@Terence -

if what was true Chip?

If WordPress were "providing" the SQL credentials in clear-text, in a manner that was exploitable.