Klarna Checkout for WooCommerce Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in the Klarna Checkout for WooCommerce WordPress plugin, affecting versions prior to 2.13.5. The vulnerability arises from an unauthenticated WooCommerce Ajax endpoint that allows attackers to send large amounts of data in POST requests. This excessive logging can quickly consume available disk space, potentially leading to a full disk condition.

Impact

Exploitation of this vulnerability can cause excessive disk space consumption, potentially filling the entire disk and disrupting normal server operations.

Remediation

Users can update to Klarna Checkout for WooCommerce version 2.13.5 or later to address this vulnerability.