About Medium Level WordPress Vulnerabilities

Roger Montti of the Search Engine Journal asked WPScan and Wordfence what site owners need to know about medium level vulnerabilities?