How do I pass PCI scans?

I am developing a high risk e commerce site, have a Wordpress site completed, credit card processor picked out, but I cannot get the site to pass PCI compliance scans. The most common reason I am allegedly failing is due to TLSv1.0 being supported and cross site scripting, none of which I was aware of doing. I would greatly appreciate any assistance, thanks.