CVE Intelligence
Analysis AI-assisted

CVE-2026-32536: Halfdata Green Downloads WordPress Plugin - Unrestricted File Upload

CVE-2026-32536 affects the Green Downloads WordPress plugin by halfdata, up to and including version 2.08, and is classified as unrestricted upload of a file with a dangerous type (CWE-434). Patchstack, the CNA, rates it critical with a CVSS 3.1 base score of 9.9, and the record lists no fixed version. The CVE is not listed in CISA KEV and the sources consulted show no confirmed exploitation.

Published Oct 13, 2026 · Updated Oct 13, 2026 · Ler em português

Overview

The record describes an unrestricted file upload weakness (CWE-434) in the Green Downloads plugin for WordPress, published by halfdata under the package name halfdata-paypal-green-downloads. The description states that the issue allows the use of malicious files and affects versions from n/a through 2.08.

Impact

Patchstack scores the issue 9.9 under CVSS 3.1 with the vector CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H. This vector describes network reachability, low attack complexity, low privileges required, no user interaction, a scope change, and high impact on confidentiality, integrity and availability.

In general terms, a file upload flaw in a web application can allow content that the server should not accept to be stored and used, which may lead to compromise of the affected site. This consequence is an inference from the weakness class and the vector, not a documented outcome for this plugin.

Affected products and versions

  • Product: Halfdata Green Downloads, a WordPress plugin.
  • Affected range: from n/a through 2.08, as stated in the record.
  • Fixed version: none listed in the record. This does not confirm that no fix exists.

Exploitation status

CISA KEV does not list this CVE. The record's SSVC data marks exploitation as none and automatable as no. The EPSS probability is 0.00479 with a percentile of 0.39629. No confirmed exploitation appears in the sources consulted.

Remediation and mitigation

  • Identify whether the Green Downloads plugin is installed on WordPress sites and which version is in use.
  • Because no fixed version is listed, confirm the current status with the vendor or the Patchstack entry before assuming a patch is available.
  • Limit which accounts can upload files, review upload directories, and consider deactivating the plugin if it is not essential until authoritative guidance is published.
  • Keep WordPress core, themes and other plugins updated, and maintain tested backups.

Detection guidance

  • Review plugin inventories and compare file lists against known-good copies to spot unexpected files in plugin and upload directories.
  • Check web server logs for unusual POST requests directed at the plugin and for newly created script-type files in upload locations.
  • Use file integrity monitoring on WordPress installations to flag unexpected changes.

Limitations of the available information

The record does not identify the vulnerable component or endpoint, the fixed version, vendor advisory text, or any exploitation evidence. The lower bound of n/a means the earliest affected version is unknown. The EPSS date (2026-10-13) is later than the publication date and should be verified. The source status is Deferred, so the entry may change as analysis continues. See the NVD entry and the CVE Record.

Frequently asked questions

Which versions of Green Downloads are affected by CVE-2026-32536?

The record states the issue affects Green Downloads from n/a through version 2.08. The earliest affected version is not specified.

Is there a fixed version available?

No fixed version is listed in the record. Check the vendor or Patchstack entry for current guidance before assuming a patch exists.

This analysis was drafted with AI assistance from verified source data and automatically checked against it.