Prevent or Disable creating new users or changing roles of existing users to Administrator
Imho that’s one of the most important things regarding users: /** * Deny access to ‘administrator’ for other roles * Else anyone, with the edit_users capability, can edit others * to be administrators – even if they are only editors or authors * * @since 0.1 * @param (array) $all_roles * @return (array) $all_roles */ … Read more