sales@hackhalt.com

Live Vulnerability Intelligence

Threat Database

Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.

Total4
Critical0
High3
Medium1
Reset
Showing 1-4 of 4 records
Threat Entry Updated 2026-08-13

Debounce Io Email Validator - Path Traversal (CVE-2025-31098)

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in debounce DeBounce Email Validator debounce-io-email-validator allows PHP Local File Inclusion. This issue affects DeBounce Email Validator: from n/a through

PLUGIN Debounce Io Email Validator

CVE-2025-31098

HIGH CVSS 7.5 2025-04-03
Threat Entry Updated 2026-06-17

Debounce Io Email Validator - Cross-Site Request Forgery (CSRF) (CVE-2024-13339)

The DeBounce Email Validator plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.8.0. This is due to missing or incorrect nonce validation on the 'debounce_email_validator' page. This makes it possible for unauthenticated attackers to update settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.

PLUGIN Debounce Io Email Validator

CVE-2024-13339

MEDIUM CVSS 6.1 2025-02-19