The install script of your Roundcube installation is still stored in its default location!
Please remove the whole installer folder from the Roundcube directory because
these files may expose sensitive configuration data like server passwords and encryption keys
to the public. Make sure you cannot access the installer script from your browser.