目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1336 元

100%
请我们喝杯咖啡

access:pre-auth 标签下的 CVE 漏洞 22520

access:pre-auth 类型相关 22520 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。

“access:pre-auth”标签标识了无需身份验证即可触发的漏洞，涵盖18971个CVE。此类漏洞之所以关键，是因为攻击者无需凭证即可直接利用，极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击，常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块，对系统安全性构成直接且严重的威胁。

CVE ID标题CVSS风险等级Published
CVE-2026-15964 WordPress Single Sign On For TNG 授权问题漏洞 — Single Sign On For TNGCWE-620 9.8 Critical2026-08-01
CVE-2026-15052 WordPress MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder 跨站脚本漏洞 — MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form BuilderCWE-79 7.2 High2026-08-01
CVE-2026-18059 WordPress PixelYourSite 信息泄露漏洞 — PixelYourSite – Your smart PIXEL (TAG) & API ManagerCWE-200 5.3 Medium2026-08-01
CVE-2026-16144 WP Chill Kali Forms 代码注入漏洞 — Kali Forms — Contact Form & Drag-and-Drop BuilderCWE-94 8.1 High2026-08-01
CVE-2026-15018 WordPress Database Collation Fix SQL注入漏洞 — Database Collation FixCWE-89 5.3 Medium2026-08-01
CVE-2026-11995 WordPress Gutena Forms 授权问题漏洞 — Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form BuilderCWE-862 5.3 Medium2026-08-01
CVE-2025-14469 WordPress Theme Editor 跨站请求伪造漏洞 — Theme EditorCWE-352 4.3 Medium2026-08-01
CVE-2026-15988 tigroumeow AI Engine – The Chatbot, AI Framework & MCP for WordPress 跨站请求伪造漏洞 — AI Engine – The Chatbot, AI Framework & MCP for WordPressCWE-352 8.8 High2026-08-01
CVE-2026-14822 WordPress Event Tickets and Registration 权限许可和访问控制问题漏洞 — Event Tickets and Registration--2026-08-01
CVE-2026-14840 YOP Poll 授权问题漏洞 — YOP Poll--2026-08-01
CVE-2026-14561 WordPress Authora 授权问题漏洞 — Authora : Easy login with mobile number--2026-08-01
CVE-2026-14839 WordPress Mapster WP Maps 信息泄露漏洞 — Mapster WP Maps--2026-08-01
CVE-2026-14315 WordPress Pixel Tag Manager for WooCommerce 权限许可和访问控制问题漏洞 — Pixel Tag Manager for WooCommerce--2026-08-01
CVE-2026-14292 WordPress Download Manager 跨站脚本漏洞 — Download Manager--2026-08-01
CVE-2026-13725 WordPress Dynamic Pricing With Discount Rules for WooCommerce 跨站脚本漏洞 — Dynamic Pricing With Discount Rules for WooCommerce--2026-08-01
CVE-2026-13604 WordPress Pixelavo 服务端请求伪造漏洞 — Pixelavo--2026-08-01
CVE-2026-13596 WordPress Participants Database SQL注入漏洞 — Participants Database--2026-08-01
CVE-2026-11882 WordPress Builderall for WordPress 权限许可和访问控制问题漏洞 — Builderall for WordPress--2026-08-01
CVE-2026-15368 WordPress User Profile Builder 权限许可和访问控制问题漏洞 — User Profile Builder--2026-08-01
CVE-2026-14309 WordPress Chat On Desk Order Notifications – WooCommerce 授权问题漏洞 — Chat On Desk Order Notifications--2026-08-01
CVE-2026-15244 pluginus husky - products filter professional for woocommerce 路径遍历漏洞 — HUSKY--2026-08-01
CVE-2026-14596 WordPress DynamicKit for Elementor 授权问题漏洞 — DynamicKit for Elementor--2026-08-01
CVE-2026-14836 WordPress Login & Register Forms 授权问题漏洞 — Login & Register Forms--2026-08-01
CVE-2026-15932 WordPress Support Genix 路径遍历漏洞 — Support Genix--2026-08-01
CVE-2026-12966 WordPress Direct Payments for WooCommerce 权限许可和访问控制问题漏洞 — Direct Payments for WooCommerce--2026-08-01
CVE-2026-3141 WordPress FormGent 授权问题漏洞 — FormGent – Next-Gen AI Form Builder for WordPress with Multi-Step, Quizzes, Payments & MoreCWE-862 9.1 Critical2026-08-01
CVE-2026-15006 WordPress Bit integrations 路径遍历漏洞 — Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email AutomationCWE-22 7.5 High2026-08-01
CVE-2026-45377 Decidim 信息泄露漏洞 — decidimCWE-200 6.5 Medium2026-07-31
CVE-2026-54768 WPGraphQL 侧信道信息泄露漏洞 — wp-graphqlCWE-204 6.9 Medium2026-07-31
CVE-2026-68771 Comfy Org ComfyUI 反序列化漏洞 — ComfyUICWE-502 9.8 Critical2026-07-31

access:pre-auth 是常见的弱点类别，本平台收录该类弱点关联的 22520 条 CVE 漏洞。