Exploited Wordpress Plugins Directory

I’ve found an important entry at ShoeMoney blog about ‘ Watch Your Wordpress Plugins Directory‘.

Do you know that your Wordpress plugins directory is open to public browsing at search engines

So to lessen the exploits of vulnerabilities in remote shell and various db exploits through your Wordpress plugins directory, I recommend immediate solutions to your blog.

I’ve done so on mine, which is quick and simple

Solution #1)

Put a blank index.php file in the folder ‘wp-content/plugins’

Solution #2)

Disable it in .htaccess

Add this line ‘Options All -Indexes’