You can also look up for these other topics: Framework Coding Standards Boilerplate CMS Tool Security Hacktoberfest
XVWA is a badly coded web application written in PHP/MySQL that helps security enthusiasts to learn application security.
A laboratory for learning secure web and mobile development in a practical manner.
List of Magento extensions with known security issues.