CVE-2024-0235

This repository contains a functional Python script that exploits CVE-2024-0235, an unauthenticated email address disclosure vulnerability in the EventON WordPress plugin. The script checks the plugin version and sends a crafted POST request to retrieve email addresses of users with administrator roles.

The repository contains functional exploit code for CVE-2024-0235, demonstrating an arbitrary file upload vulnerability in the 3DPrint Lite WordPress plugin. The Python script automates the exploitation process by uploading a malicious file to a vulnerable endpoint.

This repository contains a Python-based scanner for detecting CVE-2024-0235, a vulnerability in the EventON WordPress plugin. The tool checks for vulnerable endpoints by sending crafted POST requests and analyzing responses for specific patterns indicative of exploitation.