Input validation vulnerability in DeBounce Email Validator 5.6.6

The DeBounce Email Validator plugin for WordPress has a security flaw that allows attackers to manipulate settings and insert harmful scripts into a website. This vulnerability affects all versions up to 5.6.6. It occurs because the plugin does not properly check for a special code called a “nonce” on the page where it is used. This means that hackers without proper authorization can use a fake request to trick a site administrator into taking an action, like clicking on a link.