WooCommerce Compare Products Pro · Sep 09, 2026, 03:43 AM UTC
Cleanzip276 entriescrc-verifiedphppngsvn-base
ZIP
1.24 MB
package size
Analysis
6 checks · 0 flagged
ClamAV 1.5.4 signature scan
3,628,051 signatures · db v28115
Undetected
ClamAV PUA heuristics
no unwanted applications
Undetected
Archive integrity
CRC verified for every entry
Valid
Path traversal (Zip Slip)
no entry escapes the extraction directory
Undetected
Encrypted content
all entries readable and scanned
None
Executable binaries
no .exe / .dll / .so / script binaries
None
Package
Plugin header
Name
WooCommerce Compare Products PRO
Version
2.2.1
Version check
Match
package and product page both state 2.2.1
Author
A3 Revolution
Author URI
http://www.a3rev.com
Project URI
http://woothemes.com/woocommerce
Description
Compare Products uses your existing WooCommerce Product Categories and Product Attributes to create Compare Product Attributes for all your products. A sidebar Compare basket is created that users add products to and view the Comparison in a Compare this pop-up screen.
License
This software is distributed under the terms of GNU GENERAL PUBLIC LICENSE Version 3, 29 June 2007
Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
JPG · package root
ed39f1613878c521…
231.3 KB
JPG · package root
0146d0b12407a21c…
214.2 KB
JPG · package root
163574d9546ece31…
133.1 KB
PHP · admin
c0302eb6f1f1c427…
121.4 KB
JPG · package root
132e38fede99a72f…
111.6 KB
JPG · package root
a63e6a2348f0d459…
100.3 KB
PO · languages
443950e3d643a3e7…
85.1 KB
JPG · package root
3fa9e397b6edf50f…
64.6 KB
Code signals
3 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
unserialize
Unsafe when given untrusted input
Deserialization4
eval (JavaScript)
Executes a string as code
Code execution2
create_function
Removed in PHP 8; builds a function from a string
Code execution1
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.