Unauthenticated Administrator escalation via unchecked role assignment

Privilege escalation in DynamiApps Frontend Admin 3.28.36 and earlier allows remote attackers to gain administrator access via crafted forms. The admin_form post type grants editors page capabilities, while pre_update_value() accepts any role placed in role_options without checking assignment authority. A public new_user form must permit editor registration; the attacker can then create an edit_user form and assign the administrator role.