Input validation vulnerability in Codescar Radio Widget 0.4.2

The “Codescar Radio Widget” plugin for WordPress has a security issue called Cross-Site Request Forgery. This problem affects all versions of the plugin up to 0.4.2. The issue is caused by a mistake in the way the plugin checks for permission to make changes. This allows people who are not authorized to update settings and insert harmful code onto a website by tricking the person in charge of the website into doing something, like clicking on a link.