← voltar
CVE-2026-27436

WordPress Five Star Business Profile and Schema plugin <= 2.3.19 - Arbitrary Code Execution vulnerability

CVSS 9.1 CRITICALEPSS 0.4%CWE-94
Vexday Risk Score
28Baixo
Decisão SSVC (CISA)
Track
Sem sinal de exploração → monitorar
CVSS 9.1EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
02 jul 2026Publicada no NVD
Recomendação: Monitorar — sem sinal de exploração no momento.
Editor Arbitrary Code Execution in Five Star Business Profile and Schema <= 2.3.19 versions.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Produtos afetados
Rustaurius · Five Star Business Profile and Schema
Referências
https://patchstack.com/database/wordpress/plugin/business-profile/vulnerability/wordpress-five-star-business-profile-and-schema-plugin-2-3-19-arbitrary-code-execution-vulnerability?_s_id=cve