We were reported about role validation bug during registration process. Our team reacted immediately to this report and fixed the vulnerability. Please update the plugin and delete all unknown users with administrator role if they have appeared. We really appreciate collaboration with our community members!
Version 4.9.28 ( 26 Sept 2018 )
– Security fix : Register user with administrator role.