Halfdata vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Halfdata products: 2 record(s), with severity, exploitation and fixes.

Green Downloads 1 Stripe Green Downloads 1

Exploited only (KEV) →

CVE-2026-32536 Critical · 9.9 CWE-434 Mar 25, 2026

WordPress Green Downloads plugin <= 2.08 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in halfdata Green Downloads halfdata-paypal-green-downloads allows Using Malicious Files.This issue affects Green Downloads: from n/a through <= 2.08.

CVE-2022-50797 Medium · 6.4 CWE-79 Feb 1, 2026

Stripe Green Downloads Wordpress Plugin 2.03 Persistent XSS via Settings

Stripe Green Downloads Wordpress Plugin 2.03 contains a persistent cross-site scripting vulnerability allowing remote attackers to inject malicious scripts in button label fields. Attackers can exploit input parameters to execute arbitrary scripts, potentially leading to session hijacking and application module manipulation.