← Database

CVE-2025-4094

CRITICAL CVSS: 9.8 Published: 2025-05-21 Modified: 2026-06-17

Description

The DIGITS: WordPress Mobile Number Signup and Login WordPress plugin before 8.4.6.1 does not rate limit OTP validation attempts, making it straightforward for attackers to bruteforce them.

Affected Platforms

Unitedover Digits

Weakness Type

NVD-CWE-noinfo

References