{
 "id": "WPSEC-2026-1711",
 "url": "https://wpsec.com/vuln/WPSEC-2026-1711/",
 "json_url": "https://wpsec.com/vuln/WPSEC-2026-1711/advisory.json",
 "markdown_url": "https://wpsec.com/vuln/WPSEC-2026-1711/index.md",
 "title": "Klarna for WooCommerce <= 4.13.4 - Unauthenticated Business Logic Flaw via Express Checkout Paid Order Reuse",
 "description": "The Klarna for WooCommerce plugin for WordPress is vulnerable to a business logic flaw via the one-step Express Checkout in all versions up to, and including, 4.13.4. This is due to the plugin reusing the order ID stored in the customer's session without checking that the order still needs payment, so the shipping address and shipping option AJAX handlers rebuild an order that has already been paid. This makes it possible for unauthenticated attackers, such as guest customers, to replace the items, shipping and totals of their own already-paid order with the contents of a new cart, which can leave the store holding a paid order for goods that were never paid for. Exploitation requires the one-step Klarna Express Checkout flow to be enabled.",
 "plugin": {
  "slug": "klarna-payments-for-woocommerce",
  "name": "Klarna for WooCommerce",
  "full_name": "Klarna for WooCommerce",
  "wordpress_org": "https://wordpress.org/plugins/klarna-payments-for-woocommerce/",
  "advisories_url": "https://wpsec.com/vuln/plugin/klarna-payments-for-woocommerce/",
  "attacksurface": "https://attacksurface.wpsec.com/plugin/klarna-payments-for-woocommerce"
 },
 "type": "UNKNOWN",
 "cwe": [
  "CWE-841"
 ],
 "cve": [],
 "cvss": {
  "version": "3.1",
  "score": 5.3,
  "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
  "severity": "Medium"
 },
 "affected": {
  "ranges": [
   {
    "from": null,
    "from_inclusive": true,
    "to": "4.13.5",
    "to_inclusive": false
   }
  ],
  "text": [
   "all versions before 4.13.5"
  ]
 },
 "introduced_in": null,
 "fixed_in": "4.13.5",
 "remediation": "Update to 4.13.5 or later.",
 "fix_released": "2026-10-26T10:03:22+00:00",
 "published": "2026-10-27T10:49:10+00:00",
 "updated": "2026-10-26T13:02:05.035729+00:00",
 "also_published_as": null,
 "references": [
  "https://wpsec.com/vuln/WPSEC-2026-1711/",
  "https://plugins.svn.wordpress.org/klarna-payments-for-woocommerce/tags/4.13.5/",
  "https://wordpress.org/plugins/klarna-payments-for-woocommerce/"
 ],
 "attacksurface_url": "https://attacksurface.wpsec.com/plugin/klarna-payments-for-woocommerce",
 "source": "WPSec",
 "license": {
  "name": "CC BY 4.0",
  "url": "https://creativecommons.org/licenses/by/4.0/"
 },
 "usage": {
  "plugin": "Low",
  "affected_versions": "Low",
  "as_of": "2026-10-27"
 }
}