Themes and Security

It’s very simple - don’t just upload a new theme without having a look at its code first… You are laying open your server to the complete whim of the theme programmer.

Examples of the problem here and here  are only the tip of the iceberg in terms of what could be achieved as exploit.