[libdjml]

I highly doubt this is a off the shelf Wordpress install. In fact, a standard WP is not > 1gb of data, which the post describes.

There will be a massive amount of customization, so revealing source code probably is a security risk. I’m willing to bet a competent code auditor could find secondary vulns in that code.

[Domenic_S]

The resources folder containing images/etc was probably checked into git. Happens more than you might think...