In reply to Thabo Tswana.

A couple people have mentioned blocking the editor as protection against hackers. I must be missing something because, if they have admin access can't they just upload a malicious plugin?