Access violation vulnerability in Database Toolset 1.8.4

The plugin called Database Toolset for WordPress has a security issue. This applies to all versions up to and including 1.8.4. The problem is that backup files are stored in a place that anyone can access. This means that people who are not logged in can get important information from these backup files. There is a file that lists all the files, so someone would have to guess the right password to get any information.