TryHackMe - OWASP Top 10
Top 10 web applicatioh vulnerabilities (2017 list)
CTF
Hacker101 - Photo Gallery
A Flask web app with a database
Hacker101 - Micro CMS_v2
Improved CMS with password authentication
Hacker101 - Petshop Pro
Small webshop with login form to crack
Hacker101 - Postbook
Small PHP site with private/public posts to play with
Hacker101 - Micro CMS_v1
A small CMS with very basic functions
Hacker101 - Get Started
Trivial - A little something to get you started