cve/2025/CVE-2025-4094.md

CVE-2025-4094

Description

The DIGITS: WordPress Mobile Number Signup and Login WordPress plugin before 8.4.6.1 does not rate limit OTP validation attempts, making it straightforward for attackers to bruteforce them.

POC

Reference

• https://wpscan.com/vulnerability/b5f0a263-644b-4954-a1f0-d08e2149edbb/

Github

• https://github.com/ARPSyndicate/cve-scores
• https://github.com/POCPioneer/CVE-2025-4094-POC
• https://github.com/PuddinCat/GithubRepoSpider
• https://github.com/nomi-sec/PoC-in-GitHub
• https://github.com/starawneh/CVE-2025-4094