy Content Protection and Content Locking 安全漏洞 — Secure Copy Content Protection and Content LockingCWE-552 5.3 Medium2025-12-12
CVE-2025-12841 WordPress plugin Bookit 安全漏洞 — Bookit 7.5AIHighAI2025-12-12
CVE-2025-12348 WordPress plugin Icegram Express 访问控制错误漏洞 — Email Subscribers & Newsletters – Email Marketing, Post Notifications & Newsletter Plugin for WordPressCWE-306 5.3 Medium2025-12-12
CVE-2025-14169 WordPress plugin FunnelKit - Funnel Builder for WooCommerce Checkout SQL注入漏洞 — FunnelKit – Funnel Builder for WooCommerce CheckoutCWE-89 7.5 High2025-12-12
CVE-2025-14049 WordPress plugin VikRentItems Flexible Rental Management System 跨站脚本漏洞 — VikRentItems Flexible Rental Management SystemCWE-79 6.1 Medium2025-12-12
CVE-2025-67728 Fireshare 命令注入漏洞 — fireshareCWE-77 9.8 Critical2025-12-12
CVE-2025-12655 WordPress plugin Hippoo Mobile App for WooCommerce 安全漏洞 — Hippoo Mobile App for WooCommerceCWE-862 5.3 Medium2025-12-12

access:pre-auth 是常见的弱点类别，本平台收录该类弱点关联的 21072 条 CVE 漏洞。