Input validation vulnerability in User Role Editor 4.64.3

The User Role Editor plugin for WordPress has a security issue that affects all versions up to 4.64.3. This is because the plugin does not properly check for a certain security code when updating user roles. This means that people who are not logged in can change the roles of any user, even making themselves an administrator, by tricking a site administrator into clicking on a link.