Vite Coupon
Vite Coupon has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of October 2026. Their average CVSS score is 8.8, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 1 high.
The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (100%).
The one issue recorded for Vite Coupon has a vendor fix available, so running the current release closes it.
All of these findings were reported by stealthcopter. Vite Coupon is installed on roughly 60 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.3.
CVE-2025-32642Vite Coupon <= 1.0.9 - Cross-Site Request Forgery to Remote Code Execution
Read the full analysisVulnerability Records

Vite Coupon
Author
appsbd
Vite Coupon simplifies coupon management for WooCommerce stores. Whether you want to offer discounts, free products, or buy-one-get-one (BOGO) deals, this plugin has you covered. With an intuitive interface, you can create and manage coupons effortlessly, enhancing your marketing efforts and increasing customer satisfaction. Key features of Vite Coupon include: Multiple Coupon Types: Choose from various coupon types, including discount percentage, fixed discount, product discount, free product, and BOGO product, to suit your promotional needs. Easy Management: Create, edit, and delete coupons with ease. The plugin provides a user-friendly interface for efficient coupon management. Integration with VitePOS: Seamlessly integrate Vite Coupon with VitePOS, ensuring a smooth experience for your point-of-sale transactions. Customizable Settings: Tailor coupon settings to match your business requirements. Set usage limits, expiration dates, minimum purchase amounts, and more. Track Performance: Monitor the performance of your coupons with built-in tracking features. Gain insights into usage statistics and adjust your marketing strategies accordingly. JavaScript Source Code Link https://github.com/appsbd/vite-coupon-js External Service Disclosure This plugin connects to an external service to retrieve information about related addons and enhancements for the Vite Coupon plugin. Service: addon.appsbd.com Purpose: To fetch data about available plugin addons and related functionalities.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C