ZeroBounce Email Verification & Validation

ZeroBounce Email Verification & Validation has one disclosed vulnerability in the WordSec catalog, all reported in 2023; it is fixed as of September 2026. Their average CVSS score is 5.5, and the most serious one scores 5.5 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for ZeroBounce Email Verification & Validation has a vendor fix available, so running the current release closes it.

All of these findings were reported by DoYeon Park (p6rkdoye0n). ZeroBounce Email Verification & Validation is installed on roughly 900 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.

Strategic Overview

Avg CVSSMedium
5.5/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all ZeroBounce Email Verification & Validation vulnerabilities before they are exploited.

Highest severity on recordCVSS 5.5CVE-2023-51374

ZeroBounce Email Verification & Validation <= 1.0.11 - Authenticated (Administrator+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records
ZeroBounce Email Verification & Validation banner
Latestv1.1.6

ZeroBounce Email Verification & Validation

zerobounce

Author

zerobounce

4.8(4)
96/100
Last Updated
2026-08-26 (18d ago)
Active Installs
900+
Downloads
14,124
Requires WP
4.4+
Requires PHP
7.0+
Tested up to
WP 6.9.7
Created
2017-09-29 (9y ago)

Need an email validation tool to block invalid and high-risk emails on your WordPress website? The ZeroBounce email verification plugin assists users by validating email addresses entered into your registration forms, comments sections, eCommerce shops, and more. Install the plugin, connect your API key, and select the forms you want to monitor with email validation. Key Features Automated real-time email validation – Automatically prevent selected email types from creating accounts, leaving comments, or signing up Detect more than 30+ email address types – Including invalid, abuse, disposable, spam trap, toxic domains, catch-all, and more Choose what to accept – Create your own rules for email validation and disallow emails based on status Email verification for 9 form types – Easily select which forms you want to protect with email validation Fast manual email validation – Verify any email address in the tools section using our interactive form Email validation API logs – Keep track of monthly email verifications, including status, sub-status, IP, date, and credits used Benefits Keep your email list clean & accurate Reduce your email bounce rate Boost your inbox placement Protect your email sender reputation Improve email deliverability Eliminate fraudulent, untrustworthy shoppers Block spammers and spoofers Keep your comments section clean Supported Forms/Plugins Contact Form 7 WPForms Ninja Forms Formidable Forms WooCommerce WordPress Post Comments WordPress Registration MC4WP: Mailchimp for WordPress Gravity Forms Fluent Forms WS Forms Mailster Forms Forminator Forms And more support is being added gradually.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C