Should I hide the WordPress version on my website?
WordPress adds a "generator" meta tag to every page stating its version number, and attackers scan for old versions with known holes. The better answer is to keep WordPress updated so the version does not matter, but removing the tag also stops you being singled out. It is a two-line addition to the theme or a tick box in most security plugins.
Why it matters
Every WordPress release fixes security problems, and the details are published, so a site announcing an old version is announcing which attacks will work. Automated scanners read the generator tag on millions of sites and queue up the vulnerable ones. Removing the tag makes your site less convenient to target; keeping WordPress current makes it not a target at all. Do both.
Does it really hide anything?
Not completely. A determined attacker can guess the version from other files, so hiding the tag is not a security measure on its own. It is a small reduction in visibility that costs nothing, and its main value is as a reminder to check that updates are actually happening.
How to check
Our check looks for a generator tag in your home page's head that includes a version number. View the page source in a browser and search for "generator" to see it yourself.
How to fix it
Add "remove_action( 'wp_head', 'wp_generator' );" to your theme's functions.php file or a small custom plugin, or tick the option in a security plugin such as Wordfence or Solid Security. Then, more importantly, turn on automatic updates for WordPress core and plugins, or arrange for someone to apply updates monthly. An up-to-date site with the tag showing is far safer than an old one with it hidden.
Not sure how your own site does on this? Run the free check: it takes about twenty seconds and reports on this and thirty other things.