In reply to Jason.

I think it's Wordfence's fault for an incorrect detection signature. WPTavern has all the freedom it wants to post any links on especially as text (unclickable).