Across 16,899 twentySixteen WordPress sites indexed by TLDWP, compared to the all-WordPress average.
Grade A 1%Grade B 1%Grade C 1%Grade D 5%Grade F 92%
Fail the header check (F)92%vs 82.6% avg
Leak usernames56%vs 38.6% avg
Expose a sensitive file2.3%vs 1.8% avg
Use HTTPS96%vs 96.3% avg
What stands out
TLDWP currently associates 16,899 indexed WordPress sites with twentySixteen, equivalent to 0.2% of the current WordPress dataset.
The largest measured difference is username enumeration: 55.8% versus 38.6% overall (+17.2 percentage points).
Header-grade F is 92.3% vs 82.6% overall (+9.7 pp); Sensitive-file exposure is 2.3% vs 1.8% overall (+0.5 pp); HTTPS adoption is 95.8% vs 96.3% overall (-0.5 pp).
These are observational associations among sites where TLDWP detected twentySixteen, not evidence that the technology, provider, or domain attribute caused a security outcome. See the overall WordPress security baseline.
Similar security profiles
Closest among widely detected themes by average difference across header-grade F, username enumeration, exposed-file, and HTTPS rates.
Twenty Sixteen is a modernized take on an ever-popular WordPress layout β the horizontal masthead with an optional right sidebar that works perfectly for blogs and websites. It has custom color options with beautiful default color schemes, a harmonious fluid grid using a mobile-first approach, and impeccable polish in every detail. Twenty Sixteen will make your WordPress look beautiful everywhere.