Critical severity9.8NVD Advisory· Published May 21, 2025· Updated Jun 17, 2026

CVE-2025-4094

Description

The DIGITS: WordPress Mobile Number Signup and Login WordPress plugin before 8.4.6.1 does not rate limit OTP validation attempts, making it straightforward for attackers to bruteforce them.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Mobile Number Signup and Login WordPress plugindescription
WordPress/DIGITS WordPress Mobile Number Signup and Loginllm-create
Range: <8.4.6.1
WordPress/DIGITSwp-canonicalize

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/b5f0a263-644b-4954-a1f0-d08e2149edbb/nvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.013
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000