Keeping the WordPress version number in your website’s source code can expose you to security risks. Cybercriminals often target specific WordPress versions that have known vulnerabilities.
Therefore, removing the WordPress version number from your site can significantly enhance its security.
At CanadaCreate, we have assisted numerous websites in strengthening their WordPress security. In this guide, we will demonstrate the proper method to remove the WordPress version number.
Reasons to Remove the WordPress Version Number
Displaying the WordPress version number in your website’s source code can make it an easy target for cyber attackers. This seemingly minor detail can reveal vulnerabilities linked to that specific version, allowing attackers to exploit known issues more easily.
By default, WordPress leaves identifiable markers on your site for tracking purposes. This is part of what makes WordPress the leading website builder globally.
However, this identification can become a security risk if you are not using the latest version of WordPress. It provides hackers with valuable information about which version you are operating.
Hackers frequently exploit known security vulnerabilities associated with specific software versions. By concealing your WordPress version number, you make it more challenging for attackers to identify which version of WordPress your site is using.
We advise using the latest version of WordPress across all your websites to eliminate concerns about this issue. However, if you are operating an older version of WordPress, it is essential to follow this tutorial.
Completely eliminating all indications of the WordPress version your website is using can be quite challenging. A determined attack may still uncover that information.
Nonetheless, this approach will deter automatic scanners and other less advanced methods from accurately guessing your WordPress version.
With this in mind, we will guide you through several methods to easily remove the version number from your WordPress website. Here’s a brief overview:
- Method 1: Remove WordPress Version Information Using Code (Recommended)
- Method 2: Remove WordPress Version Number with Sucuri
- Is it Possible to Completely Conceal the WordPress Version?
Are you ready? Let’s get started.
Method 1: Remove WordPress Version Information Using Code (Recommended)
To implement this method, you will need to add code to your WordPress site. If you’re unfamiliar with this process, please refer to our guide on how to copy and paste code snippets in WordPress.
Many websites suggest editing your theme’s header.php file and removing the following line of code:
<meta name="generator" content="WordPress <?php bloginfo('version'); ?>">
This approach is ineffective because a new theme update will automatically overwrite the old template with the new file.
Another frequently suggested but less effective method is to add this code to your theme’s functions.php:
remove_action('wp_head', 'wp_generator');
This will only eliminate the version information from the WordPress header, leaving the version number visible in your website’s RSS feeds.
The correct method to remove WordPress version information is by disabling the function that displays it.
To completely eliminate your WordPress version number from both your header file and RSS feeds, you need to insert the following code into a code snippets plugin.
function CanadaCreate_remove_version() {
return '';
}
add_filter('the_generator', 'CanadaCreate_remove_version');
For added convenience, you can utilize WPCode, the top code snippets plugin for WordPress.
WPCode features a comprehensive code library that includes all the most popular WordPress code snippets, such as one for removing the WordPress version number.
To begin, you’ll need to install and activate the free WPCode plugin. For detailed instructions, refer to our guide on how to install a WordPress plugin.
After activating the plugin, navigate to Code Snippets »Library in your WordPress dashboard.
Next, search for the ‘Remove WordPress Version Number’ snippet and click the ‘Use snippet’ button.
WPCode will automatically insert the code, provide a title for it, and select the appropriate insertion method.
It will also add tags to help you keep everything organized.
To enable this feature, simply toggle the switch from ‘Inactive’ to ‘Active.’
Next, click the ‘Update’ button to save your changes.
Now, the version number of WordPress will be concealed from the frontend of your site as well as from RSS feeds.
Method 2: Hiding the WordPress Version Number with Sucuri
Most leading WordPress security plugins provide an option in their settings to hide the WordPress version number.
We recommend using Sucuri because it automatically conceals WordPress version details and includes additional advanced security features.
Additionally, Sucuri offers a firewall that filters and monitors HTTP traffic, preventing malicious threats from reaching your web server. If it detects harmful code, it allows you to clean your website by removing these threats.
Simply install and activate the Sucuri plugin. For detailed instructions, refer to our step-by-step guide on installing a WordPress plugin.
Once activated, the plugin will automatically hide the WordPress version information. You can confirm this by visiting Sucuri Security » Settingsand navigating to the Hardening tab.
Is it Possible to Completely Conceal the WordPress Version?
WordPress may still display version information in various other locations across your website.
For example, the WordPress version number appears in the query string of the source code for CSS and JavaScript files.
Eliminating all traces of WordPress version information can be a lengthy and complex process, and it may not always be effective.
From a security standpoint, removing visible generator tags can help shield your site from common attacks.
However, if someone is determined to breach your website, concealing your WordPress version number won’t significantly deter them.
It’s essential to establish a comprehensive WordPress security framework to enhance your site’s protection. This creates multiple layers of security, making it more challenging for hackers to gain access.
Additionally, selecting a reliable WordPress hosting provider is crucial, as insecure hosting can expose your site to hacking risks.
We hope this article has guided you in effectively hiding WordPress version numbers from your site. You may also find our guide on resolving the password reset key error and our recommendations for the best WordPress activity log and tracking plugins helpful.
If you enjoyed this article, please subscribe to our YouTube Channel for WordPress video tutorials. You can also connect with us on Twitter and Facebook.
