`wp-config-bkp.pjp` downloads as plaintext (DB password + 8 salts)

A backup of the main config file downloads in plain text, exposing the database password and secret keys.

/wp-config-bkp.pjp