Disallowed editing of theme and plugin files through the wp-admin.
Locked down access to wp-includes if mod_rewrite is available.