This vulnerability in Klarna Order Management for WooCommerce involves the insertion of sensitive information into debugging code, which can be retrieved by an attacker with high privileges. The affected versions are up to 1.9.8. The CVSS vector indicates network attack vector, high attack complexity, high privileges required, no user interaction, and a scope change with high confidentiality impact, low integrity impact, and no availability impact. No patch or vendor advisory is provided, and the product is not a cloud service.

An attacker with high privileges on the affected system could retrieve sensitive information embedded in debugging code, potentially leading to confidentiality breaches. The integrity impact is low, and availability is not affected. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or workaround is provided, users should monitor Klarna's advisories for updates. Restricting access to high-privilege accounts and limiting exposure of debugging information may reduce risk until a fix is available.