The forum is two versions outdated. It is susceptible to attacks. Please fix this guys.
Anyone with Package Manager rights can install the update without even needing to upload anything. SMF will present a link in the Package Manager for the SMF 2.0.3 update. Click it, install the mod, done. It will show a link in the same location again for the latest update, (2.0.4). Repeat the process. Delete the other 2 older update packages that are no longer "uninstallable". You are done.
Edit: Someone also needs to change the email address in the forum's settings to one using the domain [that exists], rather than someone's personal one. Outgoing emails from the forum get flagged by email services as possible phishing attempts due to being sent by someone's personal email address.