VYPR

DIGITS WordPress Mobile Number Signup and Login

by WordPress

CVEs (1)

  • CVE-2025-4094CriMay 21, 2025
    risk 0.68cvss 9.8epss 0.16

    The DIGITS: WordPress Mobile Number Signup and Login WordPress plugin before 8.4.6.1 does not rate limit OTP validation attempts, making it straightforward for attackers to bruteforce them.