Hide WP Version

Remove WordPress version number from HTML source, RSS feeds, and admin footer to hide information attackers use for targeting specific vulnerabilities.

Use Cases

  • Remove WordPress version from page source to prevent identification
  • Conceal whether site is running outdated WordPress version
  • Remove version meta tag that helps automated scanners identify targets

How It Works

This is a toggle module — simply enable it and it works automatically. No configuration needed.

When enabled, the module:

  1. Removes the <meta name="generator"> tag from HTML head
  2. Removes version from RSS feed generator tags
  3. Removes version query strings from CSS/JS files (e.g., ?ver=6.4.2)
  4. Removes version from admin footer

What Gets Hidden

LocationBeforeAfter
HTML Head<meta name="generator" content="WordPress 6.4.2">(removed)
CSS/JS URLsstyle.css?ver=6.4.2style.css
RSS Feed<generator>WordPress 6.4.2</generator>(empty)
Admin FooterVersion 6.4.2(removed)

Verification

After enabling, verify it’s working:

  1. Visit your site’s frontend
  2. View page source (Ctrl+U / Cmd+U)
  3. Search for “generator” — should not be found
  4. Check CSS/JS URLs — should not have ?ver= with WP version

This is “security through obscurity” — one layer of defense. Always keep WordPress updated regardless.

FAQ

Does this break anything?No. Removing version numbers doesn’t affect functionality. Some caching plugins may still add their own version strings.
Will this stop all attacks?No. This is one layer of security hardening. Determined attackers can still identify WordPress. Always keep your site updated and use multiple security measures.
Does it hide plugin/theme versions too?It removes WP core version from query strings. Plugin and theme versions in their own ?ver= parameters are preserved for cache busting.
PRO

Get access to all 147 modules with a single license

Upgrade to Pro