The DIGITS: WordPress Mobile Number Signup and Login WordPress plugin before 8.4.6.1 does not rate limit OTP validation attempts, making it straightforward for attackers to bruteforce them.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://wpscan.com/vulnerability/b5f0a263-644b-4954-a1f0-d08e2149edbb/ | Exploit Third Party Advisory |
Configurations
History
09 Jun 2025, 20:13
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:unitedover:digits:*:*:*:*:*:wordpress:*:* | |
| References | () https://wpscan.com/vulnerability/b5f0a263-644b-4954-a1f0-d08e2149edbb/ - Exploit, Third Party Advisory | |
| First Time |
Unitedover
Unitedover digits |
|
| CWE | NVD-CWE-noinfo |
21 May 2025, 06:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-05-21 06:16
Updated : 2025-06-09 20:13
NVD link : CVE-2025-4094
Mitre link : CVE-2025-4094
JSON object : View
Products Affected
unitedover
- digits
CWE