// === SECURITY: Hide users sitemap (prevent username discovery) === // Added 2026-05-02 as part of P0 security hardening add_filter('wp_sitemaps_add_provider', function($provider, $name) { if ($name === 'users') { return false; } return $provider; }, 10, 2); // === SECURITY BONUS: Hide WP version from generator === remove_action('wp_head', 'wp_generator'); // === SECURITY BONUS: Disable XML-RPC pingback method (reduce attack surface) === add_filter('xmlrpc_methods', function($methods) { unset($methods['pingback.ping']); unset($methods['pingback.extensions.getPingbacks']); return $methods; });
Skip to content