Halfdata - vulnerabilities (CVEs)

3 CVEs in 4 products, 1 in the last 30 days, newest from 2026-10-16.

Products

• Green Downloads - 1 CVEs
• Green Popups - 1 CVEs
• Opt-in Downloads - 1 CVEs
• Stripe Green Downloads - 0 CVEs

Newest CVEs of Halfdata

• CVE-2026-94388 - CVSS 9.3 (critical), 2026-10-16: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in halfdata Green Popups halfdata-green-popups allows Blind…
• CVE-2026-32536 - CVSS 9.9 (critical), 2026-03-25: Unrestricted Upload of File with Dangerous Type vulnerability in halfdata Green Downloads halfdata-paypal-green-downloads allows Using Malicious Files.This…
• CVE-2024-10590 - CVSS 8.8 (high), 2024-12-12: The Opt-In Downloads plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the admin_upload() function in all…