The fact that WordPress is open source software has many good points. One is that anyone can create a plugin and make it available to the community. However, this can also become a bad point if the plugin contains security holes.
A hacker often checks out the wp-content/plugins directory of the blog they're attempting to hack. Since this directory doesn't contain any index.html file, the server creates a listing of files letting the hacker know which plugins you're using. If one of your plugins contains a security hole, the hacker may exploit it to hijack your blog.
Even if there are not a lot of plugins containing security problems, it's always better to be proactive to prevent any kind of damage. In this recipe, you'll learn how to easily protect your wp-content/plugins directory.
Visit the link http://www.yourblog.com/wp-content/plugins. You'll see a listing of the directory's content. Anyone can view it and have a look at the plugins...