I requested support because Wordfence scans reported the presence of a hidden URL on my website that had been listed as high risk by Wordfence. In spite of my effort and the effort of a Wordfence support engineer, the URL could not be found, and continued to show up in scans. The support specialist informed his Lead Customer Support Engineer. He requested admin privileges, and ran his own scans, and the problem disappeared. He said: "Nothing is getting picked up. Further, when I last checked the code we saw earlier is no longer present. It's my guess that it got removed in a scan. I wish I had a better answer for you but it's gone.