If you are at all concerned about the security of your WordPress powered site, and you should be, disabling the theme and plugin editors in your admin is a must.

Just add the following code to your wp-config.php file:

<?php
/** Disable theme and plugin editors. */
define('DISALLOW_FILE_EDIT',true);