Your database is everything. It’s your content, your settings.
If they have access to your database, they can modify/delete everything, change your settings, change the password on your account, delete your account, add their own account, etc.
Basically, if someone else gains access to your database, it’s game over.
Thread Starter
ajiaim
(@ajiaim)
So even if someone does not have access to your cPanel but knows your username and password they can connect to it using certain program?
Moderator
Jan Dembowski
(@jdembowski)
Forum Moderator and Brute Squad
If they have access to your database and credentials then they can insert malware into your dataase such as javacript into your posts directly, change your WordPress password, lock you out of your own installation, deface your site, etc.
If someone has your database credentials, what can they actually do?
Why do you ask?