Klarna Vulnerabilities and Affected Products
Explore source-attributed vulnerabilities associated with Klarna products.
Products
- Klarna Order Management for WooCommerce1 vulnerability
- Klarna Payments for WooCommerce1 vulnerability
- klarna_payments_for_woocommerce1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2025-58598MEDIUM | WordPress Klarna Order Management for WooCommerce Plugin <= 1.9.8 - Sensitive Data Exposure VulnerabilityInsertion of Sensitive Information Into Debugging Code vulnerability in Klarna Klarna Order Management for WooCommerce klarna-order-management-for-woocommerce allows Retrieve Embedded Sensitive Data.This issue affects Klarna Order Management for WooCommerce: from n/a through <= 1.9.8. CWE-215Sep 3, 2025 | CVSS6.6v3.1 | EPSS0.266% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-30477MEDIUM | WordPress Klarna Payments for WooCommerce plugin <= 3.2.4 - Broken Access Control vulnerabilityMissing Authorization vulnerability in Klarna Klarna Payments for WooCommerce.This issue affects Klarna Payments for WooCommerce: from n/a through 3.2.4. CWE-862Mar 29, 2024 | CVSS5.3v3.1 | EPSS0.478% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |