Access violation vulnerability in SureDash 1.0.3

The SureDash plugin for WordPress has a security issue that allows users to gain higher levels of access than they should have. This problem affects all versions up to and including 1.0.3. The plugin does not have proper restrictions in place to prevent users from changing their roles, which means that attackers who are already logged in and have access at the Subscriber level or higher can gain even more privileges.