WordPress WPLegalPages plugin <= 3.4.3 - Missing Authorization to Authenticated (Contributor+) Arbitrary Plugin Installation vulnerability

Missing Authorization to Authenticated Contributor+ Arbitrary Plugin Installation vulnerability discovered by wesley wcraft in WordPress Plugin WPLegalPages versions = 3.4.3...