OWASP Juice Shop is probably the most modern and sophisticated insecure web application! It can be used in security trainings, awareness demos, CTFs and as a guinea pig for security tools!

Azure Container Apps consumption plan is billed based on per-second resource allocation and requests. The first 180,000 vCPU-seconds, 360,000 GiB-seconds, and 2 million requests each month are free. So you can use it for free during trainings, awareness demos. Optionally you can deploy it with Application Gateway with WAF for compare how WAF can be usefull in protecting the web applications.
It uses official docker image - bkimminich/juice-shop.