WP Hide PRO is the paid edition of WP Hide & Security Enhancer. It uses URL rewrite techniques and WordPress filters to change how technical paths appear, while leaving the server’s files and directories in place.

Choose which paths to change

Settings can hide or replace references to WordPress core files, the login page, themes, plugins, uploads, and selected assets. You can change the default wp-admin and wp-login.php paths to an alternative login URL, and hide or block default paths that may identify WordPress. The PRO edition supports complex themes and plugins that may require additional controls.

These options focus on administrative and static asset paths. Public content URLs can stay as they are; posts, pages, categories, sitemaps, and canonical tags are described as remaining unchanged. The add-on can also accommodate custom WordPress directory structures, add-on or theme locations, and upload folders.

Configure server rules and headers

For Nginx, the interface generates configuration snippets for URL masking, asset renaming, and security header rules. Add the required snippets to the server block. The product information also describes compatibility with Apache, LiteSpeed, and IIS, as well as Nginx used as a reverse proxy.

Available HTTP response header settings include COEP, COOP, CORP, Referrer-Policy, X-Content-Type-Options, X-Download-Options, X-Frame-Options, X-Permitted-Cross-Domain-Policies, and X-XSS-Protection.

Install and check the configuration

Install WP Hide & Security Enhancer in WordPress, activate the paid PRO edition, then open its settings. Choose the paths and headers for the website. On Nginx, generate the needed snippets and add them to the server block. Test the login URL, front-end asset paths, response headers, and site cache before finishing.

Because the changes are applied virtually through filters and rewrite rules, the plugin does not write to, delete, or modify existing files or directories. According to the supplied product information, WordPress, plugin, and theme updates can continue through the dashboard or WP-CLI without disabling WP Hide.

Detector results may take time to reflect a change when caching is active. Clear the relevant server cache, then check again using both the homepage and an inner URL.