WooCommerce Cover Merchandise decides what every customer is allowed to see in your catalog. Construct a rule from 4 plain components: who it applies to, what it covers, what it does, and optionally when it runs. Every little thing else exists to make it possible for rule is definitely enforced, all over the place, and that search engines like google are instructed one thing coherent concerning the end result.
Model 10.0 is a whole rewrite. New rule engine, new admin expertise, hardened question layer, and full REST and Retailer API protection. Your present settings are imported robotically and the originals are left untouched.
What a rule can do
- Cover from the catalog – faraway from listings, search, menus, feeds and the API
- Present solely this stuff – construct a restricted catalog from a whitelist
- Cover the value – product stays seen and indexable, worth is changed
- Block buying – catalog mode for a task, a area or an approval circulation
- Require a signed in account – members solely merchandise
Who a rule can goal
- Consumer roles, together with customized roles from any membership or function plugin
- Visitors – guests who will not be signed in are a first-class viewers
- Particular person customers by identify or e-mail
- Anybody holding a functionality
- Everybody, or any signed in consumer
- Exceptions that all the time win – exempt named customers or roles from any rule
- A number of consumer roles resolved by a precedence order you management
What a rule can cowl
Merchandise, classes and tags are added collectively. Then these slender the choice quite than widening it, so all the things in Wholesale over 100 that’s nonetheless in inventory is one rule, not 4:
- Product kind – easy, variable, grouped, exterior, plus any kind an extension registers
- Inventory standing – in inventory, out of inventory, on backorder
- Value vary – in contrast in opposition to the lively worth, so a sale worth is what counts
- SKU sample – wildcards, for instance
WHOLESALE-* - Product attributes
- Baby classes of the dad and mom you selected, at any depth
- By no means embody these merchandise – one exception inside an in any other case right rule
The place the foundations are enforced
Eradicating a product from the store web page is presentation. Enforcement means each approach of reaching that product agrees:
- Store, class, tag and search pages
- Website search and product solutions
- Navigation menus, pruning descendants together with their guardian
- Associated merchandise, upsells, cross sells and grouped youngsters
- Product shortcodes and WooCommerce blocks
- RSS and Atom feeds
- The WordPress REST API, the WooCommerce REST API and the Retailer API
- oEmbed and preview endpoints
- The cart, revalidated on each load and once more at checkout
- XML sitemaps and structured knowledge
Why the API layer issues greater than it sounds. A contemporary WooCommerce retailer solutions on /wp-json/wc/retailer/v1/merchandise, which is public by design and returns catalog knowledge with no template code working. A plugin that filters solely the principle question hides a product from the store web page whereas leaving it totally readable at that URL, to anybody, with no authentication. That single hole voids each rule. This plugin closes it by default, and the in-built standing report warns you whether it is ever switched off.
Constructed for search engine optimisation, not in opposition to it
Limiting a catalog and rating properly will not be in battle, however they work together in methods which are straightforward to get flawed. The place this plugin takes is {that a} gated web page needs to be sincere and excluded, not intelligent and listed.
- Crawlers see the visitor view by default, so what’s listed and what’s public keep in settlement
- noindex, comply with on restricted pages – retains skinny gate pages out of the index whereas hyperlink fairness nonetheless flows via to the pages which are public
- Dropped from XML sitemaps – WordPress core plus Yoast search engine optimisation, Rank Math, All in One search engine optimisation and SEOPress. Sitemaps are all the time constructed in opposition to the visitor coverage, by no means in opposition to whoever requested the file
- Structured knowledge is corrected – when a worth is hidden the Provide is eliminated, as a result of marking up a worth the customer can’t see is a structured knowledge coverage violation, not merely untidy
- Breadcrumbs pruned – no lifeless inside hyperlinks and no false BreadcrumbList claims
- Actual 404 as a substitute of a comfortable 404 – a web page that claims “not out there” whereas returning HTTP 200 wastes crawl price range
- Configurable canonicals, defaulting to leaving them alone
Selecting the best software issues: disguise removes the web page from the index, whereas disguise worth and block buying preserve the web page indexable and preserve its inbound hyperlinks working. For many wholesale shops the second is what you really need.
