CVE-2026-66627 — WordPress GP Premium plugin <= 2.5.5 - Arbitrary File Upload vulnerability

CVE-2026-66627

WordPress GP Premium plugin <= 2.5.5 - Arbitrary File Upload vulnerability PUBLISHED

Description (CNA)

Unrestricted Upload of File with Dangerous Type vulnerability in EDGE22 Studios Ltd. GP Premium allows Remote Code Inclusion. This issue affects GP Premium: from n/a through 2.5.5.

Affected (CNA)

Vendor / product	Versions
EDGE22 Studios Ltd. / GP Premium	affected n/a through 2.5.5

CWE

CWE-434

References

https://patchstack.com/database/wordpress/plugin/gp-premium/vulnerability/wordpress-gp-premium-plugin-2-5-5-arbitrary-file-upload-vulnerability?_s_id=cve

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.