Why It Matters
Automated attacker bots crawl the web searching for specific outdated WordPress version signatures. Removing public version disclosures obscures your software version and deters opportunistic automated attacks.
Remove Generator Tags: Add remove_action('wp_head', 'wp_generator'); to your theme functions file.
Delete Default Root Files: Delete readme.html and license.txt from the web root directory following every update.
Minimize Information Leakage: Concealing core WordPress version numbers and default installation files gives automated scanning bots less to work with. Treat it as a small extra layer: an up-to-date site is safe whether or not its version is visible.
Automated Cleanup Scripts: Implement post-deployment cleanup scripts or security plugin settings that automatically purge standard root text documentation files after every core update, since WordPress restores readme.html and license.txt each time it updates.