A mirrored cross-site scripting (XSS) vulnerability was recently discovered in a popular WordPress security plugin. If specific requirements are satisfied, this kind of vulnerability may enable attackers to take advantage of administrator-level users.