WordPress and many plugins add generator meta tags to your site’s HTML source that reveal which CMS, plugins, and versions you use. These tags are one of the most direct ways bots identify WordPress sites and determine which exploit to use. WP Ghost removes the WordPress generator tag, plugin generator tags, and version numbers from CSS and JS files with a single toggle.
This single setting removes multiple identifiers from your site’s source code:
<meta name="generator" content="WordPress">)style.css?ver=6.5.2 becomes style.css)Combine with CMS simulation for complete identity removal. Removing generator tags eliminates WordPress identifiers, but your site doesn’t show any CMS by default. For a stronger disguise, also enable CMS Emulation at WP Ghost > Change Paths > Emulate CMS to replace the WordPress generator tag with Joomla or Drupal indicators.
No. Search engines don’t use generator meta tags for ranking. The generator tag is informational only and has no effect on search visibility, indexing, or rankings.
WP Ghost removes generator tags from WordPress core and the most common plugins. If another plugin adds a generator tag that WP Ghost doesn’t catch, use Text Mapping to find and replace the specific meta tag text in the HTML output.
Version parameters (?ver=) are used for cache busting: when a plugin updates, the new version number forces browsers to download the fresh file. Without version parameters, browsers may serve cached copies of old files after an update. If this happens, clearing your cache plugin or CDN cache forces browsers to fetch the updated files. In practice, cache plugins handle this automatically.
Generator meta tags are just one signal among many. Detection tools also scan paths (/wp-content/, /wp-includes/), class names (wp-block-), REST API endpoints (/wp-json/), and JavaScript patterns. For complete hiding, combine version removal with Ghost Mode path changes, Text Mapping, and CMS simulation. See Hide from Theme Detectors for the full guide.
No. WP Ghost removes generator tags and version parameters from the HTML output buffer using WordPress hooks. No core files are modified.
WordPress version and identity hiding:
Replace the default wp_ database prefix with a random one to protect against SQL injection…
Change the WordPress uploads directory path with WP Ghost (rewrite rules, no files moved) or…
Configure WP Ghost with WP Rocket cache. Enable file optimization, Change Paths in Cache Files.…
https://youtu.be/6ylhojSi-_E In this video, we’ll explore why website security matters and what can happen if…
The security of your WordPress site depends on multiple factors, such as the strength of…
Step-by-step guides to connect WP Ghost 2FA with Google Authenticator, Authy, Microsoft Authenticator, or LastPass.…