The Image Photo Gallery Final Tiles Grid plugin for WordPress is not secure and can be hacked through its ‘FinalTilesGallery’ feature. This can happen in all versions up to 3.6.0 because the plugin does not properly protect against harmful code that users may input. This means that someone with access to the plugin can add dangerous scripts to pages that will run when someone else views those pages.