WIth access to WordPress files you can force login using wp_set_current_user and wp_set_auth_cookie without knowing the password.