# Why CMS updates matter for security

> Most hacked sites run an outdated CMS or plugin with a published exploit. Keep the core and plugins current.

Security · HTML version: https://getreport.app/learn/cms-updates

## CMS version

Passing looks like: CMS version passes.

**Why it matters.** Old CMS versions have published security holes that bots scan for automatically, and the generator tag advertises the exact version to them.

**How to fix it.**

1. Back up the site, then update the CMS from its admin dashboard; update plugins and themes at the same time.
2. Remove the generator tag (WordPress: remove_action('wp_head', 'wp_generator') in functions.php).

Check your own page: https://getreport.app/