twentysixteen

WordPress Twenty Sixteen - Full Path Disclosure

WordPress Twenty Sixteen theme files are publicly accessible without ABSPATH protection, exposing sensitive server path information through PHP error messages when accessed directly.