As one of the security tips – we should remove the generator information from the header if we are using wordpress for the blog.
It’s simple to do, just remove the following line from the header.php in your theme.

<meta name="generator" content="WordPress <?php bloginfo('version'); ?>" /> <!-- leave this for stats -->

If you are seeking tips for wordpress security. Then the following are bonus if your blog is being run under APACHE.
1: Keep your wp-admin folder safely: just create an .htaccess file.

AuthUserFile /dev/null
AuthGroupFile /dev/null
AuthName “Access Control”
AuthType Basic
order deny,allow
deny from all
# whitelist home IP address
allow from 66.234.165.99
allow from 67.148.115.25
allow from 191.58.54.6*

2: Don’t expose your plugin:) Just add the blank file into the root of your wordpress plugin file.