PLUGIN SECURITY
Is Woo Discount Rules safe?
The discount plugin for WooCommerce helps you create bulk discount, quantity discount, storewide sale, dynamic pricing discount offers easily.
What this plugin does
- Slug:
woo-discount-rules - Author: flycart
- 100000+ active installs
- 98/100 rating (1353 reviews on wordpress.org)
- 2967929 all-time downloads
- On WordPress.org since 2016-12-13
bulk discountcouponsdiscountsdynamic pricingwoocommerce
Maintenance status
- Latest known version: 2.6.16
- Last updated: 2026-08-25 8:15am GMT
- Tested up to WordPress: 7.1
- Max supported PHP (analyzed): 8.4
Known vulnerabilities
3 known CVEs on file for Woo Discount Rules. Reported between 2020 and 2024.
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2024-8541 | Discount Rules for WooCommerce [woo-discount-rules] < 2.6.6 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.1 | < 2.6.6 | 2.6.6 | 2024-10-15 | ✓ fixed in latest |
| CVE-2022-2090 | Discount Rules for WooCommerce [woo-discount-rules] < 2.4.2 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.1 | < 2.4.2 | 2.4.2 | 2022-06-27 | ✓ fixed in latest |
| — | Discount Rules for WooCommerce [woo-discount-rules] < 2.2.1 | — | Unknown | < 2.2.1 | 2.2.1 | 2020-09-17 | ✓ fixed in latest |
| — | Discount Rules for WooCommerce [woo-discount-rules] < 2.2.1 | — | Unknown | < 2.2.1 | 2.2.1 | 2020-09-17 | ✓ fixed in latest |
| — | Discount Rules for WooCommerce [woo-discount-rules] < 2.1.0 | — | Unknown | < 2.1.0 | 2.1.0 | 2020-08-20 | ✓ fixed in latest |
| CVE-2020-36834 | Discount Rules for WooCommerce [woo-discount-rules] < 2.1.0 | Missing Authorization | Medium 6.3 | < 2.1.0 | 2.1.0 | 2020-08-20 | ✓ fixed in latest |
| — | Discount Rules for WooCommerce [woo-discount-rules] < 2.1.0 | — | Unknown | < 2.1.0 | 2.1.0 | — | ✓ fixed in latest |
| — | Discount Rules for WooCommerce [woo-discount-rules] < 2.2.1 | — | Unknown | < 2.2.1 | 2.2.1 | — | ✓ fixed in latest |
+ 2 more known vulnerabilities
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| — | Discount Rules for WooCommerce < 2.1.0 - Multiple Vulnerabilities | — | Unknown | < 2.1.0 | 2.1.0 | — | ✓ fixed in latest |
| — | Discount Rules for WooCommerce < 2.2.1 - Multiple Authorization Bypass | — | Unknown | < 2.2.1 | 2.2.1 | — | ✓ fixed in latest |
How to fix it
Keep Woo Discount Rules updated — 2.6.16 is the latest version on wordpress.org, and each CVE above lists the exact release that fixed it ("Fixed in").
This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.
Safer / more established alternatives
- Advanced Dynamic Pricing and Discount Rules for WooCommerce — 20000+ active installs — 94/100 (120) — max PHP 8.4
- Extended Coupon Features for WooCommerce FREE — 10000+ active installs — 100/100 (69) — max PHP <8.0
- Discount Rules and Dynamic Pricing for WooCommerce — 9000+ active installs — 94/100 (247) — max PHP 8.4
- Coupon Generator for WooCommerce — 9000+ active installs — 90/100 (35)
- Simple Discount Rules for Woocommerce — 4000+ active installs — 92/100 (73)
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.