its very alarming but yesterday i was visiting some blogs (blogs w/less than 100,000 alexa rank) and 7/10 of them have their wordpress subfolders browsable w/c means anyone can view the url 'blogname.com/wp-content/plugins' or 'blogname.com/wp-content/themes' This is bad because hackers can pretty much exploit it and then hack your blog, or people could easily get your themes and stuffs inside your folders.

The simplest solution is to put "options - indexes" in your .htaccess file...

That's a good point. Just to clarify, your .htaccess should like something like this:

options -indexes
# BEGIN WordPress
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteBase /
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /index.php [L]
</IfModule>

# END WordPress

Provided your .htaccess hasn't been modified by you or a plugin.

URLs like domain.com/wp-content/plugins/ should not give you a 404.

Thanks for sharing.I will try it.

Terrible thing, thanks!

hey guys thanks for the great response..

Thanks for the tip. The template I use for my WP blog is secure. But when I set up a new one with a free template (I paid for my theme) then I'll need to look out for this.