The vulnerability identified as CVE-2025-32631 affects Oxygen MyData for WooCommerce up to version 1.0.64. It is an improper limitation of a pathname to a restricted directory, commonly known as a path traversal vulnerability. This flaw allows remote attackers to access files outside the intended directory scope by manipulating file path inputs. The CVSS v3.1 base score is 8.6, indicating high severity, with network attack vector, low attack complexity, no privileges or user interaction required, and a scope change. The impact is limited to availability, with no confidentiality or integrity impact reported. There is no vendor advisory or patch information available at this time.

An attacker can exploit this vulnerability remotely without authentication or user interaction to cause a denial of service or disrupt availability of the affected system. There is no direct impact on confidentiality or integrity according to the CVSS vector. No known exploits in the wild have been reported so far.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor vendor communications for updates. No specific temporary mitigations are provided in the available data.