CVE-2024-13925
Klarna Checkout for WooCommerce < 2.13.5 - DoS via Excessive Logging
- State
- Published
- Severity
- 7.5 High
- Published
- Apr 17, 2025
- Updated
- Aug 27, 2025
- Reserved
- Mar 13, 2025
Description
The Klarna Checkout for WooCommerce WordPress plugin before 2.13.5 exposes an unauthenticated WooCommerce Ajax endpoint that allows an attacker to flood the log files with data at the maximum size allowed for a POST parameter per request. This can result in rapid consumption of disk space, potentially filling the entire disk.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 7.5 High | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | CISA-ADP |
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
Klarna Checkout for WooCommerceUnknown |
|
References
- https://wpscan.com/vulnerability/6aebb52f-d74a-4043-86c4-c24579f24ef4/exploitvdb-entrytechnical-description
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.