CVE Catalog
CVE-2026-66627
CriticalCVSS 9.9Summary
A user with the Contributor role can upload arbitrary files in GP Premium versions up to 2.5.5.
Risk Assessment
Potential to place malicious files on the server, which could lead to site compromise.
Recommendation
Update the GP Premium plugin to a version newer than 2.5.5.
Original NVD description (English source)
Contributor Arbitrary File Upload in GP Premium <= 2.5.5 versions.