It it’s in the main uploads folder, then that is terrible coding and should be changed.

Sorry, what do you mean?

It is located in wp-content/uploads folder. And it depends on your uploads structure as well. If you have days and months organization enabled then it is located in an appropriate folder.