Deactivate and delete. This plugin has been closed as of June 8, 2022 and is not available for download. This closure is temporary, pending a full review.
Ryo Onodera (Cryptography Laboratory Tokyo Denki University) discovered and reported this Cross Site Request Forgery (CSRF) vulnerability in WordPress Button Widget Smartsoft Plugin. This could allow a malicious actor to force higher privileged users to execute unwanted actions under their current authentication. For example a password change which will then allow the malicious actor to login into the admin account. This vulnerability has not been known to be fixed yet.