No security guy, but if the passwords were just hashed and not salted it's not ideal. Better than plaintext for sure though.

EDIT: Plex employee confirmed they do salt (and pepper, which I'm less familiar with), the last time they were hacked and had passwords exposed, fwiw.