{
 "id": "WPSEC-2026-0829",
 "url": "https://wpsec.com/vuln/WPSEC-2026-0829/",
 "json_url": "https://wpsec.com/vuln/WPSEC-2026-0829/advisory.json",
 "markdown_url": "https://wpsec.com/vuln/WPSEC-2026-0829/index.md",
 "title": "Klarna Payments for WooCommerce <= 4.13.3 - Unauthenticated Insecure Direct Object Reference to Order Key and Customer Address Exposure via Order-Pay Page",
 "description": "The Klarna for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference via the order-pay endpoint in all versions up to, and including, 4.13.3. This is due to the checkout script parameters loading any order by the ID in the order-pay URL without checking the request's order key or whether the visitor is allowed to pay for the order. This makes it possible for unauthenticated attackers to enumerate order IDs and retrieve other customers' order keys, along with their names, email addresses, phone numbers and billing and shipping addresses.",
 "plugin": {
  "slug": "klarna-payments-for-woocommerce",
  "name": "Klarna Payments for WooCommerce",
  "full_name": "Klarna for WooCommerce",
  "wordpress_org": "https://wordpress.org/plugins/klarna-payments-for-woocommerce/",
  "advisories_url": "https://wpsec.com/vuln/plugin/klarna-payments-for-woocommerce/",
  "attacksurface": "https://attacksurface.wpsec.com/plugin/klarna-payments-for-woocommerce"
 },
 "type": "IDOR",
 "cwe": [
  "CWE-639"
 ],
 "cve": [],
 "cvss": {
  "version": "3.1",
  "score": 5.3,
  "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
  "severity": "Medium"
 },
 "affected": {
  "ranges": [
   {
    "from": null,
    "from_inclusive": true,
    "to": "4.13.4",
    "to_inclusive": false
   }
  ],
  "text": [
   "all versions before 4.13.4"
  ]
 },
 "introduced_in": null,
 "fixed_in": "4.13.4",
 "remediation": "Update to 4.13.4 or later.",
 "fix_released": "2026-10-12T09:05:05+00:00",
 "published": "2026-10-13T12:45:11+00:00",
 "updated": "2026-10-13T12:13:36.801012+00:00",
 "also_published_as": null,
 "references": [
  "https://wpsec.com/vuln/WPSEC-2026-0829/",
  "https://plugins.svn.wordpress.org/klarna-payments-for-woocommerce/tags/4.13.4/",
  "https://wordpress.org/plugins/klarna-payments-for-woocommerce/"
 ],
 "attacksurface_url": "https://attacksurface.wpsec.com/plugin/klarna-payments-for-woocommerce",
 "source": "WPSec",
 "license": {
  "name": "CC BY 4.0",
  "url": "https://creativecommons.org/licenses/by/4.0/"
 },
 "usage": {
  "plugin": "Low",
  "affected_versions": "Low",
  "as_of": "2026-10-13"
 }
}