I have this in my source code: 

```
 <script>... "ajaxurl":"https:\/\/example.com\/wp-admin\/admin-ajax.php"...</script>

```

Is it possible to hide the `wp-admin` & the `admin-ajax.php` through htaccess or something?

It seems the above code is generated from a plugin and I think it's a security risk.