Widget Options <= 4.0.8 is vulnerable to Broken Access Control to Notice Dimissal vulnerability

The Widget Options plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the widgetopts_ajax_hide_rating() function in versions up to, and including, 4.0.8. This makes it possible for authenticated attackers, with subscriber-level access and above, to dismiss a ratings notice.