9.8
Critique
CVE-2025-4094 The DIGITS: WordPress Mobile Number Signup and Login WordPress plugin before 8.4.6.1 does not rate limit OTP…
Description
The DIGITS: WordPress Mobile Number Signup and Login WordPress plugin before 8.4.6.1 does not rate limit OTP validation attempts, making it straightforward for attackers to bruteforce them.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| DIGITS: WordPress Mobile Number Signup and Login 8.4 | premières → < 8.4.6.1 | 8.4.6.1 |