Behavioral analytics integrations add tracking code and connect website activity to a remote reporting project. Microsoft Clarity version 0.10.37 has successfully completed the CleanTalk Plugin Security Certification process and received PSC-2026-65712. The review focused on project configuration, permissions for analytics settings, tracking code output, integration data, and communication with Microsoft Clarity.
| Name of | Microsoft Clarity |
| Version | 0.10.37 |
| Active installations | 200,000+ |
| Description | Connects WordPress to Microsoft Clarity for session recordings, heatmaps, behavior insights, and a dashboard that helps site owners understand visitor interactions. |
| Security | Successfully tested for: SQL Injection (SQLi) Cross-Site Scripting (XSS) – Stored and Reflected Cross-Site Request Forgery (CSRF) Authentication Vulnerabilities Authentication Bypass Exploits Privilege Escalation Buffer Overflow Denial-of-Service (DoS) vectors Data Leakage Vulnerabilities Insecure Dependency Usage Remote Code Execution (RCE) Risks Unauthorized File Access Insufficient Injection Protection Information Disclosure via Misconfigured Endpoints |
| CleanTalk Certification | Awarded PSC-2026-65712 through the CleanTalk Plugin Security Certification program for version 0.10.37. |
| Additional Information | Use the intended Clarity project, review masking and consent settings in the service, and restrict access to configuration. Recheck tracking after theme or consent management changes. |
| Plugin Security Certification by CleanTalk |  |
| Logo of the plugin |  |
PSC by CleantalkMake security review part of your plugin development process and give WordPress site owners a clear certification reference.
Key Features
Microsoft Clarity provides session recordings, click and scroll heatmaps, and reports that highlight patterns such as repeated clicks or navigation difficulties. The service offers a metrics dashboard and Copilot summaries for supported reports. The WordPress plugin simplifies the connection to a Clarity project, allowing site owners to use these analytics tools without manually placing the tracking integration throughout the site.
Security Assurance
The review addressed access to the plugin configuration, the treatment of project identifiers and integration values, and the way analytics code reaches the public page. Dashboard output and communication with the external service were included in the certification scope. The evaluation concerns the WordPress integration and its configured behavior.
The plugin has been successfully tested for:
✅ Information Leakage Vulnerabilities
✅ SQL Injection Vulnerabilities
✅ Cross-Site Scripting (XSS) Attacks
✅ Cross-Site Request Forgery (CSRF) Attacks
✅ Authentication and Authentication Bypass Vulnerabilities
✅ Privilege Escalation Vulnerabilities
✅ Buffer Overflow Vulnerabilities
✅ Denial-of-Service (DoS) Vulnerabilities
✅ Data Leakage Vulnerabilities
✅ Insecure Dependencies
✅ Code Execution Vulnerabilities
✅ File Unauthorized Access Vulnerabilities
✅ Insufficient Injection Protection
Conclusion
Microsoft Clarity version 0.10.37 has been assigned PSC-2026-65712. The reviewed scope covers the WordPress configuration and tracking integration that connect the site to Clarity reporting. Site owners should keep the plugin updated and review privacy, consent, and masking choices for their own pages and visitors.
Note: The date and certification information may change over time. It is advisable to verify the latest details on the plugin developer’s website.
