Technical Security Audit
CMS, plugins, and server vulnerability checks (CVE)
OWASP Top 10 manual testing
Authentication & authorization review
Access control issues (including IDOR)
SQL Injection, XSS, CSRF testing
API security review
Security misconfigurations
