Business Logic Errors (CWE-840)FREE AcademyEmail Verification Bypass / Email Squatting via Client-Side `accounts.setAccountInfo`gpk21136May 30, 2026CVSS5.3€150
Improper Access Control - Generic (CWE-284)FREE AcademyAdmin Panel Exposure via WAF Bypass (URL Encoding) + Broken reCAPTCHA + Internal Info Leakgpk2199May 30, 2026CVSS5.3€250
Business Logic Errors (CWE-840)FREE AcademyPayment Method Validation Bypass via Order Update Flowgpk2185May 30, 2026CVSS8.9€1,880