WordPress Security Plugin

Secure WordPress beefs up the security of your WordPress installation by removing error information on login pages, adds index.html to plugin directories, hides the WordPress version and much more.

1. Removes error-information on login-page
2. Adds index.php plugin-directory (virtual)
3. Removes the wp-version, except in admin-area
4. Removes Really Simple Discovery
5. Removes Windows Live Writer
6. Removes core update information for non-admins
7. Removes plugin-update information for non-admins
8. Removes theme-update information for non-admins (only WP 2.8 and higher)
9. Hides wp-version in backend-dashboard for non-admins
10. Removes version on URLs from scripts and stylesheets only on frontend
11. Blocks any bad queries that could be harmful to your WordPress website

參考:https://wordpress.org/extend/plugins/secure-wordpress/