Files showing to the outside world

I have a website e.g https://www.test.com and my wordpress is installed in https://www.test.com/test/ if I go to https://www.test.com it loads the site normally and if I go to https://www.test.com/test it give a list of the intalled files and is accessable by everyone, how do I make it provate or forbidden?