CVE-2026-32536: WordPress Green Downloads plugin <= 2.08 - Arbitrary File Upload vulnerability
Published Mar 25, 2026
·Updated
Unrestricted Upload of File with Dangerous Type vulnerability in halfdata Green Downloads halfdata-paypal-green-downloads allows Using Malicious Files.This issue affects Green Downloads: from n/a through <= 2.08.
Affected Software
1 affected component
halfdata Green Downloads<=2.08
Event History
Mar 25, 2026
CVE Published
via MITRE·04:15 PM
Data Sourced
via MITRE·04:15 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·05:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2026-32536?
CVE-2026-32536 is considered a critical vulnerability due to its impact on arbitrary file uploads.
2
How do I fix CVE-2026-32536?
To fix CVE-2026-32536, you should update the Green Downloads plugin to the latest version above 2.08.
3
Which versions of the Green Downloads plugin are affected by CVE-2026-32536?
CVE-2026-32536 affects all versions of the Green Downloads plugin up to and including 2.08.
4
What type of vulnerability is CVE-2026-32536?
CVE-2026-32536 is an Unrestricted Upload of File with Dangerous Type vulnerability.
5
Can CVE-2026-32536 lead to remote code execution?
Yes, CVE-2026-32536 can potentially lead to remote code execution if an attacker uploads a malicious file.