Editor Arbitrary Code Execution in Five Star Business Profile and Schema <= 2.3.19 versions.

CVE-2026-27436 describes an Arbitrary Code Execution vulnerability affecting the Five Star Business Profile and Schema WordPress plugin in versions 2.3.19 and below. The vulnerability allows users with Editor-level privileges to execute arbitrary code on affected WordPress installations. It was reported via PatchStack and published on the NVD. The flaw poses a high risk to WordPress sites using the affected plugin versions. Site administrators are advised to update to a patched version immediately. No additional technical details or proof-of-concept code are provided in the available description. The vulnerability is classified as high severity given the nature of arbitrary code execution.