I'm trying some tricks.

E 1 - Quantity manipulation when adding the product to the cart.

E2 - Price manipulation when adding the product to the cart.

E3 - Request manipulation on the buy product and checkout page.

You should try these and similar methods usually on shopping sites

They may not always work. But similar systems can have similar vulnerabilities.