The Levo Slideshow plugin for WordPress is not secure in versions up to and including 2.3. This means that someone with access to the website may be able to upload any type of file to the server, which could then allow them to run code on the server. This is a serious security risk and should be addressed as soon as possible.