Really Simple Security – Simple and Performant Security (formerly Really Simple SSL) vs Power Coupons for WooCommerce

Power Coupons is a WordPress coupon plugin built for WooCommerce stores that want discount rules, dynamic discounts, and auto-apply coupons—without turning the checkout into a “find the coupon field” scavenger hunt. If you’ve ever run a promotion and still watched shoppers drop off at cart or checkout, it’s often not because the deal wasn’t good. It’s because the coupon experience was clunky: The offer was buried in a banner. The code was forgotten, mistyped, or never entered. The cart didn’t clearly explain what qualifies. Another discount tool conflicted, and nobody could tell why. Power Coupons is designed to reduce that friction. Instead of relying on shoppers to enter codes, you can show eligible offers in-cart and apply discounts automatically when conditions are met. The result is a cleaner buying experience and promotions that are easier to manage (and easier to troubleshoot) over time. Who is this for? Store owners who want a WordPress coupon plugin that’s easy to set up and easy to audit later. DTC and growing brands focused on increasing AOV with dynamic discounts and cart incentives. Retail teams running frequent promotions who need rule-based discounts that don’t require codes. Agencies managing multiple WooCommerce sites that want consistent discount logic and a clean admin experience. What you can build with Power Coupons Use simple conditions (cart subtotal, products, categories, quantity, combinations) to trigger offers at the right time. For example: Auto-apply a discount when the cart subtotal crosses a threshold (great for “spend more” campaigns). Apply a category-based coupon rule (e.g., discount only for a seasonal collection). Run quantity-based deals (bulk discounts / quantity breaks) to increase basket size. Show relevant offers in the cart so shoppers see what they can unlock before checkout. How it works (quick overview) Create a discount rule and choose what triggers it (subtotal, products, categories, quantities, combinations). Set what happens when the rule matches (auto-apply coupon / discount behavior). Optional: exclude products or categories to protect margins. Test with a real cart to confirm the discount applies and updates as the cart changes. Launch your offer and let the cart do the work—no coupon codes required. How to auto-apply your first discount (quick start) Install and activate Power Coupons. Go to WooCommerce > Coupons and create a new rule. Choose a simple condition (e.g., cart subtotal above a set amount). Save, then test by adding products to the cart until the condition is met. If the discount doesn’t update immediately, exclude Cart and Checkout pages from caching and retest in an incognito window. Key features Auto-apply coupons (no codes needed): discounts apply automatically when conditions are met. Discount rules for WooCommerce: build rule logic around cart total, products, categories, quantities, and combinations. Dynamic discounts: offers update in real time as the cart changes, so shoppers always see what they qualify for. Clean admin workflow: create and manage rules without an overwhelming “settings maze”. Clean shopper UI: show only relevant offers in the cart to reduce friction and confusion. Designed to stay lightweight: helps reduce plugin overlap by keeping coupon rules and cart incentives in one place. Planned features (Roadmap) These features are on the roadmap and will appear in future updates: WooCommerce BOGO offers: Buy X Get Y, free gifts, and advanced BOGO rules. Spend-more incentives: “Spend more to unlock a reward” nudges and cart progress messaging. Rewards & loyalty points: earn points on purchases and redeem them for discounts. Coupon analytics: track coupon usage and promotion performance. Works well in typical WooCommerce setups Power Coupons is made for WooCommerce cart and checkout flows. Most stores combine discounts with themes, page builders, and common WooCommerce add-ons. As with any pricing/coupon system, if you run multiple “discount engines” at the same time, test carefully to avoid stacking surprises. External services This plugin uses external third-party services in specific situations. Below is a detailed disclosure of these services, when they are used, and what data is transmitted. Google Fonts When it’s used: Power Coupons loads the Figtree font family from Google Fonts CDN to enhance the visual appearance of the plugin’s admin interface in the WordPress dashboard. This resource is loaded ONLY on the plugin’s admin pages (Power Coupons settings and coupon edit screens) and is NOT loaded on the frontend of your website or visible to your customers. What data is transmitted: When an administrator accesses Power Coupons admin pages, a standard HTTP request is made to Google Fonts servers. This request may include: – The URL of the admin page being accessed – The administrator’s IP address (standard for any HTTP request) – Browser information (user agent) – Timestamp of the request Service provider: Service: Google Fonts Service URL: https://fonts.googleapis.com Privacy Policy: https://developers.google.com/fonts/faq/privacy Terms of Service: https://policies.google.com/terms Legal basis: The use of Google Fonts in the admin area is necessary for the proper presentation of the plugin interface to administrators. No personal data from your website visitors or customers is transmitted to Google Fonts, as this service is only used in the WordPress admin area. How to disable: If you prefer not to use Google Fonts for privacy or compliance reasons, you can disable it by adding this code to your theme’s functions.php file: add_action( 'admin_enqueue_scripts', function() { wp_dequeue_style( 'power-coupons-font' ); }, 99 ); Note: Disabling Google Fonts may slightly affect the visual appearance of the plugin’s admin interface but will not affect functionality. Contributors & Developers Power Coupons is built and maintained by the team behind CartFlows and Brainstorm Force, creators of some of the most trusted WooCommerce and WordPress products. We welcome feedback, ideas, and contributions to help make Power Coupons even better 🚀 Development & Source Code This plugin includes compiled JavaScript assets for production use. The original, human-readable source code for these files is included in this plugin. React / JavaScript source code: – Located in: admin/assets/src/ – Built files output to: admin/assets/build/ The files in admin/assets/build/ are generated from the corresponding source files in admin/assets/src/ using standard JavaScript build tools such as wp-scripts.

