access:pre-auth 类型相关 22137 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞，涵盖18971个CVE。此类漏洞之所以关键，是因为攻击者无需凭证即可直接利用，极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击，常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块，对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2024-4898 | WordPress plugin InstaWP Connect 安全漏洞 — InstaWP Connect – 1-click WP Staging & MigrationCWE-862 | 9.8 | Critical | 2024-06-12 |
| CVE-2024-5468 | WordPress plugin Pearl 安全漏洞 — Pearl – Header BuilderCWE-862 | 6.5 | Medium | 2024-06-12 |
| CVE-2024-4266 | WordPress plugin MetForm 安全漏洞 — MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for ElementorCWE-200 | 5.3 | Medium | 2024-06-11 |
| CVE-2024-3723 | WordPress plugin Advanced Contact form 7 DB 安全漏洞 — Advanced Contact form 7 DBCWE-922 | 5.3 | Medium | 2024-06-11 |
| CVE-2024-4319 | WordPress plugin Advanced Contact form 7 DB 安全漏洞 — Advanced Contact form 7 DBCWE-862 | 5.3 | Medium | 2024-06-11 |
| CVE-2024-36360 | awkblog 安全漏洞 — awkblog | 9.8AI | CriticalAI | 2024-06-11 |
| CVE-2023-7264 | WordPress plugin Build App Online 安全漏洞 — Build App OnlineCWE-640 | 8.1 | High | 2024-06-11 |
| CVE-2024-28164 | SAP NetWeaver AS 信息泄露漏洞 — SAP NetWeaver AS JavaCWE-200 | 5.3 | Medium | 2024-06-11 |
| CVE-2024-34686 | SAP CRM 跨站脚本漏洞 — SAP CRM WebClient UICWE-79 | 6.1 | Medium | 2024-06-11 |
| CVE-2024-22279 | Cloud Foundry 安全漏洞 — Routing ReleaseCWE-444 | 5.9 | Medium | 2024-06-10 |
| CVE-2024-36407 | SuiteCRM 安全漏洞 — SuiteCRMCWE-640 | 3.7 | Low | 2024-06-10 |
| CVE-2024-35307 | Pandora 安全漏洞 — Pandora FMSCWE-88 | 9.8 | - | 2024-06-10 |
| CVE-2024-37393 | SecurEnvoy MFA 安全漏洞 — n/a | 9.1 | - | 2024-06-10 |
| CVE-2024-5654 | WordPress plugin CF7 Google Sheets Connector 安全漏洞 — GSheetConnector for CF7 – Connect Contact Form 7 to Google Sheets and Send Form Submissions in Real TimeCWE-862 | 6.5 | Medium | 2024-06-08 |
| CVE-2024-5613 | WordPress plugin Formula 安全漏洞 — FormulaCWE-79 | 6.1 | Medium | 2024-06-08 |
| CVE-2024-5638 | WordPress plugin Formula 安全漏洞 — FormulaCWE-79 | 6.1 | Medium | 2024-06-08 |
| CVE-2024-5382 | WordPress plugin Master Addons 安全漏洞 — Master Addons For Elementor – Widgets, Extensions, Theme Builder, Popup Builder & Template KitsCWE-862 | 6.5 | Medium | 2024-06-07 |
| CVE-2024-5599 | WordPress plugin FileOrganizer 安全漏洞 — FileOrganizer – WordPress File ManagerCWE-922 | 7.5 | High | 2024-06-07 |
| CVE-2024-5542 | WordPress plugin Master Addons 安全漏洞 — Master Addons For Elementor – Widgets, Extensions, Theme Builder, Popup Builder & Template KitsCWE-79 | 7.2 | High | 2024-06-07 |
| CVE-2023-5424 | WordPress plugin WS Form LITE 安全漏洞 — WS Form LITE – Drag & Drop Contact Form BuilderCWE-1236 | 4.7 | Medium | 2024-06-07 |
| CVE-2024-4620 | WordPress plugin ARForms 安全漏洞 — ARForms - Premium WordPress Form Builder Plugin | 9.8 | - | 2024-06-07 |
| CVE-2024-30163 | Invision Community 安全漏洞 — n/a | 9.8 | - | 2024-06-07 |
| CVE-2024-5130 | Lunary 安全漏洞 — lunary-ai/lunaryCWE-862 | 5.3AI | MediumAI | 2024-06-06 |
| CVE-2024-5552 | Kubeflow 安全漏洞 — kubeflow/kubeflowCWE-1333 | 7.5AI | HighAI | 2024-06-06 |
| CVE-2024-3033 | AnythingLLM 授权问题漏洞 — mintplex-labs/anything-llmCWE-863 | 8.2AI | HighAI | 2024-06-06 |
| CVE-2024-35178 | Jupyter Server 安全漏洞 — jupyter_serverCWE-200 | 7.5 | High | 2024-06-06 |
| CVE-2024-37152 | Argo CD 安全漏洞 — argo-cdCWE-287 | 5.3 | Medium | 2024-06-06 |
| CVE-2024-5684 | ID Charger 安全漏洞 — ID Charger Connect & ProCWE-345 | 6.3 | Medium | 2024-06-06 |
| CVE-2024-0972 | WordPress plugin BuddyPress Members Only 安全漏洞 — BuddyPress Members OnlyCWE-284 | 5.3 | Medium | 2024-06-06 |
| CVE-2024-5153 | WordPress plugin Startklar Elementor Addons 安全漏洞 — Startklar Elementor AddonsCWE-22 | 9.1 | Critical | 2024-06-06 |
access:pre-auth 是常见的弱点类别，本平台收录该类弱点关联的 22137 条 CVE 漏洞。