WordPress has an affinity for back–doored radioactivity. If I can get my way (which is hard), a WordPress install has only 1 theme and 0 plugins. shell Copy wordpress/ |– public `– wp-config.php If it can, it will… php Copy /* Disable installing plugins and themes */ define('DISALLOW_FILE_MODS', true); wp-config.php