Eventin

PHP Object Injection Vulnerability <= 4.0.31

Authenticated (Contributor+) Privilege Escalation via User Email Change/Account Takeover vulnerability <= 4.0.34

Cross Site Scripting (XSS) Vulnerability <= 4.0.28

Arbitrary File Download Vulnerability <= 4.0.26

Privilege Escalation Vulnerability <= 4.0.26