WordPress plugin can be exploited to run PHP commands on the server by posting a comment that contains a malicious payload.
DreamHost's plans are some of the cheapest but after these two optional add-ons, the plans are no longer that afforable, now ...