WordPress plugin
Five Star Business Profile and Schema security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 3 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High1
- Medium2
- Low0
All Five Star Business Profile and Schema vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium4.3 | 2.3.21 - Authenticated (Author+) Information Exposure 2.3.20 – 2.3.21Update to 2.4.0 | CVE-2026-86817 | |
| High7.2 | Authenticated (Editor+) Arbitrary Code Execution ≤2.3.19Update to 2.3.20 | CVE-2026-27436 | |
| Medium5.4 | Subscriber+ Page Creation & Settings Update to Stored Cross-Site Scripting ≤2.1.6Update to 2.1.7 | CVE-2021-25060 |
- Medium4.32.3.21 - Authenticated (Author+) Information Exposure
2.3.20 – 2.3.21Update to 2.4.0
- High7.2Authenticated (Editor+) Arbitrary Code Execution
≤2.3.19Update to 2.3.20
- Medium5.4Subscriber+ Page Creation & Settings Update to Stored Cross-Site Scripting
≤2.1.6Update to 2.1.7
Five Star Business Profile and Schema: common questions
Does Five Star Business Profile and Schema have known vulnerabilities?
Yes. VulnCrest Radar lists 3 known vulnerabilities in Five Star Business Profile and Schema: 1 high, 2 medium. None are known to affect version null.
How do I check which version of Five Star Business Profile and Schema I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Five Star Business Profile and Schema vulnerability?
CVE-2026-86817, published Oct 2, 2026: Five Star Business Profile and Schema 2.3.20 - 2.3.21 - Authenticated (Author+) Information Exposure. Severity: Medium (CVSS 4.3).
Is any Five Star Business Profile and Schema vulnerability listed in CISA KEV?
No. None of the known Five Star Business Profile and Schema vulnerabilities is currently listed in the CISA KEV catalog.