For those that are security conscious… the plugin reveals wordpress version information. The use of get_bloginfo(‘version’) on line 1624 in sitemap-core.php will reveal the wordpress version. Nothing super mission critical, but bots will pick this up and wp-scan your site.
This line should be made optional if possible…
$this->AddElement(new GoogleSitemapGeneratorDebugEntry(“generator=\”wordpress/” . get_bloginfo(‘version’) . “\””));
Thanks for the great plugin too btw.
- The topic ‘WordPress Version # Exposed’ is closed to new replies.