CVE-2026-86817

The Five Star Business Profile and Schema WordPress plugin, versions 2.3.20 through 2.3.21 , contains a vulnerability where it fails to properly restrict callbacks used to resolve schema field default values. This allows authenticated users with Author-level access or higher to inject input that ...