As of April 2026, Core Files Update Cleanup is a WordPress core plugin with 20 active installations and a 0/5 rating0. It has been downloaded 2.0K+ times in total. Requires WordPress 3.6.0+ and PHP false+. Available on WordPress.org since 2024. Last updated 2 years ago — may have compatibility concerns. Top alternative: WP Downgrade | Specific Core Version.
Whenever WordPress performs a core update, it automatically pulls down the following files onto the root:
license.txtreadme.htmlwp-config-sample.phpThese files aren’t an inherent security risk by themselves; however they are uneccessary clutter on the root of your site (why would you want a wp-config-sample.php file on your production website?!); and it’s just another easy-to-read vector confirming that you have a WordPress site for script-kiddies to scrape and attack.
Simply install this plugin and it will clean up those files every time you perform a core WordPress update.
| WordPress | 3.6.0+ requiredTested up to 6.4.8 |
| PHP | false+ required |
Release Date – 19 January 2024
license.txt, readme.html and wp-config-sample.php files when plugin is first activated (not just on the next update) and remove them if found.Plugin data sourced from WordPress.org. Analysis and metrics by PluginSift.