The plugin does not have any access control to prevent low privilege users to set themselves as admin via their profile page
As any authenticated user, go to your Profile page and Tick the Administrator Role checkbox. In v1.2, the checkboxes are disabled in the UI but can be tampered with by either using the web browser developer tool or a proxy such as Burp Suite
CPE | Name | Operator | Version |
---|---|---|---|
hm-multiple-roles | lt | 1.3 |