The WordPress allows the user to edit the plugin and theme files directly through its admin panel. Although, this is dangerous because a single type can render your website blank. Moreover, the admin may want to give admin access to people that don’t need to edit code.
All admin need to do is to disable the Theme Editor and the Plugin Editor. To do that, open your wp-config.php file and add the following code to it:
define( 'DISALLOW_FILE_EDIT', true );
That’s all you need to do in order to disable those editors from the WordPress backend.