CVE-2024-13925

Klarna Checkout for WooCommerce < 2.13.5 - DoS via Excessive Logging

High · published April 17, 2025

CVSS v3.1
7.5
EPSS
1%
Percentile
42.8
In the wild
Unconfirmed
What it is

The Klarna Checkout for WooCommerce WordPress plugin before 2.13.5 exposes an unauthenticated WooCommerce Ajax endpoint that allows an attacker to flood the log files with data at the maximum size allowed for a POST parameter per request. This can result in rapid consumption of disk space, potentially filling the entire disk.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00512 · 42.8th percentile
Published
2025-04-17T06:00Z
EPSS history
Timeline
  • 17 APR 06:00Z
    Klarna Checkout for WooCommerce < 2.13.5 - DoS via Excessive Logging
    cvelistv5