Eventin

Arbitrary File Download Vulnerability <= 4.0.26

Privilege Escalation Vulnerability <= 4.0.26

Local File Inclusion Vulnerability <= 4.0.25

Missing Authorization to Unauthenticated Payment Status Update vulnerability <= 4.0.24

Authenticated (Contributor+) Local File Inclusion vulnerability <= 4.0.24