CVE-2013-0721/wp-php-widget. Closes #599