UnitedOver vulnerabilities
We track 2 vulnerabilities in UnitedOver products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on July 16, 2026.
2vulnerabilities
0critical
2high
0exploited
8.8average CVSS score
Latest UnitedOver vulnerabilities
- 8.8 High severity
Digits: WordPress Mobile Number Signup and Login: Improper Privilege Management
The Digits: WordPress Mobile Number Signup and Login plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 9.1.0.5. This is due to missing authorization and role validation in the `dig_update_wpwc_custom_fields()` fun
- 8.8 High severity
Digits: WordPress Mobile Number Signup and Login: Cross-Site Request Forgery
The Digits plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 8.4.1. This is due to missing nonce validation in the 'digits_save_settings' function. This makes it possible for unauthenticated attackers to modify