The Klarna Checkout for WooCommerce WordPress plugin before 2.13.5 exposes an unauthenticated WooCommerce Ajax endpoint that allows an attacker to flood the log files with data at the maximum size allowed for a POST parameter per request. This can result in rapid consumption of disk space, potentially filling the entire disk.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Klarna Checkout For Woocommerce Plugin | — | Update klarna-checkout-for-woocommerce plugin to version 2.13.5, or a newer patched version | May 15, 2025 | Mar 27, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub