indextwo

<p>Whenever WordPress performs a core update, it automatically pulls down the following files onto the root:</p>
<ul>
<li><code>license.txt</code></li>
<li><code>readme.html</code></li>
<li><code>wp-config-sample.php</code></li>
</ul>
<p>These files aren’t an inherent security risk by themselves; however they are uneccessary clutter on the root of your site (why would you want a <code>wp-config-sample.php</code> file on your production website?!); and it’s just another easy-to-read vector confirming that you have a WordPress site for script-kiddies to scrape and attack.</p>
<p>Simply install this plugin and it will clean up those files every time you perform a core WordPress update.</p>


Core Files Update Cleanup

This plugin deletes the unnecessary license.txt, readme.html and wp-config-sample.php files after a core update.

Yslo

<p>Empty spaces and special characters can create some problems.</p>
<h4>Features</h4>
<ul>
<li>Improved default function <a href="https://codex.wordpress.org/Function_Reference/sanitize_file_name" rel="nofollow ugc">sanitize_file_name()</a></li>
<li>Remove latin special characters used in file name</li>
<li>Make file name lowercase</li>
</ul>


WP Sanitize File Name Plus

Sanitize file names and enhance security.

Core Files Update Cleanup vs WP Sanitize File Name Plus