WordPress User Access Manager plugin version 1.2.6.7 suffer from a cross site scripting vulnerability.