Access violation vulnerability in WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) 7.6.6

The WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) plugin is vulnerable to a security issue. It affects all versions up to 7.6.6 and could allow someone with at least a subscriber-level access to take control of an administrator account. This security issue is related to how the plugin restricts user meta values and allows users to control a user role update during a social login through the custom registration form. The Custom Registration Add-on needs to be enabled for this vulnerability to be exploited, however, this is not certain.