webzod
account

Hide the server version number on WordPress

headers.disclosure.server_version · effort: minutes

Why it matters

A version number in the Server header tells attackers exactly which known vulnerabilities to try, without any probing. Hiding it fixes nothing by itself, so keep the software updated as well.

The fix

  1. The Server header comes from the web server, not WordPress. On managed hosting, ask the host to hide the version.
  2. On your own server, use the nginx or Apache tab.

Read the documentation (opens in a new tab)

Related

Scan your domain to see whether this applies to you.