The FastDup WordPress plugin prior to 2.2 does not prevent directory listing in sensitive directories containing export files.
ninjateam fastdup