Applying the principle of least privilege for improved WordPress security