Subscriber-to-Administrator escalation via unchecked expiry-role update

Privilege escalation in Ben Huson Expire Users 1.2.2 and earlier allows remote authenticated users to obtain Administrator access. The save_extra_user_profile_fields handler passes a self-profile POST to set_expire_data, which accepts expire_user_role and stores it in _expire_user_settings without the plugin's administrator-only expiry capability check. Subscriber access is sufficient to select Administrator as the role applied when the account expires, granting full site administration.