wp-content/plugins/
This plugin will disable the functionalities of add new themes, plugins and file editing in your WordPress dashboard. If someone access your backend he cannot do anything to your website.