9.8
Critical
CVE-2025-4094 The DIGITS: WordPress Mobile Number Signup and Login WordPress plugin before 8.4.6.1 does not rate limit OTP…
Description
The DIGITS: WordPress Mobile Number Signup and Login WordPress plugin before 8.4.6.1 does not rate limit OTP validation attempts, making it straightforward for attackers to bruteforce them.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| DIGITS: WordPress Mobile Number Signup and Login 8.4 | earliest → < 8.4.6.1 | 8.4.6.1 |