CVE Catalog
CVE-2026-66627
CriticalCVSS 9.9Exploitation Probability (EPSS)
Low risk0.45%
37th percentile - higher than 37% of all known CVEs
Summary
A user with the Contributor role can upload arbitrary files in GP Premium versions up to 2.5.5.
Risk Assessment
Potential to place malicious files on the server, which could lead to site compromise.
Recommendation
Update the GP Premium plugin to a version newer than 2.5.5.
Original NVD description (English source)
Contributor Arbitrary File Upload in GP Premium <= 2.5.5 versions.