diff --git a/inc/wpsetup.inc b/inc/wpsetup.inc
index 9a51d1388..6465a7681 100644
--- a/inc/wpsetup.inc
+++ b/inc/wpsetup.inc
@@ -812,7 +812,7 @@ location ~* (w00tw00t) {
 return 444;
 }
 
-location ~* /(\.|wp-config\.php|wp-config\.txt|readme\.html|license\.txt) { deny all; }
+location ~* /(\.|wp-config\.php|wp-config\.txt|changelog\.txt|readme\.txt|readme\.html|license\.txt) { deny all; }
 EEF
 
 # WP super cache
diff --git a/tools/nvwp.sh b/tools/nvwp.sh
index 4557a71b0..7991742eb 100755
--- a/tools/nvwp.sh
+++ b/tools/nvwp.sh
@@ -804,7 +804,7 @@ location ~* (w00tw00t) {
 return 444;
 }
 
-location ~* /(\.|wp-config\.php|wp-config\.txt|readme\.html|license\.txt) { deny all; }
+location ~* /(\.|wp-config\.php|wp-config\.txt|changelog\.txt|readme\.txt|readme\.html|license\.txt) { deny all; }
 EEF
 
 cat > "/usr/local/nginx/conf/wpsupercache_${vhostname}.conf" <<EFF