The PDF File Browser plugin for WordPress is not secure in versions up to and including 1.3. This means that people with malicious intentions, who are authenticated, can use it to execute code on the server. This could have serious consequences for the website.