Wordfence made a vague claim of a reflected cross-site scripting (XSS) vulnerability in the WordPress plugin Zephyr Project Manager:

…

[Read more]