WordPress readme.html exposes your exact version

What it is

readme.html is publicly accessible and reveals the exact WordPress version installed. Combined with a known vulnerability for that exact version, this makes the site an easy, specific target.

How to fix it

Remove or block access to readme.html, and keep WordPress core updated — the WordPress Plugin's Security tab can block it for you.

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.

Run a free scan Get the plugin (free)