Title: Version Cloak
Author: nextdoorentertainment
Published: 2026年6月25日
Last modified: 2026年6月26日
---
プラグインを検索
# Version Cloak
作者: [nextdoorentertainment](https://profiles.wordpress.org/nextdoorentertainment/)
[ダウンロード](https://downloads.wordpress.org/plugin/version-cloak.1.0.4.zip)
* [詳細](https://ja.wordpress.org/plugins/version-cloak/#description)
* [レビュー](https://ja.wordpress.org/plugins/version-cloak/#reviews)
* [インストール](https://ja.wordpress.org/plugins/version-cloak/#installation)
* [開発](https://ja.wordpress.org/plugins/version-cloak/#developers)
[サポート](https://wordpress.org/support/plugin/version-cloak/)
## 説明
Version Cloak is a hardening plugin that reduces the information opportunistic,
automated scanners can read about your site. Version-matching bots fingerprint a
site, look up known issues for the detected versions, and probe the easy targets
first. This plugin shrinks that fingerprint.
**Important:** this plugin obscures version and endpoint information. It does **
not** patch vulnerable code. Keep your plugins, themes, and WordPress core updated—
obscurity is a complement to patching, not a replacement for it.
#### Two version modes (per dropdown)
For **WordPress core** and for **plugins & themes**, choose one of:
* **Off** — leave the real version visible.
* **Obfuscate** — remove or block the version so it can’t be read.
* **Decoy** — report a plausible current version (auto-detected latest, or a value
you set) so the site reads as up to date.
#### What it covers
* The WordPress `` tag, feed generators and the WLW manifest.
* Version query strings (`?ver=`) on enqueued CSS/JS, and the same inside inline
CSS.
* Version classes on the `` tag (e.g. page-builder version classes).
* Plugin-emitted `` tags.
* Plugin version strings in HTML comments (e.g. SEO plugins).
* Static version files served directly by the web server — `readme.txt`, `changelog.
txt`, `release_log.html` — and version banner comments in CSS/JS assets. In Obfuscate
these are blocked (Apache/LiteSpeed `.htaccess`, or an Nginx rule you add); in
Decoy their version strings are rewritten and automatically reverted when you
switch back.
* WordPress core `readme.html` / `license.txt`, and the `install.php` / `upgrade.
php` setup pages (blocked for non-logged-in visitors so admins can still run
updates).
#### Other hardening
* **XML-RPC** — disable and return 404, or keep it but remove pingback and `system.
multicall`.
* **WP-Cron** — disable the HTTP pseudo-cron and block external hits to `wp-cron.
php` (with an optional secret token for your system cron).
* **REST user enumeration** — block the anonymous `/wp-json/wp/v2/users` endpoint.
* **Author enumeration** — block the `?author=N` redirect that leaks usernames.
#### Reversible
Setting a mode to **Off**, or deactivating the plugin, restores the real version
strings and removes the `.htaccess` rules — the site returns to its normal state.
## インストール
1. Upload the `version-cloak` folder to `/wp-content/plugins/`, or install the ZIP
via **Plugins Add New Upload Plugin**.
2. Activate the plugin through the **Plugins** menu.
3. Configure under **Settings Version Cloak**.
4. If you use a page cache (LiteSpeed, etc.) or a CDN, purge it after changing settings
so the changes are served.
## FAQ
### Does this patch vulnerabilities?
No. It hides or decoys version information to reduce automated scanning. The actual
fix for an outdated component is to update it. Use this as an additional layer.
### What is the difference between Obfuscate and Decoy?
Obfuscate removes or blocks the version so a scanner reports “could not determine
the version”. Decoy reports a plausible current version so the site reads as fully
up to date. Use a real, recent version for Decoy — an implausible value may be ignored
by scanners.
### Will it break my plugin or theme updates?
WordPress detects updates from each component’s real version (its main file header
for plugins, `style.css` for themes), which is read independently. Core and plugin
update notifications are unaffected. Masking a theme’s `style.css` version does
affect that theme’s own update notice, so the plugin shows its own update notice
in that case.
### I changed a setting but nothing changed.
Almost always page caching. Purge your cache (e.g. LiteSpeed Purge All) and any
CDN after saving.
## 評価
このプラグインにはレビューがありません。
## 貢献者と開発者
Version Cloak はオープンソースソフトウェアです。以下の人々がこのプラグインに貢献
しています。
貢献者
* [ nextdoorentertainment ](https://profiles.wordpress.org/nextdoorentertainment/)
[“Version Cloak” をあなたの言語に翻訳しましょう。](https://translate.wordpress.org/projects/wp-plugins/version-cloak)
### 開発に興味がありますか ?
[コードを閲覧](https://plugins.trac.wordpress.org/browser/version-cloak/)するか、
[SVN リポジトリ](https://plugins.svn.wordpress.org/version-cloak/)をチェックする
か、[開発ログ](https://plugins.trac.wordpress.org/log/version-cloak/)を [RSS](https://plugins.trac.wordpress.org/log/version-cloak/?limit=100&mode=stop_on_copy&format=rss)
で購読してみてください。
## 変更履歴
#### 1.0.4
* WP-Cron hardening is now OFF by default. Fresh installs keep WordPress’s normal
scheduled tasks (update checks, scheduled posts, backups) working out of the
box. Enable “Disable the HTTP pseudo-cron” only alongside a real system cron.
#### 1.0.3
* Fix: the 1.0.2 duplicate-copy guard wrongly triggered on normal single-site installs(
PHP hoists the function it tested), disabling the plugin and its settings. The
guard now checks only the runtime version constant.
#### 1.0.2
* Guard against a fatal “cannot redeclare” error when a second copy of the plugin
is active under a different folder name.
* Asset version hiding now catches the ver= query parameter in any position (e.
g. ?cache=9&ver=1.2.3), not only when it is first.
#### 1.0.1
* Raised minimum PHP to 7.0 (header and readme).
* Explicitly close the front-end output buffer on shutdown.
#### 1.0.0
* Initial release.
## メタ
* バージョン **1.0.4**
* 最終更新日 **2か月前**
* 有効インストール数 **10未満**
* WordPress バージョン ** 5.0またはそれ以降 **
* 検証済み最新バージョン: **7.0.4**
* PHP バージョン ** 7.0またはそれ以降 **
* 言語
* [English (US)](https://wordpress.org/plugins/version-cloak/)
* タグ
* [hardening](https://ja.wordpress.org/plugins/tags/hardening/)[security](https://ja.wordpress.org/plugins/tags/security/)
[version](https://ja.wordpress.org/plugins/tags/version/)[wp cron](https://ja.wordpress.org/plugins/tags/wp-cron/)
[xml-rpc](https://ja.wordpress.org/plugins/tags/xml-rpc/)
* [詳細を表示](https://ja.wordpress.org/plugins/version-cloak/advanced/)
## 評価
レビューはまだ送信されていません。
[Your review](https://wordpress.org/support/plugin/version-cloak/reviews/#new-post)
[すべてのレビューを見る](https://wordpress.org/support/plugin/version-cloak/reviews/)
## 貢献者
* [ nextdoorentertainment ](https://profiles.wordpress.org/nextdoorentertainment/)
## サポート
意見や質問がありますか ?
[サポートフォーラムを表示](https://wordpress.org/support/plugin/version-cloak/)