GP Premium
by WordPress
CVEs (2)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-66627 | Cri | 0.64 | 9.9 | 0.00 | Aug 18, 2026 | Contributor Arbitrary File Upload in GP Premium <= 2.5.5 versions. | ||
| CVE-2024-3469 | Med | 0.40 | 6.1 | 0.01 | Jun 5, 2024 | The GP Premium plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the message parameter in all versions up to, and including, 2.4.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject… |
- risk 0.64cvss 9.9epss 0.00
Contributor Arbitrary File Upload in GP Premium <= 2.5.5 versions.
- risk 0.40cvss 6.1epss 0.01
The GP Premium plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the message parameter in all versions up to, and including, 2.4.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject…