Be sure to upgrade to phpFan 3.3.5 and every Addon you have as soon as possible. There is the potential for remote file inclusion through init.php. This has been patched in 3.3.5 and all the other files have been updated accordingly. A few other changes have been made for more security, as well as fixing buggy conversion of different languages.
The core phpFan can be downloaded and phpFan Addons can be downloaded.
Tags: phpfan, phpfan - addons, phpfan upgrade, security release