{"items":[{"id":"CVE-2026-94388","published":"2026-10-16T07:00:37.973Z","updated":"2026-10-16T15:09:36.628Z","title":"WordPress Green Popups plugin < 7.6.3 - SQL Injection vulnerability","severity":"CRITICAL","score":9.3,"vendor":"halfdata","product":"Green Popups","kev":false,"epss":0.00229,"kevAdded":null},{"id":"CVE-2026-32536","published":"2026-03-25T16:15:10.543Z","updated":"2026-04-29T09:52:01.372Z","title":"WordPress Green Downloads plugin <= 2.08 - Arbitrary File Upload vulnerability","severity":"CRITICAL","score":9.9,"vendor":"halfdata","product":"Green Downloads","kev":false,"epss":0.00269,"kevAdded":null},{"id":"CVE-2022-50797","published":"2026-02-01T12:15:51.736Z","updated":"2026-07-28T01:47:34.739Z","title":"Stripe Green Downloads Wordpress Plugin 2.03 Persistent XSS via Settings","severity":"MEDIUM","score":5.1,"vendor":"halfdata","product":"Stripe Green Downloads","kev":false,"epss":0.00434,"kevAdded":null},{"id":"CVE-2024-10590","published":"2024-12-12T04:23:11.367Z","updated":"2026-04-08T16:55:33.856Z","title":"Opt-In Downloads <= 4.07 - Authenticated (Subscriber+) Arbitrary File Upload","severity":"HIGH","score":8.8,"vendor":"halfdata","product":"Opt-In Downloads","kev":false,"epss":0.00834,"kevAdded":null}]}