WP-Members Membership < 3.4.8 - Subscriber+ Unauthorized Plugin Settings Update

The plugin does not correctly implement capability checks on the do_field_reorder function, allowing authenticated users with only subscriber-level access to reorder form elements on login forms.