How to: CVE-2025-4094 (2025-05-21)
```
The DIGITS: WordPress Mobile Number Signup and Login WordPress plugin before 8.4.6.1 does not rate limit OTP validation attempts, making it straightforward for attackers to bruteforce them.
```
- [starawneh/CVE-2025-4094](https://github.com/starawneh/CVE-2025-4094)
- [POCPioneer/CVE-2025-4094-POC](https://github.com/POCPioneer/CVE-2025-4094-POC)