CVE-2024-13925
Published: 17 April 2025
Summary
CVE-2024-13925 is a high-severity an unspecified weakness vulnerability in Klarna Klarna Checkout For Woocommerce. Its CVSS base score is 7.5 (High).
Operationally, ranked in the top 24.0% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2025-11517
Vulnerability details
The Klarna Checkout for WooCommerce WordPress plugin before 2.13.5 exposes an unauthenticated WooCommerce Ajax endpoint that allows an attacker to flood the log files with data at the maximum size allowed for a POST parameter per request. This can result…
more
in rapid consumption of disk space, potentially filling the entire disk.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.