Klarna for WooCommerce Security & Risk Analysis

wordpress.org/plugins/klarna-payments-for-woocommerce

Grow your business for increased sales and enhanced shopping experiences at no extra costs.

30K active installs v4.7.0 PHP 7.4+ WP 6.7+ Updated Feb 25, 2026
e-commerceecommerceklarnawoocommerce
100
A · Safe
CVEs total1
Unpatched0
Last CVEMar 28, 2024
Safety Verdict

Is Klarna for WooCommerce Safe to Use in 2026?

Generally Safe

Score 100/100

Klarna for WooCommerce has a strong security track record. Known vulnerabilities have been patched promptly.

1 known CVELast CVE: Mar 28, 2024Updated 1mo ago
Risk Assessment

The Klarna Payments for WooCommerce plugin version 4.7.0 exhibits a generally strong security posture based on the static analysis. The complete absence of dangerous functions and the exclusive use of prepared statements for SQL queries are significant strengths. The high percentage of properly escaped output (96%) also indicates good practices in preventing cross-site scripting vulnerabilities. Furthermore, the presence of a substantial number of nonce and capability checks (though capability checks are absent, which is a point of concern) and the limited attack surface with no unprotected entry points are positive indicators.

However, a notable concern arises from the absence of capability checks for any entry points. While the static analysis reports 0 unprotected entry points, the lack of capability checks means that even authenticated users might be able to perform actions they shouldn't, depending on the functionality of the entry points. The vulnerability history, specifically the medium severity vulnerability related to 'Missing Authorization' last patched in March 2024, directly corroborates this potential weakness. This pattern suggests that authorization checks have been a historical weak point for this plugin, and vigilance is required to ensure all actions are properly restricted.

In conclusion, the plugin demonstrates good technical security practices in areas like SQL injection prevention and output sanitization. The limited attack surface is also a positive. The primary weakness identified is the historical and potential ongoing issue with authorization checks, which, despite not showing up as unprotected entry points in this static scan, warrants careful consideration due to past incidents. The presence of file operations and external HTTP requests, while common, should always be monitored for potential misuse if authorization is not robustly implemented.

Key Concerns

  • Vulnerability history: Medium severity, Missing Authorization
  • Capability checks: 0 for all entry points
Vulnerabilities
1

Klarna for WooCommerce Security Vulnerabilities

CVEs by Year

1 CVE in 2024
2024
Patched Has unpatched

Severity Breakdown

Medium
1

1 total CVE

CVE-2024-30477medium · 5.3Missing Authorization

Klarna Payments for WooCommerce <= 3.2.4 - Missing Authorization

Mar 28, 2024 Patched in 3.3.0 (7d)
Code Analysis
Analyzed Mar 16, 2026

Klarna for WooCommerce Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
15
389 escaped
Nonce Checks
18
Capability Checks
0
File Operations
3
External Requests
6
Bundled Libraries
0

