If a list of passwords were stolen, the malicous actors might be able to undo the hashing by guessing common words. This called a dictionary attack, as each word $($and often combinations of common words and other characters$)$ is hashed and then compared to the stolen list of passwords to see if it is present.