Just this week I found that Wordpress cannot handle passwords with ' or " because of bogus "escaping" posted data.