Easily improve site security with WordPress Hardening, Two-Factor Authentication (2FA), Login Protection, Vulnerability Detection and SSL certificate. Really simple, Effective and Performant WordPress Security Really Simple Security is the most lightweight and easy-to-use security plugin for WordPress. It secures your WordPress website with SSL certificate generation, including proper 301 https redirection and SSL enforcement, scanning for possible vulnerabilities, Login Protection and implementing essential WordPress hardening features. We believe that security should have the absolute minimum effect on website performance, user experience and maintainability. Therefore, Really Simple Security is: Lightweight: Every security feature is developed with a modular approach and with performance in mind. Disabled features won’t load any redundant code. Easy-to-use: 1-minute configuration with short onboarding setup. Security Features Easy SSL Migration Migrates your website to HTTPS and enforces SSL in just one click. 301 redirect via PHP or .htaccess Secure cookies Let’s Encrypt: Install an SSL Certificate if your hosting provider supports manual installation. Server Health Check: Your server configuration is every bit as important for your website security. WordPress Hardening Tweak your configuration and keep WordPress fortified and safe by tackling potential weaknesses. Prevent code execution in the uploads folder Prevent login feedback and disable user enumeration Disable XML-RPC Disable directory browsing Username restrictions (block ‘admin’ and public names) and much more.. Vulnerability Detection Get notified when plugins, themes or WP core contain vulnerabilities and need appropriate action. Login Protection Allow or enforce Two-Factor Authentication (2FA) for specific user roles. Users receive a two-factor code via Email. Improve Security with Really Simple Security Pro Protect your site with all essential security features by upgrading to Really Simple Security Pro. Advanced SSL enforcement Mixed Content Scan & Fixer. Detect files that are requested over HTTP and fix them to HTTPS, both Front- and Back-end. Enable HTTP Strict Transport Security and configure your site for the HSTS Preload list. Firewall Really Simple Security Pro includes a performant and efficient WordPress firewall, to stop bots, crawlers and bad actors with IP and username blocks. 404 blocking – Blocks crawlers as they trigger unusual numbers of 404 errors. Region blocking – Only allow/block access to your site from specific regions. Automated and customisable Firewall rules. IP blocklist and allowlist. Security Headers Security headers protect your site visitors against the risk of clickjacking, cross-site-forgery attacks, stealing login credentials and malware. Independent of your Server Configuration, works on Apache, LiteSpeed, NGINX, etc. Protect your website visitors with X-XSS Protection, X-Content-Type-Options, X-Frame-Options, a Referrer Policy and CORS headers. Automatically generate your WordPress-tailored Content Security Policy. Vulnerability Measures When a vulnerability is detected in a plugin, theme or WordPress core you will get notified accordingly. With Vulnerability Measures, you can configure simple but effective measures to make sure that a critical vulnerability won’t remain unattended. Force update: An update process will be tried multiple times until it can be assumed development of a theme or plugin is abandoned. You will be notified during these steps. Quarantine: When a plugin or theme can’t be updated to solve a vulnerability, Really Simple Security can quarantine the plugin. Advanced Site Hardening Choose a custom login URL Automated File Permissions check and fixer Rename and randomize your database prefix Change the debug.log file location to a non-public folder Disable application passwords Control admin creation Disable HTTP methods, reducing HTTP requests Login Protection Secure your website’s login process and user accounts with powerful security measures. Two-Step verification (Email login) 2FA (two factor authentication) with TOTP Passwordless login with passkey login Enforce strong passwords and frequent password change Limit Login Attempts With Limit Login Attempts you can configure a threshold to temporarily or permanently block IP addresses or (non-existing) usernames. You can also throw a CAPTCHA after a failed login (hCaptcha or Google reCaptcha) Access Control Restrict access to your site for specific regions. Add specific IP addresses or IP ranges to the Blocklist or Allowlist. Useful Links Documentation Security Definitions Translate Really Simple Security Issues & pull requests Feature requests Love Really Simple Security? If you want to support the continuing development of this plugin, please consider buying Really Simple Security Pro, which includes some excellent security features and premium support. About Really Simple Plugins Our mission is to make complex WordPress requirements really easy. Really Simple Security is developed by Really Simple Plugins. For generating SSL certificates, Really Simple Security uses the le acme2 PHP Let’s Encrypt client library, thanks to ‘fbett’ for providing it. Vulnerability Detection uses WP Vulnerability, an open-source initiative by Javier Casares. Want to join as a collaborator? We’re on GitHub as well!