Hi,
I have scanned my WP blog with http://retire.insecurity.today and it tells me that there is a vulnerable script at
.../wp-includes/js/jquery/jquery-migrate.min.js?ver=1.2.1
As info sources they give:
Wordfence didn't detect it, although that mentioned vulnerability seems to be 2 years old. Anything I should be worried about, or a false alarm?