This wonderful little development plugin has a cross-site scripting vulnerability:

https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/which-template-file/which-template-file-490-unauthenticated-cross-site-scripting

Please fix, as I hate to give up the use of this plugin.