I wonder how many people who run WordPress think it's pretty simple to check for malicious Javascript or PHP code in a theme?