Debounce Io Email Validator Vulnerabilities

The DeBounce Email Validator plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.8.1. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to update settings and inject malicious web scripts via a fo...

CVSS:

6.1

Affected:

up to 5.8.1

Fixed in:

5.8.2

Disclosed:

Apr 9, 2025

CVE-2025-32580 on NVD →

The DeBounce Email Validator plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 5.7. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass acce...

CVSS:

9.8

Affected:

up to 5.7

Fixed in:

5.71

Disclosed:

Apr 3, 2025

CVE-2025-31098 on NVD →

The DeBounce Email Validator plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.8.0. This is due to missing or incorrect nonce validation on the 'debounce_email_validator' page. This makes it possible for unauthenticated attackers to update settings and inject malic...

CVSS:

6.1

Affected:

up to 5.8.0

Fixed in:

5.8.1

Disclosed:

Feb 18, 2025

CVE-2024-13339 on NVD →

The DeBounce Email Validator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'from', 'to', and 'key' parameters in all versions up to, and including, 5.6.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary we...

CVSS:

6.1

Affected:

up to 5.6.5

Fixed in:

5.6.6

Disclosed:

Nov 22, 2024

CVE-2024-11463 on NVD →