Remove WordPress Version – Hide Generator Meta Tag
WordPress tells everyone which version you are running. It prints a meta tag in your page source: <meta name="generator" content="WordPress 6.9" /> and it appends the same version to every stylesheet and script URL: style.css?ver=6.9 Anyone can read it, including automated scanners looking for sites
WordPress tells everyone which version you are running. It prints a meta tag in your page source:
<meta name="generator" content="WordPress 6.9" />
and it appends the same version to every stylesheet and script URL:
style.css?ver=6.9
Anyone can read it, including automated scanners looking for sites running a version with a known vulnerability. This plugin removes all three.
What it removes
- The generator meta tag from your page source
- The version string from stylesheet URLs
- The version string from script URLs
Each one is a separate switch. All three are on from the moment you activate it.
Why hide the WordPress version
Scanners fingerprint sites by version, then try exploits for that version. Hiding it will not patch anything, so keep WordPress updated regardless. What it does is stop your site appearing in the results when someone searches for every site running a specific vulnerable release.
Removing the version from asset URLs has a second effect: proxies and CDNs cache those files more predictably when the URL stops changing on every core update.
Settings
One screen, three checkboxes, under Settings then Generator Remover. Nothing is written to your theme and no files are edited. Deactivate the plugin and WordPress puts everything back immediately.
- 01In your WordPress admin, go to Plugins then Add New, and search for “Remove WordPress Version”.
- 02Click Install Now, then Activate.
- 03That is all. All three options are on immediately. To change them, go to Settings then Generator Remover.
To install manually instead, upload the plugin folder to /wp-content/plugins/ and activate it from the Plugins screen.