Fixed – The theme version number was wrong in the previous release. It was 1.0.8.4 instead of 1.0.8.40 which was triggering a vulnerability report in Wordfence.
The vulnerability itself was from one of the bundled plugins and it was fixed long time ago.