WordPress Ultimate Instagram Feed plugin version 1.2 suffers from a cross site scripting vulnerability.