When you browse to a talk about the use of plug-wp article mentions all the files in the / wp-content / uploads / directory if the permissions are not set'll see. Tested your own blog, indeed. Then before write access the project file can also be accessed.
Suffice cPanel administration panel, "Advanced" -> "Index Manager", select the file directory public_html, choose "no index", save on OK.
Now access the directory will display 403 pages.
Original: Big Box website directory prohibit the display settings