Please add defined(‘ABSPATH’) || exit; at the beginning of woodmart core files. I can’t protect the folder whith Options -indexes since it has a default index.php file while other files are not protected from direct access.
If I edit the files they will be overwritten by the next update. There is no code that could be run in browser but that could change in the future if you add some functionality.
.
