WordPress: Cross-Site Request Forgery Vulnerability in DeBounce Email Validator Plugin

In DeBounce Email Validator plugin for WordPress versions 5.6.6 and prior a medium severity vulnerability CVE-2024-13339 was detected. This vulnerability allows unauthenticated attackers to update settings and inject malicious web scripts via a forged request due to missing or incorrect nonce validation on the ‘debounce_email_validator’ page. Currently, there is no fix version for that issue. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2024-13339.