Authorization Bypass

mediawiki is vulnerable to authorization bypass. When a bot account has a sitewide block applied, it is to purge pages through the MediaWiki Action API which a "sitewide block" should have prevented...