Product comparison plugins add and remove items through AJAX, store the visitor’s comparison list, and render a table of product attributes on the front end. YITH WooCommerce Compare version 3.14.0 has successfully completed the CleanTalk Plugin Security Certification process and received PSC-2026-65706, confirming that the review focused on the AJAX add/remove endpoints, product ID handling, output escaping in the comparison table, and sanitization of the plugin’s settings.
| Name of | YITH WooCommerce Compare |
| Version | 3.14.0 |
| Active installations | 100,000+ |
| Description | Lets WooCommerce customers compare products side by side in a configurable comparison table, choosing which attributes and fields are shown, with an AJAX-driven add/remove and compare view. |
| Security | Successfully tested for: SQL Injection (SQLi) Cross-Site Scripting (XSS) – Stored and Reflected Cross-Site Request Forgery (CSRF) Authentication Vulnerabilities Authentication Bypass Exploits Privilege Escalation Buffer Overflow Denial-of-Service (DoS) vectors Data Leakage Vulnerabilities Insecure Dependency Usage Remote Code Execution (RCE) Risks Unauthorized File Access Insufficient Injection Protection Information Disclosure via Misconfigured Endpoints |
| CleanTalk Certification | Proudly earned the “Plugin Security Certification” (PSC) from CleanTalk, indicating adherence to stringent security standards. |
| Additional Information | Use YITH WooCommerce Compare with confidence backed by the “Plugin Security Certification” (PSC). Keep WooCommerce and the plugin updated, restrict admin settings to trusted roles, and review any custom attributes exposed in the comparison table. |
| Plugin Security Certification by CleanTalk |  |
| Logo of the plugin |  |
PSC by CleantalkJoin the community of developers who prioritize security. Highlight your plugin in the WordPress catalog.
Key Features
YITH WooCommerce Compare adds a “compare” action to WooCommerce products so visitors can line up several items in a single comparison table. Store owners choose which attributes and fields appear, style the table and the compare button, and let customers add or remove products without reloading the page. The comparison view works through shortcodes and product page buttons.
Security Assurance
The CleanTalk Plugin Security Certification evaluation focused on the AJAX endpoints that add and remove products from the comparison list, validation and sanitization of product identifiers and other request parameters, output escaping of product data and attributes rendered in the comparison table, and capability and nonce checks on the plugin’s settings. The review also considered protection against injection through comparison parameters and unauthorized changes to configuration.
The plugin has been successfully tested for:
✅ Information Leakage Vulnerabilities
✅ SQL Injection Vulnerabilities
✅ Cross-Site Scripting (XSS) Attacks
✅ Cross-Site Request Forgery (CSRF) Attacks
✅ Authentication and Authentication Bypass Vulnerabilities
✅ Privilege Escalation Vulnerabilities
✅ Buffer Overflow Vulnerabilities
✅ Denial-of-Service (DoS) Vulnerabilities
✅ Data Leakage Vulnerabilities
✅ Insecure Dependencies
✅ Code Execution Vulnerabilities
✅ File Unauthorized Access Vulnerabilities
✅ Insufficient Injection Protection
Conclusion
With PSC-2026-65706, YITH WooCommerce Compare version 3.14.0 demonstrates strong baseline security for its product comparison workflows. The certification addresses AJAX request validation, product data escaping, settings integrity, and injection protection. Site owners should keep WooCommerce and the plugin updated, restrict configuration to trusted roles, and review custom attributes shown in the comparison table.
Note: The date and certification information may change over time. It is advisable to verify the latest details on the plugin developer’s website.
