CVE-2025-4094 Digits < 8.4.6.1 - Auth Bypass via OTP Bruteforcing

The DIGITS: WordPress Mobile Number Signup and Login WordPress plugin before 8.4.6.1 does not rate limit OTP validation attempts, making it straightforward for attackers to bruteforce them...

CVE-2025-4094

The DIGITS: WordPress Mobile Number Signup and Login plugin (versions before 8.4.6.1 ) is vulnerable to an authentication bypass because it fails to implement rate limiting on OTP validation attempts. This flaw allows unauthenticated attackers to perform bruteforce attacks to guess SMS OTP values...

CVE-2025-4094 Digits < 8.4.6.1 - Auth Bypass via OTP Bruteforcing

The DIGITS: WordPress Mobile Number Signup and Login WordPress plugin before 8.4.6.1 does not rate limit OTP validation attempts, making it straightforward for attackers to bruteforce them...