There is a Level 10 security issue currently being exploited with proof of concept code. Details are here: Admins and defenders gird themselves against maximum-severity server vuln - Ars Technica
Is Plex Media Server vulnerable and if so is there a fix available?