UnitedOver

Products

ProductCVEsExploitedLatest
Digits: WordPress Mobile Number Signup and Login2–Jul 16, 2026

Exploited and recent CVEs

  • CVE-2026-13741 High 8.8 Digits: WordPress Mobile Number Signup and Login <= 9.1.0.5 - Authenticated (Subscriber+) Privilege Escalation via 'digits_reg_userrole' Parameter 0.4%
  • CVE-2024-0203 High 8.8 The Digits plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 8.4.1. This is due to missing nonce validation in the 'digits_save_settings' function. Thi 0.3%