Output Escaping

96% escaped404 total outputs
Attack Surface

Klarna for WooCommerce Attack Surface

Entry Points1
Unprotected0

Shortcodes 1

[onsite_messaging] dependencies\krokedil\klarna-onsite-messaging\src\Shortcode.php:15
WordPress Hooks 136
actionwoocommerce_blocks_payment_method_type_registrationblocks\src\payment\KlarnaPayments.php:44
filterwc_gateway_klarna_payments_settingsclasses\admin\class-kp-form-fields.php:508
filterwc_gateway_klarna_payments_settingsclasses\admin\class-kp-form-fields.php:509
actionwoocommerce_admin_field_kp_section_startclasses\admin\class-kp-settings-page.php:33
actionwoocommerce_admin_field_kp_section_endclasses\admin\class-kp-settings-page.php:34
actionwoocommerce_admin_field_kp_text_infoclasses\admin\class-kp-settings-page.php:35
actionwoocommerce_admin_field_kp_credentials_infoclasses\admin\class-kp-settings-page.php:36
filterwoocommerce_generate_kp_section_start_htmlclasses\admin\class-kp-settings-page.php:39
filterwoocommerce_generate_kp_section_end_htmlclasses\admin\class-kp-settings-page.php:40
filterwoocommerce_generate_kp_text_info_htmlclasses\admin\class-kp-settings-page.php:41
filterwoocommerce_generate_kp_credentials_htmlclasses\admin\class-kp-settings-page.php:42
actionadmin_headclasses\admin\class-kp-settings-page.php:45
actionwoocommerce_system_status_reportclasses\admin\class-kp-status.php:22
actioninitclasses\class-kp-assets.php:28
actionwp_enqueue_scriptsclasses\class-kp-assets.php:31
actionadmin_enqueue_scriptsclasses\class-kp-assets.php:32
actionwp_enqueue_scriptsclasses\class-kp-assets.php:35
actionwoocommerce_proceed_to_checkoutclasses\class-kp-assets.php:36
actionwoocommerce_widget_shopping_cart_buttonsclasses\class-kp-assets.php:37
actionwp_enqueue_scriptsclasses\class-kp-assets.php:40
filterscript_loader_tagclasses\class-kp-assets.php:65
actionwoocommerce_api_kp_wc_authorizationclasses\class-kp-callbacks.php:20
actionkp_wc_authorizationclasses\class-kp-callbacks.php:21
actioninitclasses\class-kp-callbacks.php:22
filterwoocommerce_update_order_review_fragmentsclasses\class-kp-checkout.php:19
filterwoocommerce_update_order_review_fragmentsclasses\class-kp-checkout.php:20
actionwoocommerce_review_order_before_submitclasses\class-kp-checkout.php:21
actionwoocommerce_pay_order_before_submitclasses\class-kp-checkout.php:22
actionwoocommerce_email_after_order_tableclasses\class-kp-email.php:21
actionadmin_initclasses\class-kp-gdpr.php:25
actionwoocommerce_checkout_order_processedclasses\class-kp-interoperability-token.php:23
actionwoocommerce_store_api_checkout_order_processedclasses\class-kp-interoperability-token.php:24
actionwoocommerce_after_calculate_totalsclasses\class-kp-interoperability-token.php:25
actionkp_plugin_features_initializedclasses\class-kp-klarna-express-checkout.php:31
filterwc_klarna_payments_supportsclasses\class-kp-klarna-express-checkout.php:49
filterhttp_headers_useragentclasses\class-kp-klarna-express-checkout.php:140
actionwoocommerce_after_calculate_totalsclasses\class-kp-session.php:64
actionwoocommerce_update_options_checkout_klarna_paymentsclasses\class-kp-settings-saved.php:36
actionwoocommerce_update_options_checkout_klarna_paymentsclasses\class-kp-settings-saved.php:37
filterwc_klarna_payments_create_session_argsclasses\class-kp-subscriptions.php:28
filterwc_klarna_payments_place_order_argsclasses\class-kp-subscriptions.php:29
filterwc_klarna_payments_create_customer_token_argsclasses\class-kp-subscriptions.php:30
filterwc_klarna_payments_update_session_argsclasses\class-kp-subscriptions.php:31
filterwoocommerce_pre_payment_completeclasses\class-kp-subscriptions.php:35
filterwc_klarna_payments_create_hpp_argsclasses\class-kp-subscriptions.php:38
filterwc_klarna_payments_create_session_argsclasses\class-kp-subscriptions.php:40
actionwoocommerce_account_view-subscription_endpointclasses\class-kp-subscriptions.php:42
actionwoocommerce_admin_order_data_after_billing_addressclasses\class-kp-subscriptions.php:45
