today we have a useful Website Vulnerability Scanner to scan your website from all web exploits for free this website generate a simple report after scanning your website
the website link here
as you can see above the report of the website listed some found exploits with risk ratings so the high and medium exploits should fixed soon as possible
also for example if you have cross site scripting exploit you can find easly the vulnerable page and vulnerable parameter with the method and attack victor that make fixing the exploits you have in your website easy
the scanner Finds common vulnerabilities which affect web applications: SQL Injection, XSS, OS Command Injection, Directory Traversal and others. The scanner also identifies specific web server configuration issues.
The Light version of the Websites Vulnerability Scanner performs a passive web security scan in order to detect issues like: outdated server software, insecure HTTP headers, insecure cookie settings and a few others