Real Estate Manager <= 6.7.1 - Subscriber+ Privilege Escalation

Description The plugin does not validate user metadata to be updated via its rem_save_profile_front function, allowing any authenticated users, such as subscriber to change their role (to administrator for example) by giving the related wp_capabilities when they update their profile