This Security Ninja test checks whether response headers reveal detailed PHP or server version information. Attackers can use that to match known exploits to your stack.
Common signals include the X-Powered-By header and a verbose Server header. You can inspect headers with browser tools or an online header checker.
On many servers you can reduce exposure by setting expose_php = Off in PHP configuration, and by tightening server header settings in Apache, Nginx, or your host panel. See also Hide PHP version headers.
Hiding version headers helps, but it is not enough on its own. Keep PHP, WordPress, themes, and plugins updated.
