CVE-2024-0235 PoC — WordPress plugin EventON 安全漏洞

Description

The EventON WordPress plugin before 4.5.5, EventON WordPress plugin before 2.2.7 do not have authorisation in an AJAX action, allowing unauthenticated users to retrieve email addresses of any users on the blog

介绍

# CVE-2024-0235-PoC
The EventON WordPress plugin before 4.5.5, EventON WordPress plugin before 2.2.7 do not have authorisation in an AJAX action, allowing unauthenticated users to retrieve email addresses of any users on the blog


# Usage:

```
usage: CVE-2024-0235.py [-h] --url URL
CVE-2024-0235.py: error: the following arguments are required: --url/-u

C:\Users\Nxploit\Desktop\readmail>python CVE-2024-0235.py -help
usage: CVE-2024-0235.py [-h] --url URL

EventON (Free < 2.2.8, Premium < 4.5.5) - Unauthenticated Email Address Disclosure.

options:
  -h, --help         show this help message and exit
  --url URL, -u URL  The base URL of the WordPress site.
```

文件快照

备注