snag.page

Every check ยท Page contents

Generator tag

content/generator

What it checks

A generator meta tag that names a version.

Why it matters

It tells an attacker which version of the CMS to look up flaws for.

How to fix it

  1. Remove the generator meta tag from the page template; on WordPress, add remove_action('wp_head', 'wp_generator'); to functions.php.
  2. Keep the software up to date, whatever the page says.

Check a site for this and everything else: snag.page. More on page contents: Mixed content Forms over HTTPS Libraries with known flaws Integrity on CDN files Script hosts