CVE-2026-9227 GutenBee <= 2.20.1 - Authenticated (Author+) Arbitrary File Upload via wp_check_filetype_and_ext Filter

🗓️ 28 May 2026 06:45:39Reported by GoogleType

osv🔗 osv.dev👁 4 Views

Authenticated authors can upload arbitrary files due to a flawed extension check in GutenBee up to 2.20.1, enabling remote code execution.

Reporter	Title	Published	Views	Family All 11
ATTACKERKB	CVE-2026-9227	28 May 202606:45	–	attackerkb
Circl	CVE-2026-9227	28 May 202612:03	–	circl
CNNVD	WordPress plugin GutenBee – Gutenberg Blocks 代码问题漏洞	28 May 202600:00	–	cnnvd
CVE	CVE-2026-9227	28 May 202606:45	–	cve
Cvelist	CVE-2026-9227 GutenBee <= 2.20.1 - Authenticated (Author+) Arbitrary File Upload via wp_check_filetype_and_ext Filter	28 May 202606:45	–	cvelist
EUVD	EUVD-2026-32732	28 May 202606:45	–	euvd
NVD	CVE-2026-9227	28 May 202608:16	–	nvd
Patchstack	WordPress GutenBee – Gutenberg Blocks plugin <= 2.20.1 - Authenticated (Author+) Arbitrary File Upload vulnerability	1 Jun 202608:25	–	patchstack
Positive Technologies	PT-2026-44209	28 May 202600:00	–	ptsecurity
RedhatCVE	CVE-2026-9227	5 Jun 202619:18	–	redhatcve

Source	Link
plugins	www.plugins.trac.wordpress.org/browser/gutenbee/tags/2.20.0/gutenbee.php
plugins	www.plugins.trac.wordpress.org/browser/gutenbee/tags/2.20.0/gutenbee.php
plugins	www.plugins.trac.wordpress.org/browser/gutenbee/tags/2.20.0/gutenbee.php
plugins	www.plugins.trac.wordpress.org/browser/gutenbee/tags/2.20.1/gutenbee.php
plugins	www.plugins.trac.wordpress.org/browser/gutenbee/tags/2.20.1/gutenbee.php
plugins	www.plugins.trac.wordpress.org/browser/gutenbee/tags/2.20.1/gutenbee.php
plugins	www.plugins.trac.wordpress.org/changeset
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/2d20e8c9-975d-4e8c-8bea-50935853c7d4
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2026/9xxx/CVE-2026-9227.json
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-9227

08 Jul 2026 08:12Current

6.6Medium risk

Vulners AI Score6.6

CVSS 3.18.8

EPSS0.00659