WordPress has an affinity for back–doored radioactivity. If I can get my way (which is hard), a WordPress install has only 1 theme and 0 plugins.
shell wordpress/ |-- public `-- wp-config.php If it can, it will… php /* Disable installing plugins and themes */ define('DISALLOW_FILE_MODS', true); wp-config.php