WordPress version visible

Why it matters

A visible version number is an invitation: a bot that knows a hole in that version tries it straight away. Hiding the number does not make an old version safe, but it keeps your site out of the easiest searches.

How Snaglist checks it

This is part of the security check, a separate check next to the crawl, in Studio and Bureau, and only on a site you have verified. Snaglist only looks at what any visitor can see from outside. It never logs in, guesses no passwords and sends no attacks. It reads the generator line and the version numbers behind the scripts and stylesheets on the homepage.

Common causes

• WordPress shows the version by default
• The theme does not remove the generator line
• Version numbers behind scripts and stylesheets

How to fix it

1. Remove the generator line with a line in the theme or a security plugin.
2. Remove the version numbers behind scripts and stylesheets.
3. Keep WordPress up to date. That remains the real answer.
4. Run the security check again to confirm.

How it shows in the report

In the report for your client this appears under the heading "Your site tells which WordPress version it runs". When everything is in order, the report says: "The WordPress version is not on display".