← Back to browse · API

CVE-2025-4094

Severity
CRITICAL
CVSS
9.8
EPSS
0.16763
Risk score
45.07
CISA KEV
No
PoC
No
Published
2025-05-21
Modified
2025-08-27
First seen
2026-08-07
Aliases
EUVD-2025-16076, GHSA-VR5W-FMP9-M564
Products
Unknown:Digits: WordPress Mobile Number Signup and Login 0 <8.4.6.1
Sources
euvd EUVD-2025-16076

Description

The DIGITS: WordPress Mobile Number Signup and Login WordPress plugin before 8.4.6.1 does not rate limit OTP validation attempts, making it straightforward for attackers to bruteforce them.

References