Product
CVE-2024-0235 is an unauthenticated information disclosure vulnerability in the Myeventon Eventon plugin that allows remote attackers to enumerate user email addresses via the 'eventon_get_virtual_users' AJAX action.