The install script of your Roundcube installation is still stored in its default location!
Please remove the whole installer folder from the Roundcube directory because .
these files may expose sensitive configuration data like server passwords and encryption keys
to the public. Make sure you cannot access the installer script from your browser.