Content is hidden
Lack of Rate Limiting Protections (i.e. CAPTCHA)
Weak Registration Implementation
Other
Broken Access Control (BAC)
Brute Force
Cache poisoning
Information Exposure