CVE-2026-66627

creationtimestamp| type| source ---|---|--- 2026-08-18 16:08:54+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtem2h2f7j2p 2026-08-18 17:00:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mteovzl3nu2e 2026-08-21 04:00:03+00:00| seen|...

CVE-2026-66627

Unrestricted Upload of File with Dangerous Type vulnerability in EDGE22 Studios Ltd. GP Premium allows Remote Code Inclusion. This issue affects GP Premium: from n/a through 2.5.5...

CVE-2026-66627

The WordPress GP Premium plugin (versions ≤ 2.5.5) allows contributors to upload arbitrary files, enabling potential remote code execution, data theft, or site defacement. CVSS 9.9 (Critical) reflects network-accessible, low-complexity exploitation with low privileges required. Update to the late...

CVE-2026-66627 WordPress GP Premium plugin <= 2.5.5 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in EDGE22 Studios Ltd. GP Premium allows Remote Code Inclusion. This issue affects GP Premium: from n/a through 2.5.5...