I understand... is there even a way to specify a return URL to WorldPay that the customer could click on? If so, make that URL clear the session variables.

If not, you really don't need to worry about the leftover session variables. They'll actually be reset the next time the customer browses to the checkout page, so there shouldn't be any overlap or leftover data.