UK budget leak blamed on misconfigured WordPress plugin
go.theregister.com
: Predictable URLs break security through obscurity and lack of server access controls don't help