Gangleri> thanks for the info.
the folder has been deleted since.
Keithdsouza > i think that you should include in your plugins a security note. maybe give an info on how to configure .htaccess to prevent accessing the wpau-backup directory.
I think that “wpau-backup” should be by default not accessible via the web. this should prevent any possible exploits using php files in this directory, in addition to clean the installation.