MediaWiki, the engine behind Wikipedia, stores user credentials, session cookies and often private content. When the site is served over plain HTTP the traffic travels in clear‑text, which makes it trivial for a network attacker to sniff passwords, hijack sessions or inject malicious content