If I’m logged in my website I can access the wp-admin, is that safe?

The wp-admin path can only be accessed if you are logged in as admin. It’s not visible to visitors or hacker bots.

The Ghost version is hiding all the plugins and themes paths and the WordPress common paths from hackers.

Even if plugins like Woocommerce are adding class names in HTML and WP detectors are identifying these classes in order to tell you that you are using WordPress, the hacker bots are using Brute Force and Script Injection to break the plugins on vulnerable paths even if your website is not built in WordPress.

Having the common paths hidden with Hide My WP Ghost will protect your site against hackers attacks. Also, activate the Brute Force protection from Hide My WP Ghost to prevent the Brute Force attacks.

Having the wp-admin path visible when you’re logged to your website will prevent your website from crashing if you deactivate the plugin or if another plugin uses the old admin path in the backend.