WordPress Version # Exposed

  • Jim Burnett

    (@blackfault)


    12 years, 1 month ago

    For those that are security conscious… the plugin reveals wordpress version information. The use of get_bloginfo(‘version’) on line 1624 in sitemap-core.php will reveal the wordpress version. Nothing super mission critical, but bots will pick this up and wp-scan your site.

    This line should be made optional if possible…

    $this->AddElement(new GoogleSitemapGeneratorDebugEntry(“generator=\”wordpress/” . get_bloginfo(‘version’) . “\””));

    Thanks for the great plugin too btw.

    https://wordpress.org/plugins/google-sitemap-generator/

The topic ‘WordPress Version # Exposed’ is closed to new replies.