WP Hide & Security Enhancer PRO is a powerful WordPress security plugin that hides core files, paths, and URLs to block attacks before they start. It rewrites and masks sensitive WordPress components, disables revealing headers, and hardens your site without modifying core code. Lightweight, fast, and compatible with most hosting and caching setups, it’s a smart way to protect, declutter, and brand your WordPress installation.
- Hide wp-admin, wp-login, and custom login URL
- Rename and mask wp-content, wp-includes, and uploads paths
- Remove WordPress version and generator meta tags
- Disable REST API, XML-RPC, and oEmbed endpoints selectively
- Block user enumeration and author archives
- Hide plugins and themes from source code and scanners
- Rewrite and mask plugin and theme asset URLs (CSS/JS)
- Clean HTML headers: remove RSD, WLW, shortlink, RSS feeds
- Security headers support: X-Frame-Options, HSTS, CSP basics
- Disable emoji scripts, embeds, and query strings on assets
- Firewall-like rules to block common scans and bot probes
- Multisite-compatible with per-site or network rules
- Works with caching/CDN and custom permalinks
- No core file changes; fully reversible settings
- Export/import configuration for quick deployment