Front End Users <= 3.2.35 - Unauthenticated Membership Level and Account Status Self-Assignment

Description

The plugin does not restrict which account attributes a visitor may set when registering through its front-end forms, allowing unauthenticated users to assign themselves an arbitrary membership level and to mark their own account as approved, confirmed and paid, bypassing the plugin's content restrictions and its registration gating.