DeBounce Email Validator

DeBounce Email Validator has 4 disclosed vulnerabilities in the WordSec catalog, reported between 2024 and 2025; all 4 are fixed as of September 2026. Their average CVSS score is 7.0, and the most serious one scores 9.8 out of 10. Severity breakdown: 1 critical and 0 high. 2025 was the busiest year with 3 disclosures.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 2 of the records (50%). Other recurring categories include Cross-Site Scripting, PHP Remote File Inclusion.

Every one of the 4 issues recorded for DeBounce Email Validator has a vendor fix available, so running the current release closes all known holes.

4 independent researchers contributed these findings, one record each. DeBounce Email Validator is installed on roughly 300 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSHigh
7.0/ 10
Patch Coverage100%
Open

0

Fixed

4

Get automatic notifications for all DeBounce Email Validator vulnerabilities before they are exploited.

Highest severity on recordCVSS 9.8CVE-2025-31098

DeBounce Email Validator <= 5.7 - Unauthenticated Local File Inclusion

Read the full analysis

Vulnerability Records

4 records
Plugin Profile
Latestv5.8.9

DeBounce Email Validator

debounce

Author

debounce

3.9(16)
78/100
Last Updated
2026-08-13 (1mo ago)
Active Installs
300+
Downloads
24,442
Requires WP
3.0.1+
Requires PHP
7.0+
Tested up to
WP 7.1
Created
2018-09-15 (8y ago)

🚀 Transform Your Email Quality with AI-Powered Validation Tired of fake emails, spam traps, and disposable addresses cluttering your database? DeBounce Email Validator is the ultimate solution for WordPress websites that demand real, deliverable email addresses. Why Choose DeBounce? 99.9% Accuracy Rate – Industry-leading validation precision Zero IP Impact – No emails sent, no blacklisting risk GDPR Compliant – Complete privacy protection Real-time Validation – Instant feedback for users Advanced AI Detection – Catches sophisticated spam attempts Perfect For E-commerce stores (WooCommerce) Lead generation forms User registration systems Contact forms Newsletter signups Any WordPress form Install, connect your API key, and watch your email quality soar while reducing spam and improving conversion rates. Supported Forms and Plugins 🛒 E-COMMERCE & BUSINESS FORMS WooCommerce – Validate shipping and billing emails Gravity Forms – Enterprise-grade form validation Contact Form 7 – Most popular contact form plugin WPForms – Drag & drop form builder 🏗️ ADVANCED FORM BUILDERS Ninja Forms – Professional form creation Formidable Forms – Complex form solutions Forminator – Modern form builder Fluent Forms – Advanced form management Elementor Forms – Page builder integration WSForms – Premium form builder ⚙️ WORDPRESS CORE FEATURES WordPress Comments – Validate commenter emails User Registration – Ensure valid signup emails Jetpack Forms – Automattic’s form solution 🔧 CUSTOM INTEGRATION Any Custom Form – Works with is_email() function Third-party Plugins – Automatic compatibility API Integration – Direct API access available Key Features 🔍 CORE VALIDATION CHECKS DNS & MX Record Validation – Verify domain authenticity Syntax Verification – IETF/RFC standard compliance Mailbox Existence – Confirm email actually exists SMTP Connection Testing – Real server verification 🛡️ SECURITY & SPAM PROTECTION Disposable Email Detection – Block temporary email services Spam Trap Identification – Prevent honeypot emails Typosquatting Prevention – Catch misspelled domains Role-based Email Filtering – Block info@, admin@, etc. Custom Blocklist – Your own domain/email restrictions ⚡ PERFORMANCE & RELIABILITY Real-time Validation – Instant user feedback Temporary Unavailability Detection – Handle server issues Catch-All Domain Testing – Identify low-quality domains Greylisting Detection – Advanced spam protection 99.9% Accuracy Rate – Industry-leading precision 🔒 PRIVACY & COMPLIANCE GDPR Compliant – No email storage Zero IP Impact – No emails sent from your servers Secure API Communication – Encrypted data transfer Privacy-First Design – Your data stays private 📊 ANALYTICS & MONITORING Validation Logs – Track all validation attempts Performance Metrics – Monitor validation success rates Custom Error Messages – Branded user feedback Multi-language Support – Global accessibility Start with 100 Free Validations – Get your API key now

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C