---
title: WordPress version revealed in metadata
canonical: https://wpsecurityninja.com/docs/security-tests/if-full-wordpress-version-info-is-revealed-in-meta-data/
---
This Security Ninja test checks whether public page metadata reveals the full WordPress version, usually through the `generator` meta tag in the HTML head.

## Why it matters

A public version number makes it easier for attackers to match known exploits to your site. Hiding it does not replace updates, but it removes an easy signal.

## How to check

View your site’s HTML source and look for a `generator` meta tag that includes a WordPress version number.

## How to fix

* On Pro, enable [Hide WP Version](https://wpsecurityninja.com/docs/security-fixes/hide-wp-version/) under **Security Ninja → Fixes**.
* Or remove the generator output with a small theme or plugin snippet, preferably in a child theme.

For PHP and server header disclosure, see [PHP version detail exposure](https://wpsecurityninja.com/docs/security-tests/php-version-detail-exposure/) and [Hide PHP version headers](https://wpsecurityninja.com/docs/security-fixes/hide-php-version/).

## Related

* [Security Tests overview](https://wpsecurityninja.com/docs/security-tests/security-tests/)
* [WordPress version info](https://wpsecurityninja.com/docs/security-tests/wp-version-info/)
* [Hide WP Version](https://wpsecurityninja.com/docs/security-fixes/hide-wp-version/)