access:pre-auth 类型相关 21465 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞，涵盖18971个CVE。此类漏洞之所以关键，是因为攻击者无需凭证即可直接利用，极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击，常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块，对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2024-10393 | WordPress plugin Tutor LMS 访问控制错误漏洞 — Tutor LMS – eLearning and online course solutionCWE-284 | 5.3 | Medium | 2024-11-21 |
| CVE-2024-11334 | WordPress plugin My Contador lesr 安全漏洞 — My Contador lesrCWE-862 | 4.3 | Medium | 2024-11-21 |
| CVE-2024-10788 | WordPress plugin Activity Log – Monitor & Record User Changes 跨站脚本漏洞 — Activity Log – Monitor & Record User ChangesCWE-79 | 7.2 | High | 2024-11-21 |
| CVE-2024-10623 | WordPress plugin ForumEngine 跨站脚本漏洞 — ForumEngineCWE-79 | 6.1 | Medium | 2024-11-21 |
| CVE-2024-9371 | WordPress plugin Branda 跨站脚本漏洞 — Branda – White Label & Branding, Free Login Page CustomizerCWE-79 | 6.1 | Medium | 2024-11-21 |
| CVE-2024-11365 | WordPress plugin Crypto and DeFi Widgets – Web3 Cryptocurrency Shortcodes 跨站脚本漏洞 — Crypto and DeFi Widgets – Web3 Cryptocurrency ShortcodesCWE-79 | 6.1 | Medium | 2024-11-21 |
| CVE-2024-11416 | WordPress plugin WIP Incoming Lite 跨站请求伪造漏洞 — WIP Incoming LiteCWE-352 | 6.1 | Medium | 2024-11-21 |
| CVE-2024-11360 | WordPress plugin Page Parts 跨站脚本漏洞 — Page PartsCWE-79 | 6.1 | Medium | 2024-11-21 |
| CVE-2024-10522 | WordPress plugin Co-marquage service-public.fr 跨站脚本漏洞 — Co-marquage service-public.frCWE-79 | 6.1 | Medium | 2024-11-21 |
| CVE-2024-11435 | WordPress plugin salavat counter 跨站脚本漏洞 — salavat counter PluginCWE-79 | 6.1 | Medium | 2024-11-21 |
| CVE-2024-10726 | WordPress plugin Friendly Functions for Welcart 跨站请求伪造漏洞 — Friendly Functions for WelcartCWE-352 | 6.1 | Medium | 2024-11-21 |
| CVE-2024-11370 | WordPress plugin Subaccounts for WooCommerce 跨站脚本漏洞 — Subaccounts for WooCommerceCWE-79 | 6.1 | Medium | 2024-11-21 |
| CVE-2024-10682 | WordPress plugin Announcement & Notification Banner – Bulletin 跨站脚本漏洞 — Announcement & Notification Banner – BulletinCWE-79 | 6.1 | Medium | 2024-11-21 |
| CVE-2024-11447 | WordPress plugin Community by PeepSo 跨站脚本漏洞 — Community by PeepSo – Download from PeepSo.comCWE-79 | 6.1 | Medium | 2024-11-21 |
| CVE-2024-10913 | WordPress plugin Clone 代码问题漏洞 — CloneCWE-502 | 8.8 | High | 2024-11-20 |
| CVE-2024-10520 | WordPress plugin WP Project Manager 安全漏洞 — Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time TrackerCWE-862 | 5.3 | Medium | 2024-11-20 |
| CVE-2024-11494 | Zyxel P-6101C 授权问题漏洞 — P-6101C firmwareCWE-287 | 7.5 | High | 2024-11-20 |
| CVE-2024-47865 | Rakuten Turbo 5G 安全漏洞 — Rakuten Turbo 5GCWE-306 | 5.3 | Medium | 2024-11-20 |
| CVE-2024-52033 | Rakuten Turbo 5G 安全漏洞 — Rakuten Turbo 5GCWE-497 | 5.3 | Medium | 2024-11-20 |
| CVE-2024-9239 | WordPress plugin Booster for WooCommerce 跨站脚本漏洞 — Booster for WooCommerce – PDF Invoices, Abandoned Cart, Variation Swatches & 100+ ToolsCWE-79 | 6.1 | Medium | 2024-11-20 |
| CVE-2024-10899 | WordPress plugin WooCommerce Product Table Lite 代码注入漏洞 — Product Table and List Builder for WooCommerce LiteCWE-94 | 7.3 | High | 2024-11-20 |
| CVE-2024-8726 | WordPress plugin MailChimp Forms by MailMunch 跨站脚本漏洞 — MailChimp Forms by MailMunchCWE-79 | 6.1 | Medium | 2024-11-20 |
| CVE-2024-11277 | WordPress plugin 404 Solution 跨站脚本漏洞 — 404 SolutionCWE-79 | 6.1 | Medium | 2024-11-20 |
| CVE-2024-9653 | WordPress plugin Restaurant Menu 跨站脚本漏洞 — Restaurant Menu – Food Ordering System – Table ReservationCWE-79 | 6.1 | Medium | 2024-11-20 |
| CVE-2024-11278 | WordPress plugin GD bbPress Attachments 安全漏洞 — GD bbPress AttachmentsCWE-79 | 6.1 | Medium | 2024-11-20 |
| CVE-2024-11400 | WordPress plugin HUSKY – Products Filter for WooCommerce 跨站脚本漏洞 — HUSKY – Products Filter Professional for WooCommerceCWE-79 | 6.1 | Medium | 2024-11-19 |
| CVE-2024-45422 | Zoom多款产品 安全漏洞 — Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms ControllersCWE-20 | 6.5 | Medium | 2024-11-19 |
| CVE-2024-45419 | Zoom多款产品 安全漏洞 — Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms ControllersCWE-252 | 8.1 | High | 2024-11-19 |
| CVE-2024-21697 | Atlassian Sourcetree 安全漏洞 — Sourcetree for Mac | 8.8AI | HighAI | 2024-11-19 |
| CVE-2024-42450 | Versa Director 安全漏洞 — Director | 9.8AI | CriticalAI | 2024-11-19 |
access:pre-auth 是常见的弱点类别，本平台收录该类弱点关联的 21465 条 CVE 漏洞。