According to VPN Mentor, a critical vulnerability in HotSpot Shield, PureVPN, and ZenMate is exposing IP and DNS addresses of users.