Vulnerability · Published Apr 17, 2025 · Assigned by WPScan
CVE-2024-13925Klarna Checkout for WooCommerce < 2.13.5 - DoS via Excessive Logging
High 7.5
In plain English
A high-severity security flaw in Klarna Checkout for WooCommerce from Unknown. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 44% of all known vulnerabilities).
Severity (CVSS 3.1)7.5High
Exploit odds (30 days)0.5%top 56.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
The Klarna Checkout for WooCommerce WordPress plugin before 2.13.5 exposes an unauthenticated WooCommerce Ajax endpoint that allows an attacker to flood the log files with data at the maximum size allowed for a POST parameter per request. This can result in rapid consumption of disk space, potentially filling the entire disk.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Unknown | Klarna Checkout for WooCommerce | 0 – before 2.13.5 |
References
- https://wpscan.com/vulnerability/6aebb52f-d74a-4043-86c4-c24579f24ef4/ exploit, vdb-entry, technical-description