WS_FTP is a popular FTP client. This application creates a log file named WS_FTP.LOG. This file contains sensitive data such as file source/destination and file name, date/time of upload etc.
Remove this file from your website or change its permissions to remove access.
WordPress Plugin WP-Mon Arbitrary File Disclosure (0.5.1)
WordPress Plugin History Collection Arbitrary File Download (1.1.1)
WordPress Plugin Zip Attachments Arbitrary File Download (1.4)
WordPress Plugin Paid Memberships Pro-Restrict Member Access to Content, Courses, Communities-Free or Paid Subscriptions 'memberslist-csv.php' Information Disclosure (1.4.9)