Primer Software Primer MyData for WooCommerce Path Traversal Vulnerability

A path traversal vulnerability has been identified in the Primer MyData for WooCommerce plugin, affecting versions through 4.2.8. This vulnerability allows attackers to manipulate file paths, potentially accessing files outside of the intended directory.

Impact

Exploitation of this vulnerability could lead to unauthorized file access on the server, allowing attackers to read sensitive files or execute malicious scripts.

Remediation

Users of the Primer MyData for WooCommerce plugin should update to version 4.2.9 or later. Patchstack users can enable auto-update for vulnerable plugins.