In reply to Andrew.

The attacker probably had access to the salts. That makes it significantly easier to break the hashes. Also, if you have remote code access, it literally takes a couple lines of code to make WordPress accept any password for any user. See the `authenticate`hook. The same hook allows you to capture and record any passwords entered into login form.

Click to Edit –

The attacker probably had access to the salts. That makes it significantly easier to break the hashes. Also, if you have remote code access, it literally takes a couple lines of code to make WordPress accept any password for any user. See the `authenticate`hook. The same hook allows you to capture and record any passwords entered into login form.

SaveCancelDelete