The Flagallery Photo Portfolio plugin for WordPress, up to version 3.0.1, is vulnerable to having files deleted by an authenticated attacker. This means that an attacker can delete the contents of any file on the server, potentially including files with sensitive information.