Head Tags

Control which meta tags and links appear in your site's HTML head section.

Overview

WordPress adds several meta tags and links to the <head> section of every page. Most of these are unnecessary for the average site and can expose information to potential attackers or simply add bloat to your HTML output.

This section lets you selectively remove these tags. All options except Remove Feed Links are enabled by default.

Remove WordPress Generator Tag

Default: On

Removes the <meta name="generator" content="WordPress X.X.X"> tag from your site’s head. This tag publicly exposes your WordPress version, which attackers can use to target known vulnerabilities in specific versions.

Default: On

Removes the Windows Live Writer manifest link. Windows Live Writer is a discontinued desktop blog editor. Unless you are actively using it (unlikely), this link serves no purpose.

Default: On

Removes the Really Simple Discovery (RSD) link. RSD is used by some blog clients and pingback services to discover site endpoints. It is rarely needed on modern WordPress sites.

Default: On

Removes the shortlink tag (e.g., ?p=123) from the head and HTTP headers. WordPress generates a shortlink for every post, but most sites use pretty permalinks and have no use for these.

Default: On

Removes the <link rel="https://api.w.org/"> tag that advertises your REST API endpoint. Removing this does not disable the REST API — it only hides the discovery link from the HTML source.

Default: Off

Removes RSS and Atom feed links from the head. Only enable this if your site does not use RSS feeds and you don’t want feed URLs discoverable. If you have subscribers using feed readers, keep this off.