CVE-2024-0235-PoC

EventON WordPress 插件 4.5.5 之前版本及 EventON WordPress 插件 2.2.7 之前版本在 AJAX 操作中未进行授权，允许未认证用户获取博客上任何用户的电子邮件地址。

用法:

usage: CVE-2024-0235.py [-h] --url URL
CVE-2024-0235.py: error: the following arguments are required: --url/-u

C:\Users\Nxploit\Desktop\readmail>python CVE-2024-0235.py -help
usage: CVE-2024-0235.py [-h] --url URL

EventON (Free < 2.2.8, Premium < 4.5.5) - Unauthenticated Email Address Disclosure.

options:
  -h, --help         show this help message and exit
  --url URL, -u URL  The base URL of the WordPress site.