CVE-2024-13925

7.5 highEPSS 0.5%

High (7.5) in klarna klarna checkout for woocommerce. EPSS 0.5% chance of exploitation in the next 30 days.

The Klarna Checkout for WooCommerce WordPress plugin before 2.13.5 exposes an unauthenticated WooCommerce Ajax endpoint that allows an attacker to flood the log files with data at the maximum size allowed for a POST parameter per request. This can result in rapid consumption of disk space, potentially filling the entire disk.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 43% of CVEs (scores of 2026-10-31)
Published: 2025-04-17
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

klarna:klarna_checkout_for_woocommerce

References

https://wpscan.com/vulnerability/6aebb52f-d74a-4043-86c4-c24579f24ef4/

Check your stack JSON