Fuerte-WP

Stronger WP. Limit access to critical WordPress areas, even for other admins.

Fuerte-WP is a WordPress Plugin to enforce certain limits for users with administrator access, and to force some other security related tweaks.

Some features included are:
– Configure your own super users that will not be affected by changes and tweaks enforced by Fuerte-WP.
– Enable and force auto updates for WordPress core, plugins, themes & translations.
– Disables XML-RPC API.
– Disables WordPress theme and plugin editor, for non super users.
– Disables installation of new themes and/or plugins, for non super users.
– Restrict editing or deleting super users, for non super users.
– Restrict access to some pages inside WordPress admin panel, like plugins or theme uploads, for non super users. Restricted pages and areas can be extended vía configuration.
– Remove (and restrict) items from WordPress menus, for non super users.
– Disable Plugins installation (via WP’s repo or upload). Also disable plugins deletion.

Check the full feature set at here.