Access violation vulnerability in Event Manager, Events Calendar, Tickets, Registrations – Eventin 4.0.8

The Eventin plugin for WordPress, which includes features such as Event Manager, Events Calendar, Tickets, and Registrations, has a security vulnerability. This vulnerability, known as Local File Inclusion, affects all versions of the plugin up to 4.0.8. It allows attackers who are logged in and have Contributor-level access or higher to include and run any file on the server, including files with PHP code. This can be used to bypass security measures, access confidential information, or execute code, even if the file is considered safe, such as an image.