Advisories · Technology

klarnaplugin Klarna for WooCommerce.

Every CVE that names klarnaplugin Klarna for WooCommerce among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-110590 CVE record

CVSS 7.5 High

Klarna for WooCommerce <= 4.13.3 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via 'order-pay' Endpoint
- klarnaplugin Klarna for WooCommerce
- Broken access control
Not analysed yet 16 Oct 2026