← WordPress Vulnerabilities
WordPress security by component

Primer MyData for Woocommerce

Primer MyData for Woocommerce is a WordPress component with 3 published CVE records in this archive. The latest tracked vulnerability was published Feb 20, 2026; the highest CVE/CNA score is 7.1.

Plugin slug: primer-mydata

CVE-2025-69325: Primer MyData for Woocommerce: Filesystem traversal

Primer MyData for Woocommerce is affected by filesystem traversal. Exposure depends on how the affected operation is made reachable by the site. A crafted path can escape the intended directory and reach files or directories elsewhere on the server.

PublishedFeb 20, 2026
Safe version guidanceSee mitigation notes
Safe version
Feb 20, 2026 CVE-2025-69325
Primer MyData for Woocommerce: Filesystem traversal
Primer MyData for Woocommerce is affected by filesystem traversal. Exposure depends on how the affected operation is made reachable by the site. A crafted path can escape the intended directory and reach files or directories elsewhere on the server.
See mitigation notes
CVE5.3
NVDPending
Aug 14, 2025 CVE-2025-53575
Primer MyData for Woocommerce: Cross-site scripting
Primer MyData for Woocommerce is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE7.1
NVDPending
Apr 01, 2025 CVE-2025-30924
Primer MyData for Woocommerce: Cross-site scripting
Primer MyData for Woocommerce is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE7.1
NVDPending