What is CVE-2026-13741?

CVE-2026-13741 is a high-severity vulnerability in Unitedover Digits: Wordpress Mobile Number Signup And Login, classified under Improper Privilege Management. CVSS score: 8.8/10. Published 2026-07-16.

How severe is CVE-2026-13741?

High severity. CVSS v3 base score is 8.8 out of 10.

Privilege escalation in Unitedover Digits: Wordpress Mobile Number Signup And Login

CVE-2026-13741

The Digits: WordPress Mobile Number Signup and Login plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 9.1.0.5. This is due to missing authorization and role validation in the `dig_update_wpwc…

Vulnerability class: Privilege Escalation

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Unitedover Digits: Wordpress Mobile Number Signup And Login — versions 0

Weakness classification (CWE)

CWE-269 — Improper Privilege Management

References

Frequently asked questions

What is CVE-2026-13741?: CVE-2026-13741 is a high-severity vulnerability in Unitedover Digits: Wordpress Mobile Number Signup And Login, classified under Improper Privilege Management. CVSS score: 8.8/10. Published 2026-07-16.
How severe is CVE-2026-13741?: High severity. CVSS v3 base score is 8.8 out of 10.