This Security Ninja test checks whether public page metadata reveals the full WordPress version, usually through the generator meta tag in the HTML head.
Why it matters
A public version number makes it easier for attackers to match known exploits to your site. Hiding it does not replace updates, but it removes an easy signal.
How to check
View your site’s HTML source and look for a generator meta tag that includes a WordPress version number.
How to fix
- On Pro, enable Hide WP Version under Security Ninja → Fixes.
- Or remove the generator output with a small theme or plugin snippet, preferably in a child theme.
For PHP and server header disclosure, see PHP version detail exposure and Hide PHP version headers.