Safety
- Each database assertion is ready. Identifier lists are sure via
$wpdb->put together()with placeholders generated from a rely, by no means concatenated - Nonce, then functionality, then price restrict on each state altering request
- Verified crawler detection utilizing ahead confirmed reverse DNS, the strategy each main search engine paperwork. A
Consumer-Agentheader alone proves nothing and isn’t trusted by default - Forwarding headers ignored except the location declares it sits behind a trusted proxy
- Audit log of each rule change, storing a salted hash of the shopper tackle quite than the tackle itself
- No unauthenticated AJAX handler and no public REST route wherever within the plugin
- Uploaded import recordsdata are confirmed as real uploads, dimension capped, depth restricted on decode and validated subject by subject
Inbuilt tooling
- Dwell match rely within the rule editor, so you possibly can see what number of merchandise a rule covers earlier than you reserve it
- Per product panel exhibiting precisely what each function can do with that product: full entry, hidden, no worth, can’t purchase or should sign up
- Per product overrides for the one merchandise that wants an exception
- Standing report naming the web page caching layer it detected and what which means for rule enforcement
- Import and export of guidelines and settings as JSON, for transferring a configuration between staging and manufacturing
- Audit log of who modified which rule and when
- Scheduling – run a rule between two dates and it takes impact and expires by itself
For builders
- Greater than twenty documented filters and fourteen actions
- A full authenticated REST API below
cwgpv/v1 - WP-CLI instructions, together with
wp cwgpv preview --user=42to verify precisely what one account can see, andwp cwgpv physicianfor a configuration audit. Each are protected to run in CI - PSR-4 type autoloading, one coverage object per request, and a translation prepared codebase with a bundled POT file
Compatibility
- WPML and Polylang – choose solely the guardian product or class and each translation is roofed robotically
- All WooCommerce product sorts, with variations lined when the guardian is restricted
- Excessive Efficiency Order Storage and the block primarily based cart and checkout, each declared appropriate
- YITH Ajax Product Filter and Ajax Search
- WooCommerce product blocks within the block editor
- Web page cache coordination with WP Rocket, W3 Whole Cache, WP Tremendous Cache, LiteSpeed, WP Engine and SiteGround Optimizer
- Any normal theme that helps WooCommerce
Necessities
- WordPress 6.0 or newer
- WooCommerce 6.0 or newer
- PHP 7.4 or newer, 8.1 or newer really useful
- A persistent object cache equivalent to Redis or Memcached is really useful however not required
Want of help?
Full documentation ships contained in the obtain. Open the documentation folder and cargo index.html in your browser, or learn it with out leaving your dashboard at Visibility → Documentation. It covers setup, how overlapping guidelines resolve, each setting defined, search engine behaviour, web page caching, the developer reference and troubleshooting.
For those who need assistance to configure, customise or make one thing appropriate, we’re right here to assist. Be at liberty to contact us.
Updates
Model 10.0.0 on twentieth August 2026
An entire rewrite. New structure, new knowledge mannequin, new admin expertise.
Present settings are imported robotically and the originals are left in place.
Safety
Repair: SQL injection within the catalog question filter. Identifiers had been concatenated
into the WHERE clause over values that had by no means been forged to integers.
All statements are actually ready.
Repair: SQL injection within the taxonomy clause filter, which had the identical defect.
Repair: Full entry management bypass. Search engine detection matched the
Consumer-Agent header and granted matching requests an unrestricted view of
the catalog. That header is chosen by the shopper, so any customer sending
"Googlebot" may learn each hidden product. Crawler verification now makes use of
ahead confirmed reverse DNS.
Repair: Unauthenticated writes to time period metadata. The per class exclusion subject
saved uncooked POST knowledge with no nonce, functionality verify or sanitizing.
Repair: Unsanitized possibility writes from the settings display screen.
Repair: Unescaped output throughout the admin screens.
