Beej

WordPress 3.0+ is great. It shows you your uploaded header images. 
It’s too bad it doesn’t let you delete them as well! 
The answer is here with a simple yet extremely useful little plugin called Delete Custom Header. 
Unlike WP’s “Remove Header” button, this plugin completely removes the header image data 
from the database and the files from the server.
For themes with a header option, like Twenty Ten, Twenty Eleven, etc.

Delete Custom Header

Delete uploaded header images and remove them from the database.

atmosphear

Send an “HTTP/1.1 403 Forbidden” header on a failed login instead of “HTTP/1.1 200 OK”, which is the WordPress default header on failed login. This is a tremendously simple plugin that does only that and absolutely nothing else.
The purpose of this plugin is to provide a way to allow external tools like fail2ban to get a message of a failed login e.g. to prevent a brute-force attack on a firewall level.
For the public domain.
Uses PHP5.3 anonymous functions and will not work on earlier versions of PHP

HTTP/1.1 403 Forbidden header on a failed login

Send an "HTTP/1.1 403 Forbidden" header on a failed login instead of the default "HTTP/1.1 200 OK"

Delete Custom Header vs HTTP/1.1 403 Forbidden header on a failed login