filterallowed_redirect_hostsclasses\class-kp-subscriptions.php:47
actionkp_after_place_orderclasses\class-kp-subscriptions.php:50
actionwoocommerce_api_wc_gateway_klarna_paymentsclasses\class-wc-gateway-klarna-payments.php:113
actionwoocommerce_admin_order_data_after_billing_addressclasses\class-wc-gateway-klarna-payments.php:114
filterwc_get_templateclasses\class-wc-gateway-klarna-payments.php:115
filterwoocommerce_payment_gatewaysclasses\class-wc-gateway-klarna-payments.php:636
filterwc_kp_image_url_cart_itemclasses\requests\class-kp-requests.php:66
filterwc_kp_url_cart_itemclasses\requests\class-kp-requests.php:67
filterwc_kp_image_url_order_itemclasses\requests\class-kp-requests.php:68
filterwc_kp_url_order_itemclasses\requests\class-kp-requests.php:69
actionwp_headclasses\requests\helpers\class-kp-iframe.php:59
actioninitdependencies\krokedil\klarna-express-checkout\src\Assets.php:45
actionwp_enqueue_scriptsdependencies\krokedil\klarna-express-checkout\src\Assets.php:46
actionadmin_enqueue_scriptsdependencies\krokedil\klarna-express-checkout\src\Assets.php:47
filterscript_loader_tagdependencies\krokedil\klarna-express-checkout\src\Assets.php:48
actioninitdependencies\krokedil\klarna-express-checkout\src\KlarnaExpressCheckout.php:74
actionwoocommerce_single_product_summarydependencies\krokedil\klarna-express-checkout\src\KlarnaExpressCheckout.php:75
actionwoocommerce_blocks_loadeddependencies\krokedil\klarna-express-checkout\src\KlarnaExpressCheckout.php:76
actionwp_enqueue_scriptsdependencies\krokedil\klarna-express-checkout\src\KlarnaExpressCheckout.php:121
actioninitdependencies\krokedil\klarna-express-checkout\src\OneStepCheckout.php:28
actionwoocommerce_checkout_update_order_reviewdependencies\krokedil\klarna-express-checkout\src\Session.php:20
actionwoocommerce_thankyoudependencies\krokedil\klarna-express-checkout\src\Session.php:21
actionwoocommerce_thankyoudependencies\krokedil\klarna-express-checkout\src\Session.php:22
filterwc_gateway_klarna_payments_settingsdependencies\krokedil\klarna-express-checkout\src\Settings.php:43
actionwoocommerce_admin_field_kec_webhook_buttondependencies\krokedil\klarna-express-checkout\src\Settings.php:44
filterwoocommerce_generate_kec_webhook_button_htmldependencies\krokedil\klarna-express-checkout\src\Settings.php:45
actionadmin_initdependencies\krokedil\klarna-express-checkout\src\WebhookSetup.php:44
actionkp_plugin_features_initializeddependencies\krokedil\klarna-onsite-messaging\src\KlarnaOnsiteMessaging.php:56
actionwidgets_initdependencies\krokedil\klarna-onsite-messaging\src\KlarnaOnsiteMessaging.php:72
actionwp_enqueue_scriptsdependencies\krokedil\klarna-onsite-messaging\src\KlarnaOnsiteMessaging.php:75
actionadmin_noticesdependencies\krokedil\klarna-onsite-messaging\src\KlarnaOnsiteMessaging.php:77
actionwoocommerce_blocks_loadeddependencies\krokedil\klarna-onsite-messaging\src\KlarnaOnsiteMessaging.php:94
actionwoocommerce_blocks_cart_block_registrationdependencies\krokedil\klarna-onsite-messaging\src\KlarnaOnsiteMessaging.php:231
actionwp_headdependencies\krokedil\klarna-onsite-messaging\src\Pages\Cart.php:27
actionwc_ajax_kosm_get_cart_totaldependencies\krokedil\klarna-onsite-messaging\src\Pages\Cart.php:28
actionwoocommerce_cart_totals_after_order_totaldependencies\krokedil\klarna-onsite-messaging\src\Pages\Cart.php:41
actioninitdependencies\krokedil\klarna-onsite-messaging\src\Pages\Page.php:82
actionwp_headdependencies\krokedil\klarna-onsite-messaging\src\Pages\Product.php:45
actionadmin_noticesdependencies\krokedil\klarna-order-management\src\KlarnaOrderManagement.php:73
actionwc_klarna_payments_supportsdependencies\krokedil\klarna-order-management\src\KlarnaOrderManagement.php:109
actionkco_wc_supportsdependencies\krokedil\klarna-order-management\src\KlarnaOrderManagement.php:112
actionwoocommerce_order_status_cancelleddependencies\krokedil\klarna-order-management\src\KlarnaOrderManagement.php:118
actionwoocommerce_order_status_completeddependencies\krokedil\klarna-order-management\src\KlarnaOrderManagement.php:120
