indextwo

Whenever WordPress performs a core update, it automatically pulls down the following files onto the root:
<ul>
<li><code>license.txt</code></li>
<li><code>readme.html</code></li>
<li><code>wp-config-sample.php</code></li>
</ul>
These files aren’t an inherent security risk by themselves; however they are uneccessary clutter on the root of your site (why would you want a <code>wp-config-sample.php</code> file on your production website?!); and it’s just another easy-to-read vector confirming that you have a WordPress site for script-kiddies to scrape and attack.
Simply install this plugin and it will clean up those files every time you perform a core WordPress update.

Core Files Update Cleanup

This plugin deletes the unnecessary license.txt, readme.html and wp-config-sample.php files after a core update.

GraphicEdit

This plugin fork from: https://wordpress.org/plugins/wp-downgrade/
Contributors/autor: Reisetiger
Downgrade WordPress Core (or Upgrade)…
Follow me on Twitter to keep up with the latest updates 
<a href="https://twitter.com/graphicedit" rel="nofollow ugc">GraphicEdit</a>
<iframe loading="lazy" title="Downgrade and Upgrade WordPress" width="750" height="422" src="https://www.youtube.com/embed/xtiYzbz5boI?feature=oembed" frameborder="0" allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share" referrerpolicy="strict-origin-when-cross-origin" allowfullscreen></iframe>
Links: <a href="http://graphicedit.com/" rel="nofollow ugc">Author Homepage</a>

Core Files Update Cleanup vs Downgrade