InstagramWidget – Vulnerable?

Hi,

We are dealing with a vulnerability….

if(!empty($wp_uploads['error'])) echo $wp_uploads['error'];

    if(!is_dir($cache_folder)){
      if(mkdir($cache_folder, 0777) == false){
        return $this->getDataFromApi($token, $number);
      }
    }

Please, check if this code is the problem. I think it enabled an open directory.

Thanks,

http://wordpress.org/extend/plugins/instagramwidget/