horizontal-privilege-escalation 3 IDOR via Sequential Order IDs | Cheesy Does It May 11, 2026 IDOR – Password Disclosure via Insecure Direct Object Reference | User ID Controlled by Request Parameter Mar 29, 2026 IDOR – Unauthorized Access via Predictable Identifier Manipulation | User ID Controlled by Request Parameter Mar 29, 2026