Home / Vulnerability Intelligence / CVE-2026-32536

CVE-2026-32536 - Vulnerability Analysis

CriticalCVSS: 9.9

Last Updated: March 25, 2026

halfdata Green Downloads - Unrestricted File Upload

Published: March 25, 2026Updated: March 25, 2026Remote Exploitable

Overview

halfdata Green Downloads <= 2.08 contains an unrestricted file upload vulnerability caused by insufficient validation of uploaded file types, letting attackers upload malicious files, exploit requires no special privileges.

Severity & Score

Severity: Critical

CVSS Score: 9.9

EPSS Score: 0.0%(Probability of exploitation in next 30 days)

Impact

Attackers can upload malicious files, potentially leading to remote code execution or system compromise.

Mitigation

Update to the latest version beyond 2.08.

References

https://patchstack.com/database/Wordpress/Plugin/halfdata-paypal-green-downloads/vulnerability/wordpress-green-downloads-plugin-2-08-arbitrary-file-upload-vulnerability?_s_id=cve

Social Media Activity(2 posts)

TheHackerWire

@thehackerwire

Mar 25, 2026

🔴 CVE-2026-32536 - Critical (9.9) Unrestricted Upload of File with Dangerous Type vulnerability in halfdata Green Downloads halfdata-paypal-green-downloads allows Using Malicious Files.This issue affects Green Downloads: from n/a through <= 2.08. 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-32536/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

TheHackerWire

@thehackerwire

Mar 25, 2026

View original post

Related Resources

Details

CVE ID: CVE-2026-32536
Severity: Critical
CVSS Score: 9.9
Type: unrestricted_file_upload
Status: new
EPSS: 0.0%
Social Posts: 2

CWE

CWE-434

CVSS Metrics

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

EPSS Score

0.0%Probability of exploitation in the next 30 days