This vulnerability in Primer MyData for Woocommerce (<= 4.2.8) involves improper handling of path input, specifically allowing path traversal via '.../...//' sequences. The CVSS 3.1 base score is 5.3 (medium), reflecting network attack vector, low complexity, no privileges or user interaction required, and limited impact confined to confidentiality (read access). No integrity or availability impacts are noted. No vendor advisory or patch information is provided, and the product is not a cloud service.

An attacker can exploit this path traversal vulnerability to read files outside the intended directory scope, potentially exposing sensitive information. The impact is limited to confidentiality loss; integrity and availability are not affected. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should monitor vendor communications for patches or updates addressing this vulnerability. No specific temporary mitigations are documented.