WP Custom Widget area <= 1.2.5 - Missing Authorization

Description

The WP Custom Widget area plugin for WordPress is vulnerable to unauthorized access of functionality due to a missing capability check on several functions corresponding to AJAX actions in versions up to, and including, 1.2.5. This makes it possible for authenticated attackers, with subscriber-level access and above, to make use of functionality intended for users with higher privileges. This can lead to the deletion and modification of widgets and menus created using the plugin.