Sitewide Discount for WooCommerce: Apply Discount to All Products
Sitewide Discount for WooCommerce: Apply Discount to All Products has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of October 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for Sitewide Discount for WooCommerce: Apply Discount to All Products has a vendor fix available, so running the current release closes it.
All of these findings were reported by Muhammad Yudha - DJ. Sitewide Discount for WooCommerce: Apply Discount to All Products is installed on roughly 600 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.3.
CVE-2025-48248Sitewide Discount for WooCommerce: Apply Discount to All Products <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records

Sitewide Discount for WooCommerce: Apply Discount to All Products
Author
WPFactory
woocommerceSitewide Discount for WooCommerce: Apply Discount to All Products plugin lets you add global shop discount to all or a group of WooCommerce products. ✅ Main Features Set discounts as percent or as fixed values. Set active date(s) for the discount. Choose products scope (sale or non-sale products). Include/exclude product categories. Include/exclude product tags. Include/exclude individual products. Include/exclude custom product taxonomies, e.g., product brands. Include/exclude users. Include/exclude user roles. And more… ℹ More The plugin is “High-Performance Order Storage (HPOS)” compatible. 🗘 Feedback We are open to your suggestions and feedback. Thank you for using or trying out one of our plugins! Visit plugin site.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C