halfdata vulnerabilities

Products

• Green Downloads 1
• Green Popups 1
• Stripe Green Downloads 1

Latest halfdata CVEs

Newest publication first

1. CVE-2026-94388 WordPress Green Popups plugin < 7.6.3 - SQL Injection vulnerability

   Published 2026-10-16

   Critical·CVSS 9.3

   Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in halfdata Green Popups halfdata-green-popups allows Blind SQL Injection.This issue affects Green Popups: from n/a before 7.6.3.

2. CVE-2026-32536 WordPress Green Downloads plugin <= 2.08 - Arbitrary File Upload vulnerability

   Published 2026-03-25

   Critical·CVSS 9.9

   Unrestricted Upload of File with Dangerous Type vulnerability in halfdata Green Downloads halfdata-paypal-green-downloads allows Using Malicious Files.This issue affects Green Downloads: from n/a through <= 2.08.

3. CVE-2022-50797 Stripe Green Downloads Wordpress Plugin 2.03 Persistent XSS via Settings

   Published 2026-02-01

   Medium·CVSS 5.1

   Stripe Green Downloads Wordpress Plugin 2.03 contains a persistent cross-site scripting vulnerability allowing remote attackers to inject malicious scripts in button label fields. Attackers can exploit input parameters to execute arbitrary scripts, potentially leading to session...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.