critical9.9

CVE-2026-66627

Unrestricted Upload of File with Dangerous Type vulnerability in EDGE22 Studios Ltd.

Impact

Unrestricted Upload of File with Dangerous Type vulnerability in EDGE22 Studios Ltd. GP Premium allows Remote Code Inclusion. This issue affects GP Premium: from n/a through 2.5.5.

Affected products

Product	Affected versions
GP Premium: From N/A	through 2.5.5.

Versions were read from the advisory text. No structured product data has been published for this record yet.

Weakness classification

CWE-434

References

NVD record
CVE.org record
https://patchstack.com/database/wordpress/plugin/gp-premium/vulnerability/wordpress-gp-premium-plugin-2-5-5-arbitrary-file-upload-vulnerability?_s_id=cve