The ReFlex Gallery WordPress Photo Gallery for WordPress is a vulnerable plugin in certain versions. Unauthenticated attackers can upload any kind of file to the server of the affected site, which may lead to remote code execution. The versions vulnerable to this are 3.1.3 and below.