Older software versions or backup copies of applications that exist in the publically-accessible web document root may be at risk of exploitation.
Store backups and other sensitive information in another location or on an entirely different host, if possible.