access:pre-auth 类型相关 22865 条 CVE 漏洞，含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞，涵盖18971个CVE。此类漏洞之所以关键，是因为攻击者无需凭证即可直接利用，极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击，常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块，对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2023-2437 | WordPress Plugin UserPro 安全漏洞 — UserPro - Community and User Profile WordPress PluginCWE-288 | 9.8 | Critical | 2023-11-22 |
| CVE-2023-2438 | WordPress Plugin UserPro 安全漏洞 — UserPro - Community and User Profile WordPress PluginCWE-352 | 6.1 | Medium | 2023-11-22 |
| CVE-2023-2448 | WordPress Plugin UserPro 安全漏洞 — UserPro - Community and User Profile WordPress PluginCWE-862 | 6.5 | Medium | 2023-11-22 |
| CVE-2023-2440 | WordPress Plugin UserPro 安全漏洞 — UserPro - Community and User Profile WordPress PluginCWE-352 | 8.8 | High | 2023-11-22 |
| CVE-2023-5382 | WordPress Plugin Funnelforms Free 安全漏洞 — Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor – Funnelforms FreeCWE-352 | 6.5 | Medium | 2023-11-22 |
| CVE-2023-6007 | WordPress Plugin UserPro 安全漏洞 — UserPro - Community and User Profile WordPress PluginCWE-862 | 7.3 | High | 2023-11-22 |
| CVE-2023-5537 | WordPress Plugin Delete Usermeta 安全漏洞 — Delete UsermetasCWE-352 | 4.3 | Medium | 2023-11-22 |
| CVE-2023-5815 | WordPress Plugin News & Blog Designer Pack 安全漏洞 — Blog Designer Pack – Blog, Post Grid, Post Slider, Post Carousel, Category Post, NewsCWE-98 | 8.1 | High | 2023-11-22 |
| CVE-2023-5822 | WordPress Plugin Drag and Drop Multiple File Upload - Contact Form 7 安全漏洞 — Drag and Drop Multiple File Upload for Contact Form 7CWE-434 | 8.1 | High | 2023-11-22 |
| CVE-2023-3104 | Unitree Robotics A1 安全漏洞 — A1CWE-306 | 5.7 | Medium | 2023-11-22 |
| CVE-2023-37924 | Apache Submarine 安全漏洞 — Apache SubmarineCWE-89 | 8.8AI | HighAI | 2023-11-22 |
| CVE-2023-2447 | WordPress Plugin UserPro 安全漏洞 — UserPro - Community and User Profile WordPress PluginCWE-352 | 6.1 | Medium | 2023-11-22 |
| CVE-2023-6248 | Digital Communications Technologies Syrus 4G IoT 安全漏洞 — Syrus4 IoT Telematics GatewayCWE-287 | 10.0 | Critical | 2023-11-21 |
| CVE-2023-47643 | SalesAgility SuiteCRM 安全漏洞 — SuiteCRM-CoreCWE-200 | 3.1 | Low | 2023-11-21 |
| CVE-2023-5776 | WordPress Plugin Post Meta Data Manager 安全漏洞 — Post Meta Data ManagerCWE-352 | 4.3 | Medium | 2023-11-21 |
| CVE-2023-4149 | WAGO Industrial Managed Switch 安全漏洞 — Industrial Managed Switch (0852-0602)CWE-78 | 9.8 | Critical | 2023-11-21 |
| CVE-2023-49105 | ownCloud 安全漏洞 — n/a | 9.8 | Critical | 2023-11-21 |
| CVE-2023-5640 | WordPress Plugin Article Analytics 安全漏洞 — Article analytics | 9.8AI | CriticalAI | 2023-11-20 |
| CVE-2023-5652 | WordPress和WordPress plugin 安全漏洞 — WP Hotel Booking | 9.8AI | CriticalAI | 2023-11-20 |
| CVE-2023-5340 | WordPress Plugin Five Star Restaurant Menu and Food Ordering 安全漏洞 — Five Star Restaurant Menu and Food Ordering | 9.8AI | CriticalAI | 2023-11-20 |
| CVE-2023-6197 | WordPress Plugin Audio Merchant 跨站请求伪造漏洞 — Audio MerchantCWE-352 | 5.4 | Medium | 2023-11-20 |
| CVE-2023-6196 | WordPress Plugin Audio Merchant 跨站请求伪造漏洞 — Audio MerchantCWE-352 | 8.8 | High | 2023-11-20 |
| CVE-2023-47175 | LuxSoft LuxCal Web Calendar 安全漏洞 — LuxCal Web Calendar | 6.1AI | MediumAI | 2023-11-20 |
| CVE-2023-46700 | LuxSoft LuxCal Web Calendar 安全漏洞 — LuxCal Web Calendar | 9.8AI | CriticalAI | 2023-11-20 |
| CVE-2023-38880 | Open Solutions For Education openSIS 安全漏洞 — n/a | 7.5AI | HighAI | 2023-11-20 |
| CVE-2023-38884 | Open Solutions For Education openSIS 安全漏洞 — n/a | 7.5AI | HighAI | 2023-11-20 |
| CVE-2023-44355 | Adobe ColdFusion 安全漏洞 — ColdFusionCWE-20 | 4.3 | Medium | 2023-11-17 |
| CVE-2023-26347 | Adobe ColdFusion 安全漏洞 — ColdFusionCWE-284 | 7.5 | High | 2023-11-17 |
| CVE-2023-44352 | Adobe ColdFusion 安全漏洞 — ColdFusionCWE-79 | 6.1 | Medium | 2023-11-17 |
| CVE-2023-22272 | Adobe RoboHelp 安全漏洞 — RoboHelpCWE-20 | 7.5 | High | 2023-11-17 |
access:pre-auth 是常见的弱点类别，本平台收录该类弱点关联的 22865 条 CVE 漏洞。