The Album and Image Gallery with Lightbox – Flagallery Photo Portfolio plugin for WordPress is not secure in versions up to 1.72. It is vulnerable to a type of attack called Reflected Cross-Site Scripting. This attack allows someone to insert malicious code into a web page without being authenticated. If a user were to click on a link, the malicious code could execute.