OWASP Top 10 vulnerabilities are different in every report. The latest report lists the following: injections, broken authentication, sensitive data exposure, XML external entities, broken access control, security misconfiguration, Cross-site Scripting, insecure deserialization, using components with known vulnerabilities, and insufficient logging and monitoring.
See the vulnerabilities listed in the annual Acunetix web application vulnerability report.