Access violation vulnerability in WP-Members Membership Plugin 3.4.9.3

The WP-Members Membership Plugin for WordPress has a security issue that affects all versions up to and including 3.4.9.3. The plugin allows users to upload files to a folder called “wp-content”, which can be accessed by anyone. This means that people who are not logged in can see files uploaded by other users, which may have private information.