Across 17,228 twentysixteen WordPress sites indexed by TLDWP, compared to the all-WordPress average.
Grade A 1%Grade B 1%Grade C 1%Grade D 4%Grade F 93%
Fail the header check (F)93%vs 84.2% avg
Leak usernames62%vs 45.3% avg
Expose a sensitive file2.4%vs 1.8% avg
Use HTTPS97%vs 97.4% avg
What stands out
TLDWP currently associates 17,228 indexed WordPress sites with twentysixteen, equivalent to 0.2% of the current WordPress dataset.
The largest measured difference is username enumeration: 61.9% versus 45.3% overall (+16.6 percentage points).
Header-grade F is 92.6% vs 84.2% overall (+8.4 pp); Sensitive-file exposure is 2.4% vs 1.8% overall (+0.6 pp); HTTPS adoption is 96.9% vs 97.4% overall (-0.5 pp).
These are observational associations among sites where TLDWP detected twentysixteen, not evidence that the technology, provider, or domain attribute caused a security outcome. See the overall WordPress security baseline.
Infrastructure patterns
Infrastructure detected alongside twentysixteen. Percentages are within sites where that specific signal was detectable; the baseline compares the same signal across detected WordPress sites overall.
Co-occurrence describes technologies observed on the same sites. Detection coverage varies by signal, and an association does not imply that one technology caused or selected another.
Similar security profiles
Closest among widely detected themes by average difference across header-grade F, username enumeration, exposed-file, and HTTPS rates.
Twenty Sixteen is a modernized take on an ever-popular WordPress layout — the horizontal masthead with an optional right sidebar that works perfectly for blogs and websites. It has custom color options with beautiful default color schemes, a harmonious fluid grid using a mobile-first approach, and impeccable polish in every detail. Twenty Sixteen will make your WordPress look beautiful everywhere.