In reply to Gregory.

I agree with you that using upload features of a well known tool like Worpdress for sensitive informations could lead to potential hacking especially if the software is not up to date.
However, It's probably safer and with less potential bugs using a product which exists since years than a custom made script in PHP made by a developer in 1 hour and that will break all possible security rules.