ReviewX < 1.6.14 - Subscriber+ Privilege Escalation

The plugin does not validate parameters passed to the rx_set_screen_options function, allowing any authenticated users, such as subscriber to set themselves as administrators