CVE-2026-32536: WordPress Green Downloads plugin <= 2.08 - Arbitrary File Upload vulnerabil

WordPress Green Downloads plugin <= 2.08 - Arbitrary File Upload vulnerability

Status

Published

2026-03-25

Updated

2026-04-29

Assigning organization

Patchstack

Description

Unrestricted Upload of File with Dangerous Type vulnerability in halfdata Green Downloads halfdata-paypal-green-downloads allows Using Malicious Files.This issue affects Green Downloads: from n/a through <= 2.08.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

halfdata Green Downloads

Default version status: unaffected

n/a to ≤ <= 2.08affected

References

https://patchstack.com/database/Wordpress/Plugin/halfdata-paypal-green-downloads/vulnerability/wordpress-green-downloads-plugin-2-08-arbitrary-file-upload-vulnerability?_s_id=cve ↗