WordPress Reflex Gallery 3.1.3 Shell Upload

WordPress Reflex Gallery plugin version 3.1.3 suffers from a remote shell upload vulnerability.