Access violation vulnerability in WP-Members Membership Plugin 3.4.7.3

The WP-Members Membership for WordPress, up to and including version 3.4.7.3, is vulnerable to a type of attack known as Cross-Site Request Forgery. In this type of attack, missing or incorrect nonce validation on the do_field_reorder function makes it possible for unauthenticated attackers to trick a site administrator into clicking a link or performing an action that reorders form elements.