YITH WooCommerce Compare

YITH WooCommerce Compare has 6 disclosed vulnerabilities in the WordSec catalog, reported between 2016 and 2025; all 6 are fixed as of September 2026. Their average CVSS score is 5.9, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 2 high. 2022 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 2 of the records (33%). Other recurring categories include Deserialization Of Untrusted Data, Missing Authorization.

Every one of the 6 issues recorded for YITH WooCommerce Compare has a vendor fix available, so running the current release closes all known holes.

5 independent researchers contributed these findings, one record each. YITH WooCommerce Compare is installed on roughly 100,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSMedium
5.9/ 10
Patch Coverage100%
Open

0

Fixed

6

Get automatic notifications for all YITH WooCommerce Compare vulnerabilities before they are exploited.

Highest severity on recordCVSS 8.8

YITH WooCommerce Compare <= 2.0.9 - Unauthenticated PHP Object Injection

Read the full analysis

Vulnerability Records

6 records
YITH WooCommerce Compare banner
Latestv3.14.0

YITH WooCommerce Compare

YITHEMES

Author

YITHEMES

4.1(38)
82/100
Last Updated
2026-08-26 (18d ago)
Active Installs
100,000+
Downloads
12,114,489
Requires WP
6.9+
Requires PHP
8.0+
Tested up to
WP 7.1
Created
2013-06-24 (13y ago)
Requires Plugins
woocommerce

YITH WooCommerce Compare plugin is an extension of WooCommerce plugin that allow your users to compare some products of your shop. All products are saved in one complete table where the user can see the difference between the products. Each product features can be set with the woocommerce attributes in the product configuration. You can also add a simple widget with the list of products the users have added, where you can manage them. Also you can simply customize the compare table with your style, by editing the specific template. Full documentation is available here. This plugin is 100% compatible with WPML Suggestions If you have suggestions about how to improve YITH WooCommerce Compare, you can write us so we can bundle them into YITH WooCommerce Compare. Translators Available Languages English (Default) Italiano If you can’t find this plugin in your language and want to translate it, use the dedicated tool at Translating WordPress. Or, if you have created your own language pack, or have an update for an existing one, you can send it as an email attachment from our Contacts page and we will bundle into YITH WooCommerce Compare. Documentation Full documentation is available here.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C