actionwoocommerce_saved_order_itemsdependencies\krokedil\klarna-order-management\src\KlarnaOrderManagement.php:122
filterwc_klarna_payments_process_refunddependencies\krokedil\klarna-order-management\src\KlarnaOrderManagement.php:124
filterwc_klarna_checkout_process_refunddependencies\krokedil\klarna-order-management\src\KlarnaOrderManagement.php:125
actionwc_klarna_notification_listenerdependencies\krokedil\klarna-order-management\src\KlarnaOrderManagement.php:127
actionadmin_enqueue_scriptsdependencies\krokedil\klarna-order-management\src\KlarnaOrderManagement.php:128
actionadd_meta_boxesdependencies\krokedil\klarna-order-management\src\MetaBox.php:31
actionwoocommerce_process_shop_order_metadependencies\krokedil\klarna-order-management\src\MetaBox.php:32
filterkom_meta_environmentdependencies\krokedil\klarna-order-management\src\MetaBox.php:33
actionkom_meta_action_optionsdependencies\krokedil\klarna-order-management\src\MetaBox.php:34
actionkom_meta_action_optionsdependencies\krokedil\klarna-order-management\src\MetaBox.php:35
actionkom_meta_action_optionsdependencies\krokedil\klarna-order-management\src\MetaBox.php:36
actionkom_meta_action_tipsdependencies\krokedil\klarna-order-management\src\MetaBox.php:37
actionkom_meta_action_tipsdependencies\krokedil\klarna-order-management\src\MetaBox.php:38
actionkom_meta_action_tipsdependencies\krokedil\klarna-order-management\src\MetaBox.php:39
actionwp_insert_postdependencies\krokedil\klarna-order-management\src\SellersApp.php:32
filterwc_gateway_klarna_payments_settingsdependencies\krokedil\klarna-order-management\src\Settings.php:20
filterkco_wc_gateway_settingsdependencies\krokedil\klarna-order-management\src\Settings.php:21
filterwoocommerce_generate_krokedil_section_start_htmldependencies\krokedil\settings-page\src\Gateway.php:54
filterwoocommerce_generate_krokedil_section_end_htmldependencies\krokedil\settings-page\src\Gateway.php:55
actionparse_requestdependencies\krokedil\sign-in-with-klarna\src\Redirect.php:33
actioninitdependencies\krokedil\sign-in-with-klarna\src\Settings.php:94
filterwc_gateway_klarna_payments_settingsdependencies\krokedil\sign-in-with-klarna\src\Settings.php:108
actioninitdependencies\krokedil\sign-in-with-klarna\src\SignInWithKlarna.php:63
actionwoocommerce_proceed_to_checkoutdependencies\krokedil\sign-in-with-klarna\src\SignInWithKlarna.php:87
actionwoocommerce_login_form_startdependencies\krokedil\sign-in-with-klarna\src\SignInWithKlarna.php:88
actionwoocommerce_widget_shopping_cart_buttonsdependencies\krokedil\sign-in-with-klarna\src\SignInWithKlarna.php:89
actionwp_enqueue_scriptsdependencies\krokedil\sign-in-with-klarna\src\SignInWithKlarna.php:91
actionadmin_enqueue_scriptsdependencies\krokedil\sign-in-with-klarna\src\SignInWithKlarna.php:94
actionwoocommerce_system_status_reportdependencies\krokedil\support\src\SystemReport.php:46
actionwoocommerce_cleanup_logsdependencies\krokedil\support\src\SystemReport.php:47
actionadd_meta_boxesdependencies\krokedil\woocommerce\src\OrderMetabox.php:59
actionadmin_initdependencies\krokedil\woocommerce\src\OrderMetabox.php:60
actionadmin_noticesklarna-payments-for-woocommerce.php:250
actionadmin_noticesklarna-payments-for-woocommerce.php:251
actionadmin_noticesklarna-payments-for-woocommerce.php:252
actionplugins_loadedklarna-payments-for-woocommerce.php:253
filterwoocommerce_checkout_posted_dataklarna-payments-for-woocommerce.php:255
filterkosm_data_client_idklarna-payments-for-woocommerce.php:257
actioninitklarna-payments-for-woocommerce.php:259
actionadmin_noticesklarna-payments-for-woocommerce.php:282
filterwc_gateway_klarna_payments_settingsklarna-payments-for-woocommerce.php:296
actionbefore_woocommerce_initklarna-payments-for-woocommerce.php:335
actionadmin_noticesklarna-payments-for-woocommerce.php:561
actionrest_api_initsrc\Api\Registry.php:29
filterwc_kp_checkout_paramssrc\Compatibility\FluidCheckout.php:31
Maintenance & Trust

