secured WordPress accounts, removed credentials from the database, created WordPress plugin