The Under Construction plugin for WordPress has a security issue in versions up to 3.96. This issue means that attackers who can trick a site administrator into clicking a link can make changes to the plugin without being authenticated. This is because the plugin has missing or incorrect protection measures against certain types of attacks