vBulletin 3.8.4 PL 3 security patch released by third party company
 

http://www.vbulletin.com/forum/showthread.php?t=346531

I still don't understand why they decided not to release official security patch (per scheduler)?

What will be after EOL? Can other companies can take over 3.x support to provide patches for a reasonable fee?

vbulletin 3.6.x users are already looking for such solution.