No. You do not need their password.
All you need to do is go directly to Paypal (don't go through the 'upgrade account' bit) and click 'send money' - then send the payment to
[email protected] with a note as to which VHR account (ranch number and player name) you are upgrading and the winner's agreed payment (just so there's a record of it)