Not sure where to post it, but is there a reason that there is no index.php file in /wp-contents/upgrade directory?
we were hacked few times already until figured out to put index file there. any idea what is the reason to set it up like this. everyone; just try http://www.yourdomain.XXX/wp-content/upgrade/
it lists a content of this folder