Recent NexGen Gallery security vulnerability

Can anyone elaborate on the recent NexGen Gallery update (V1.8.4)?

My site was compromised twice this week and each time the logs showed NexGen was the entrypoint. I have since removed the plugin but I would like to look back at this as a “learning experience”. I’d love to know how this happened.

thx.