The Klarna Checkout for WooCommerce WordPress plugin before 2.13.5 exposes an unauthenticated WooCommerce Ajax endpoint that allows an attacker to flood the log files with data at the maximum size allowed for a POST para…
CVSS 3.1HIGH 7.5·Network·No auth·No interaction·EPSS 0.00512·Published 2025-04-17·Fixed in 2.13.5