Klarna for WooCommerce Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedFeb 25, 2026
PHP min version7.4
Downloads1.8M

Community Trust

Rating46/100
Number of ratings19
Active installs30K
Developer Profile

Klarna for WooCommerce Developer Profile

Klarna

2 plugins · 40K total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
8 days
View full developer profile
Detection Fingerprints

How We Detect Klarna for WooCommerce

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/klarna-payments-for-woocommerce/assets/css/klarna-payments-frontend.css/wp-content/plugins/klarna-payments-for-woocommerce/assets/css/klarna-payments-backend.css/wp-content/plugins/klarna-payments-for-woocommerce/assets/js/klarna-payments-frontend.js/wp-content/plugins/klarna-payments-for-woocommerce/assets/js/klarna-payments-backend.js/wp-content/plugins/klarna-payments-for-woocommerce/assets/js/klarna-payments-checkout.js/wp-content/plugins/klarna-payments-for-woocommerce/assets/js/klarna-payments-express-checkout.js
Script Paths
/wp-content/plugins/klarna-payments-for-woocommerce/assets/js/klarna-payments-frontend.js/wp-content/plugins/klarna-payments-for-woocommerce/assets/js/klarna-payments-backend.js/wp-content/plugins/klarna-payments-for-woocommerce/assets/js/klarna-payments-checkout.js/wp-content/plugins/klarna-payments-for-woocommerce/assets/js/klarna-payments-express-checkout.js
Version Parameters
/wp-content/plugins/klarna-payments-for-woocommerce/assets/css/klarna-payments-frontend.css?ver=/wp-content/plugins/klarna-payments-for-woocommerce/assets/css/klarna-payments-backend.css?ver=/wp-content/plugins/klarna-payments-for-woocommerce/assets/js/klarna-payments-frontend.js?ver=/wp-content/plugins/klarna-payments-for-woocommerce/assets/js/klarna-payments-backend.js?ver=/wp-content/plugins/klarna-payments-for-woocommerce/assets/js/klarna-payments-checkout.js?ver=/wp-content/plugins/klarna-payments-for-woocommerce/assets/js/klarna-payments-express-checkout.js?ver=

HTML / DOM Fingerprints

CSS Classes
klarna-payments-express-checkout-button
Data Attributes
data-klarna-express-checkout-button
JS Globals
KlarnaPaymentsFrontendKlarnaPaymentsExpressCheckout
REST Endpoints
/wp-json/klarna-payments/v1/express-checkout/create-order/wp-json/klarna-payments/v1/express-checkout/validate-order
FAQ

Frequently Asked Questions about Klarna for WooCommerce