The Envira Photo Gallery plugin for WordPress is not secure in versions up to and including 1.8.7.3. This is because it does not properly check for a special code when performing certain actions. This means that someone who is not authorized could trick a website administrator into taking an action, such as clicking on a link, and dismiss important messages.