Access violation vulnerability in Melapress Role Editor 1.1.1

The Melapress Role Editor plugin for WordPress has a security issue that could allow unauthorized access to higher levels of permissions. This affects all versions up to 1.1.1. The problem is caused by a mistake in checking permissions for the ‘save_secondary_roles_field’ function. This means that someone with at least Subscriber-level access can give themselves more privileges, such as Administrator access.