About this plugin
WordPress tells everyone which version you are running. It prints a meta tag in
your page source:
9" />
and it appends the same version to every stylesheet and script URL:
9
Anyone can read it, including automated scanners looking for sites running a
version with a known vulnerability. This plugin removes all three.
What it removes
- The generator meta tag from your page source
- The version string from stylesheet URLs
- The version string from script URLs
Each one is a separate switch. All three are on from the moment you activate it.
Why hide the WordPress version
Scanners fingerprint sites by version, then try exploits for that version. Hiding
it will not patch anything, so keep WordPress updated regardless. What it does is
stop your site appearing in the results when someone searches for every site
running a specific vulnerable release.
Removing the version from asset URLs has a second effect: proxies and CDNs cache
those files more predictably when the URL stops changing on every core update.
Settings
One screen, three checkboxes, under Settings then Generator Remover. Nothing is
written to your theme and no files are edited. Deactivate the plugin and
WordPress puts everything back immediately.