Always Remove the WordPress Version Code

July 25, 2008 · Print This Article

Don’t want the world to know what version of WordPress you’re running?

One thing I don’t think people realize is that a hacker can easily find vulnerable WordPress blogs because most standard WordPress themes will actually tell them what version you are using.

If you open up the header.php file of your theme, you should notice some code that looks something like this:

<meta name="generator" content="WordPress <?php bloginfo('version'); ?>" /><!-- leave this for stats -->

In order to protect your WordPress installation, I recommend people completely remove this code from their header.php file for all of their WordPress blogs.


Related articles:

Your choice for site templates and wordpress themes

Comments

Got something to say?

You must be logged in to post a comment.