Repair: Eliminated a bundled third social gathering updater that fetched over plain HTTP.
New: Enumeration safety for ?p=, oEmbed and preview endpoints.
New: Audit log with salted tackle hashes.
New: Charge limiting on the authenticated admin search endpoints.
New
New: Rule engine with priorities, schedules and 5 actions.
New: Concentrating on by function, particular person consumer, functionality, visitor or signed in state,
with exceptions that all the time win.
New: Refinement by product kind, inventory standing, worth vary, SKU sample and
product attributes.
New: REST API and Retailer API filtering.
New: search engine optimisation controls. noindex on restricted pages, sitemap exclusion for
WordPress core plus Yoast search engine optimisation, Rank Math, All in One search engine optimisation and SEOPress,
structured knowledge correction, breadcrumb pruning, comfortable 404 prevention and
configurable canonicals.
New: Direct entry dealing with. Theme 404, redirect with a configurable standing,
sign up immediate, or an explanatory message.
New: Per product overrides, plus a panel exhibiting what each function can do.
New: Dwell match rely within the rule editor.
New: Import and export of guidelines and settings as JSON.
New: Authenticated REST API and WP-CLI instructions.
New: Standing report naming the detected web page caching layer.
New: Cart enforcement. Purchasability, add to cart validation, revalidation on
each cart load, elimination earlier than totals, and a checkout block.
New: Web page cache coordination with six caching plugins.
New: HTML documentation, readable from the dashboard or straight from the folder.
Modified
Tweak: Guidelines saved in listed tables quite than in autoloaded choices.
Tweak: Rule units cached per function quite than per consumer at any time when no rule names
a person.
Tweak: Massive block lists inverted into permit lists when that produces
shorter SQL.
Tweak: Store managers bypass guidelines by default. This may be switched off to
preview the catalog as a buyer sees it.
Tweak: Settings outlined in a single schema driving storage, sanitizing and the shape.
Mounted
Repair: Deadly error within the structured knowledge filter, which crashed each web page that
emits product structured knowledge.
Repair: Direct entry modes by no means taking impact. The question filter eliminated the
product earlier than the template stage, so redirect, sign up, message and permit
all silently behaved as if set to 404.
Repair: Catalog and REST floor toggles being partly inert.
Repair: Unbounded recursion when resolving guidelines.
Repair: Variations remaining reachable when the guardian product was hidden.
Repair: Menu objects surviving as orphans when their guardian was eliminated.
Repair: Product visibility panel reporting "seen" for roles the foundations prohibit.
Repair: A rule aimed solely at roles that bypass guidelines saving silently and showing
lively whereas having no potential impact. It's now flagged earlier than you save.
Repair: Translations loading sooner than WordPress 6.7 permits.
Model 6.3.3 on September 09th 2019
Tweak: Suitable with WooCommerce Product Blocks - Gutenberg
Model 6.3.2 on 4th June 2019
Repair: Visibility settings not correctly work in woocommerce shortcodes
Model 6.3.1 on fifteenth Could 2019
Minor Repair: Debug Warning upon sure visibility situations
Model 6.3 on thirteenth Could 2019
Tweak: Examined with newest model of WooCommerce v3.6.2
Repair: Setting Default Values not working trigger 500 Inner Server Error
Repair: Reset Button not working
Model 6.2 on twenty first March 2019
Repair: Add to Cart situation with Variable Product
Model 6.1 on nineteenth February 2019
Repair: Compatibility Points with newest model of WPML
Model 6.0 on fifteenth August 2019
Tweak: Improved Efficiency
Repair: Slowness Problem Mounted
Model 5.9 on thirty first August 2018
Repair: Fetch Nested Degree Baby Class Ids
Repair: Menu Objects disappear in backend (Look -> Menu)
Model 5.8 on sixteenth March 2018
New: Exclude Particular Members in Class Degree
Repair: Situation Break when empty array in classes
Repair: Deadly Error upon activation when woocommerce will not be lively
Model 5.7 on thirtieth Jan 2018
Repair: Class settings mess with variable merchandise
Model 5.6 on seventeenth Jan 2018
Repair: Add to Cart not working with Variable Product.
