CVE-2026-66627

Contributor Arbitrary File Upload in GP Premium <= 2.5.5 versions.

Credits

Austin Ginder | Patchstack Bug Bounty Program

References

https://patchstack.com/database/wordpress/plugin/gp-premium/vulnerability/wordpress-gp-premium-plugin-2-5-5-arbitrary-file-upload-vulnerability?_s_id=cve