WordPress WP Construction Mode plugin version 1.91 suffers from a reflective cross site scripting vulnerability.