Just in case you missed this WP warning

[Joss]

Some of us still maintain Wordpress sites, so....

Security Advisory: XSS Vulnerability Affecting Multiple WordPress Plugins

https://blog.sucuri.net/2015/04/security-advisory-xss-vulnerability-affecting-multiple-wordpress-plugins.html

[Pierre-Luc]

Adding to todo and required fees :

- WP Vulnerabilities Maintenance Tax

[Manfred62]

security in WP is like a never-ending story: http://klikki.fi/adv/wordpress2.html

[Manfred62]

someone knows the movie "Groundhog Day"?

https://blog.sucuri.net/2015/05/jetpack-and-twentyfifteen-vulnerable-to-dom-based-xss.html