The OWASP Top 10 is a reference document that lists the most critical risk categories for web applications: broken access control, injection, misconfiguration, vulnerable components, authentication failures, among others. It serves as a basis for awareness and verification.
Example
Broken access control: changing the identifier in the URL to read another customer's order.