Privacy setting problem in url

Help,,
i was set privacy tab to only the owner can see the tab,, but other user can see the content of the tab with enter url code like

domain.com/?page_id=123&um_user=bejo&profiletab=biodata

just change bejo to trimbil, sofia, etc other user can view the content of their biodata.

https://ww.wp.xz.cn/plugins/profile-tabs-for-ultimate-member/