Critical · 9.9 CVE-2026-66627 EUVD-2026-60916GHSA-5gj5-g7p3-6584

WordPress GP Premium plugin <= 2.5.5 - Arbitrary File Upload vulnerability

Published Aug 18, 2026 · Updated Sep 7, 2026 · Assigned by Patchstack

Description

Unrestricted Upload of File with Dangerous Type vulnerability in EDGE22 Studios Ltd. GP Premium allows Remote Code Inclusion.

This issue affects GP Premium: from n/a through 2.5.5.

Vendor	Product	Affected	Fixed
EDGE22 Studios	GP Premium	≤ 2.5.5	—