access:pre-auth 类型相关 22110 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞，涵盖18971个CVE。此类漏洞之所以关键，是因为攻击者无需凭证即可直接利用，极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击，常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块，对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2024-8615 | WordPress plugin WP JobSearch 代码问题漏洞 — JobSearch WP Job BoardCWE-434 | 10.0 | Critical | 2024-11-06 |
| CVE-2024-6626 | WordPress plugin EleForms 安全漏洞 — EleForms – All In One Form Integration including DB for ElementorCWE-862 | 5.3 | Medium | 2024-11-06 |
| CVE-2024-9946 | WordPress plugin Super Socializer 授权问题漏洞 — Social Share, Social Login and Social Comments Plugin – Super SocializerCWE-287 | 8.1 | High | 2024-11-06 |
| CVE-2024-10020 | WordPress plugin Heateor Social Login WordPress 安全漏洞 — Heateor Social Login WordPressCWE-287 | 8.1 | High | 2024-11-06 |
| CVE-2024-10535 | WordPress plugin Video Gallery for WooCommerce 安全漏洞 — Video Gallery for WooCommerceCWE-862 | 5.3 | Medium | 2024-11-06 |
| CVE-2024-10647 | WordPress plugin WS Form LITE 跨站脚本漏洞 — WS Form LITE – Drag & Drop Contact Form BuilderCWE-79 | 6.1 | Medium | 2024-11-06 |
| CVE-2024-48325 | Portábilis i-Educar 安全漏洞 — n/a | 9.8AI | CriticalAI | 2024-11-06 |
| CVE-2024-10028 | WordPress plugin Everest Backup 安全漏洞 — Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning PluginCWE-922 | 7.5 | High | 2024-11-05 |
| CVE-2024-47460 | Aruba Networks Instant 安全漏洞 — HPE Aruba Networking Access Points, Instant AOS-8, and AOS-10 | 9.0 | Critical | 2024-11-05 |
| CVE-2024-42509 | Hewlett Packard Enterprise ArubaOS 安全漏洞 — HPE Aruba Networking Access Points, Instant AOS-8, and AOS-10 | 9.8 | Critical | 2024-11-05 |
| CVE-2024-51739 | Combodo iTop 信息泄露漏洞 — iTopCWE-200 | 7.5 | High | 2024-11-05 |
| CVE-2024-10263 | WordPress plugin Tickera – WordPress Event Ticketing 代码注入漏洞 — Tickera – Sell Tickets & Manage EventsCWE-94 | 7.3 | High | 2024-11-05 |
| CVE-2024-10687 | WordPress plugin Contest Gallery SQL注入漏洞 — Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & StripeCWE-89 | 9.8 | Critical | 2024-11-05 |
| CVE-2024-9667 | WordPress plugin Seriously Simple Podcasting 跨站脚本漏洞 — Seriously Simple PodcastingCWE-79 | 6.1 | Medium | 2024-11-05 |
| CVE-2024-10114 | WordPress plugin Social Login 授权问题漏洞 — WooCommerce - Social LoginCWE-287 | 8.1 | High | 2024-11-05 |
| CVE-2024-10711 | WordPress plugin WooCommerce Report 跨站请求伪造漏洞 — REPORTiT – Advanced Reporting for WooCommerceCWE-352 | 8.8 | High | 2024-11-05 |
| CVE-2024-10097 | WordPress plugin Loginizer Security and Loginizer 授权问题漏洞 — Loginizer SecurityCWE-287 | 8.1 | High | 2024-11-05 |
| CVE-2024-9896 | WordPress plugin BBP Core 安全漏洞 — Forumax – AI Powered Advanced Community Forum PluginCWE-79 | 6.1 | Medium | 2024-11-02 |
| CVE-2024-8739 | WordPress plugin ReCaptcha Integration for WordPress 跨站脚本漏洞 — ReCaptcha Integration for WordPressCWE-79 | 6.1 | Medium | 2024-11-02 |
| CVE-2024-41745 | IBM CICS TX Standard 跨站脚本漏洞 — CICS TX StandardCWE-79 | 6.1 | Medium | 2024-11-01 |
| CVE-2024-10652 | CHANGING IDExpert 跨站脚本漏洞 — IDExpertCWE-79 | 6.1 | Medium | 2024-11-01 |
| CVE-2024-22733 | TP-LINK MR200 安全漏洞 — n/a | 7.5AI | HighAI | 2024-11-01 |
| CVE-2024-6479 | WordPress plugin SIP Reviews Shortcode for WooCommerce SQL注入漏洞 — SIP Reviews Shortcode for WooCommerceCWE-89 | 6.5 | Medium | 2024-10-31 |
| CVE-2024-9434 | WordPress plugin WPGlobus Translate Options 安全漏洞 — WPGlobus Translate OptionsCWE-352 | 6.1 | Medium | 2024-10-31 |
| CVE-2024-9430 | WordPress plugin Get Quote For Woocommerce 访问控制错误漏洞 — Get Quote For Woocommerce – Request A Quote For WoocommerceCWE-306 | 5.3 | Medium | 2024-10-31 |
| CVE-2024-9700 | WordPress plugin Forminator Forms 安全漏洞 — Forminator Forms – Contact Form, Payment Form & Custom Form BuilderCWE-639 | 5.3 | Medium | 2024-10-31 |
| CVE-2024-10392 | WordPress plugin AI Power: Complete AI Pack 代码问题漏洞 — AI Puffer – Your AI engine for WordPress (formerly AI Power)CWE-434 | 9.8 | Critical | 2024-10-31 |
| CVE-2024-10544 | WordPress plugin Woo Manage Fraud Orders 日志信息泄露漏洞 — Woo Manage Fraud OrdersCWE-532 | 5.3 | Medium | 2024-10-31 |
| CVE-2024-33603 | LevelOne WBR-6012 信息泄露漏洞 — WBR-6012CWE-200 | 5.3 | Medium | 2024-10-30 |
| CVE-2024-33626 | LevelOne WBR-6012 信息泄露漏洞 — WBR-6012CWE-200 | 5.3 | Medium | 2024-10-30 |
access:pre-auth 是常见的弱点类别，本平台收录该类弱点关联的 22110 条 CVE 漏洞。