This code you provided is only injected into the HTML when you are logged in on your WordPress instance. If you are not logged in, the code is not there. So this really is not an issue because you would never know about that path unless you were already logged in.
