Koinonia Link 1.1.2 - 1.1.4 - Subscriber+ Privilege Escalation to Administrator

Description

The plugin does not check that a user is allowed to change roles before saving a role selection submitted with a profile update, allowing any authenticated user, such as a subscriber, to grant themselves the Administrator role.