Translations:Manual:$wgRequirePasswordforEmailChange/15/en

allows to log into a foreign account without knowing the respective accounts password.