CVE-2024-0235

The EventON WordPress plugin before 4.5.5, EventON WordPress plugin before 2.2.7 do not have authorisation in an AJAX action, allowing unauthenticated users to retrieve email addresses of any users on the blog

Score

CVSS 3.1 5.3 Medium

Status

Modified - contact@wpscan.com

Published

2024-01-16

Last modified

2025-06-20

Weaknesses

CWE-862

Affected products

• Eventon (Myeventon)
• Eventon (Unknown)

References

• https://wpscan.com/vulnerability/e370b99a-f485-42bd-96a3-60432a15a4e9/