Model 5.5 on eleventh January 2018
New: Choice to Take away Class Merchandise Depend
Repair: Hiding all class as a substitute of particular classes
Model 5.4 on 09th January 2018
New: A number of Consumer Roles Help
New: World Visibility Settings for All Customers
New: Reset Possibility Added
Tweak: PO Recordsdata Up to date
Model 5.3 on 05th December 2017
New: Accordion Settings and corresponding Rule Standing
New: PO Recordsdata Added for Translation
Repair: Warning Message upon empty array
Model 5.2 on twenty seventh November 2017
New: Added All Merchandise/Chosen Merchandise Possibility
New: Added All Classes/Chosen Classes Possibility
Model 5.1 on eleventh November 2017
New: Present/Cover Merchandise/Classes from Navigation Menu
Model 5.0 on tenth November 2017
New: Cover by Sort has each Merchandise and Classes
New: Take into account Baby Classes of Chosen Classes
New: Full Code Revamped
Model 4.4 on twenty fourth June 2017
Tweak: Enhanced code to help associated merchandise
Tweak: Added help for upsells and crosssells
Model 4.3 on nineteenth April 2017
New: Suitable with WooCommerce 3.0
Model 4.2 on twenty sixth December 2016
Repair: Merchandise will not be disguise in tag archive web page
Model 4.1 on eleventh December 2016
Tweak: Code Improved to cover class from itemizing
Model 4.0 on 1st December 2016
New: WPML Suitable
Model 3.8 on 09th October 2016
Repair: Cover Merchandise seen in search outcomes.
Model 3.7 on thirty first August 2016
Repair: Deadly Error in Settings Web page when chosen merchandise are deleted
Model 3.6 on twelfth August 2016
Repair: Hiding Different Customized Publish Sort Taxonomies
Model 3.5 on 09th June 2016
- Cover Merchandise from Ajax Product Filter (Yith)
- Backend Label Up to date
- Screenshots & Documentation Up to date
Model 3.4 on twenty ninth Could 2016
- Settings UI and Label Up to date
- Documentation Up to date
Model 3.3 on 22 April 2016
Repair: Recent Set up Cover all Merchandise and Classes
Model 3.2 on 10 April 2016
Repair: Cover all Merchandise if left the disguise subject empty
Repair: 500 Inner Server Error on accessing settings web page if greater than 500+ merchandise
Tweaks: Improved code to optimize the efficiency of looking product in backend
Model 3.1 on 08 April 2016
Tweaks: Help for Cover Product in Class Web page (Up to date).
Model 3.0 on 07 April 2016
Tweaks: Now It disguise merchandise from web site broad not alone store web page
Model 2.3 on 31 October 2015
Repair: Whitespace trigger header already despatched drawback
Model 2.2 on 18 October 2015
New: Cover Merchandise by Class
Model 2.1 on 08 August 2015
- Bug Repair in WooCommerce Product Web page Model
- Bug Repair in Exclude Merchandise for Visitor
Model 2.0 - 02 August 2015
- Bug Repair White Display Frontend
- Code Improved and Supported with WooCommerce 2.3.x
- Mounted Lacking Possibility for Visitor
Model 1.6 - 13 January 2015
- Added Checkbox Possibility for Class and Search
Model 1.5 - 11 January 2015
- Cover Product in Class Web page and in Search Web page
Model 1.4 - 5 November 2014
- For Warning array_combine is mounted
Model 1.3 - 1 October 2014
- Help Present/Cover Merchandise for Visitor too.
Model 1.2 - 28 September 2014
- Help with WooCommerce Newest
- Help Customized Consumer Function (From Third Get together Plugins)
Model 1.1 - 20 June 2014
- Mounted Minor Bug on Javascript
- Enchancment Made to Validating array_combine
Model 1.0 - 19 June 2014
- Preliminary Launch
