Verify WordPress is up-to-date | Make the WordPress version private |
Block PHP in directories | Remove WordPress readme file |
Enable DISSALLOW_FILE_EDIT in WordPress |
To further harden your WordPress site from unwanted changes, it can be important to enable a setting to help prevent modification of your plugin and theme files.
You have now prevented your WordPress plugin and theme files from being edited as easily by malicious code.