kasparsd vulnerabilities and threats

The Widget Context plugin for WordPress versions up to 1.3.3 is vulnerable to a Cross-Site Request Forgery (CSRF) attack due to missing or incorrect nonce validation in the save_widget_context_settings function. This vulnerability allows an unauthenticated attacker to modify widget visibility context settings by tricking a site administrator into submitting a forged POST request to the widgets administration page. The vulnerability has a medium severity rating with a CVSS score of 4.3. No official patch or remediation guidance is currently available from the vendor, and there are no known exploits in the wild at this time.