Comment by ethmarks

FYI, your site's admin login panel can be bypassed by deleting the login modal from the DOM. Also, there doesn't seem to be any authentication for your admin tools (like triggering a scrape).