Halfdata vulnerabilities
We track 3 vulnerabilities in Halfdata products across 3 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on October 16, 2026.
Latest Halfdata vulnerabilities
- 9.3 Critical severity
Green Popups: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in halfdata Green Popups halfdata-green-popups allows Blind SQL Injection.This issue affects Green Popups: from n/a before 7.6.3.
- 9.9 Critical severity
Green Downloads: Unrestricted Upload of File with Dangerous Type
Unrestricted Upload of File with Dangerous Type vulnerability in halfdata Green Downloads halfdata-paypal-green-downloads allows Using Malicious Files.This issue affects Green Downloads: from n/a through <= 2.08.
- 8.8 High severity
Opt-In Downloads: Unrestricted Upload of File with Dangerous Type
The Opt-In Downloads plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the admin_upload() function in all versions up to, and including, 4.07. This makes it possible for authenticated attackers, with Subscriber