Choose which WordPress paths to change

WP Hide PRO is the paid edition of WP Hide & Security Enhancer. It uses URL rewrite techniques and WordPress filters to change how technical paths appear to visitors and automated scanners. Administrators can hide or replace references to core files, the login page, themes, plugins, uploads, and selected assets. Settings can also hide or block default paths that may identify WordPress.

These changes are applied virtually. The plugin does not write to, delete, or modify existing server files or directories. Public content URLs can remain in place while administrative and static asset paths change. Posts, pages, categories, sitemaps, and canonical tags are described as remaining unchanged.

Path and header controls

• Replace the default wp-admin and wp-login.php login paths with an alternative URL.
• Mask or replace theme, plugin, upload, and other asset paths, and hide WordPress core files and plugin paths from front-end detection.
• Generate dedicated Nginx configuration snippets for URL masking, asset renaming, and security header rules.
• Configure HTTP response headers: COEP, COOP, CORP, Referrer-Policy, X-Content-Type-Options, X-Download-Options, X-Frame-Options, X-Permitted-Cross-Domain-Policies, and X-XSS-Protection.

For complex and custom setups

The PRO edition works with complex themes and extensions that may require it. It can also be used with custom WordPress directory structures, plugin or theme locations, and upload folders. The supplied product information describes compatibility with Apache, LiteSpeed, IIS, and Nginx when Nginx is used as a reverse proxy.

For Nginx environments that need native server configuration, generate the snippets in the plugin interface and add them to the server block. The plugin includes options for the paths and headers; the underlying files and directories remain in place.

Setup and maintenance

Install WP Hide & Security Enhancer in WordPress, activate the paid PRO edition, and open its settings. Review the hiding and replacement settings, pick the paths and headers for the website, and apply the configuration. For Nginx, generate the needed snippets in the dedicated interface and add them to the server block. Test the login URL, front-end asset paths, headers, and site cache before completing setup.

According to the supplied product information, WordPress, plugin, and theme updates can continue through the dashboard or WP-CLI without disabling WP Hide. When detector services still report a theme or plugin, caching may delay the result. Clear the relevant server cache and test again, including an inner URL as well as the homepage.