CVE-2026-66627CRITICAL NVDCVSS Score 9.9Severity CRITICALPublished Aug 18, 2026Vendor unknownDescriptionContributor Arbitrary File Upload in GP Premium <= 2.5.5 versions.Referenceshttps://patchstack.com/database/wordpress/plugin/gp-premium/vulnerability/wordpress-gp-premium-plugin-2-5-5-arbitrary-file-upload-vulnerability?_s_id=cve