Disable editing code snippet from plugin / theme files. In the WordPress dashboard, there is an option to edit the plugin/theme file. This means that with access to the dashboard anyone can edit your themes or plugins. It’s easy for them to add a malware to an existing plugin or theme.