Input validation vulnerability in WPCOM Member 1.7.14

The WPCOM Member plugin for WordPress has a security vulnerability that affects all versions up to 1.7.14. This vulnerability allows attackers, who have at least Contributor-level access, to add and run .php files on the server. This could lead to bypassing security measures, accessing confidential information, or executing malicious code if .php files can be uploaded and included.