Administrator escalation via unchecked profile role update

Privilege escalation in Ultimate Member before 2.1.12 allows remote authenticated users to obtain Administrator access through profile updates. The profile_update function treats is_admin() as authorization and passes an attacker-controlled um-role value to set_role without checking user capabilities. Access to wp-admin/profile.php is required; successful exploitation grants control of the affected WordPress site.