Skip to content

Why CMS updates matter for security

Security1 min readFixes check outdated-cms-version

Most hacked sites run an outdated CMS or plugin with a published exploit. Keep the core and plugins current.

Step by step, with screenshots: A monthly site health routine, done in 30 minutes →

Check your own site

Runs this check and the other 186, free, in about 45 seconds.

What a passing site looks like

  • CMS version: passeswarning · −3 ptseffort M

CMS version

Why it matters. Old CMS versions have published security holes that bots scan for automatically, and the generator tag advertises the exact version to them.

How to fix it.
  1. Back up the site, then update the CMS from its admin dashboard; update plugins and themes at the same time.
  2. Remove the generator tag (WordPress: remove_action('wp_head', 'wp_generator') in functions.php).

Filed under Security. Copy is generated from the same catalogue that scores every report, so what you read here is what the report says.