shouldiuse.io

VERDICT

Should I use Elfsight?

Increase sales, engage visitors, collect leads using Elfsight widgets. Ready-to-use solutions to save time and money for growing a business! - elfsight.com

Depends. Buy it if you run a no-code site (Wix, Shopify, Webflow) and want polished embeds live in minutes without a developer. Skip it if free platform-native plugins would do, or you can't accept a third-party vendor controlling scripts on your site.

Confidence

Medium. Based on ~30 public sources: G2, Trustpilot, AppSumo, Reddit, NVD, Wordfence, Reflectiz, and vendor pages.

Ratings

  • Value for money
  • Ease of use
  • Feature depth
  • Support quality
  • Security posture

Pricing

$0

Free

ModelNot disclosed
Monthly feesNot disclosed
HardwareNot disclosed
Free tierYes
Single appFrom $6–20/mo
All-apps plans3 paid tiers (per G2)

Best for

  • No-code site owners on Wix, Shopify, Webflow
  • Agencies embedding widgets on client sites
  • Non-technical marketers adding social proof
  • Small sites needing review or form widgets fast

Not for

  • Developers who can embed the same feeds free natively
  • Security-sensitive sites — a third-party script vendor controls your code
  • Budget buyers needing many widgets — per-app costs stack
  • WordPress users wary of the plugin CVE history

Gotchas - check before you buy

high

Single-app plans run roughly $6–20/month per widget; costs multiply fast.

high

Widget vendors can control code inside your site; an Elfsight incident was documented in the White House app.

medium

2025 WordPress-plugin CVEs include contact-form data exposure, missing authorization, testimonials XSS.

medium

Migrating off means rebuilding every embed; one user documented replacement costs.

Pros and cons

Pros

  • 4.8/5 across 913 G2 reviews
  • 90+ no-code widgets: reviews, forms, feeds, calculators
  • Official apps for Wix, Shopify, BigCommerce, Joomla
  • Ships fast: 700 feature releases driven by user wishlist
  • Free plan to test before paying

Cons

  • Per-widget pricing stacks; several widgets get expensive
  • Vendor controls JavaScript on your site — supply-chain risk
  • Nine CVEs on record, mostly WordPress plugins
  • Some buyers replaced it with in-house forms
  • Long-term value questioned even by fans ('Good, but.')

Sources & method

Analyzed 9/25/2026 - 16 sources - Not clean: nine CVEs on record, including 2025 contact-form data exposure and plugin XSS, plus a documented widget supply-chain incident.

official x2review x7security x5news x2
  • CVE-2025-31045 — Contact Form data exposure, Exposure of sensitive system information flaw in Elfsight Contact Form (2025).
  • CVE-2025-31584 — Missing authorization, Missing authorization vulnerability listed on NVD for Elfsight (2025).
  • CVE-2025-31587 — Testimonials Slider XSS, Cross-site scripting in the Elfsight Testimonials Slider WordPress plugin.
  • Widget supply-chain incident, Analysis documented widget-vendor-controlled code inside the White House app.

Key stats

  • Value for money: 2/5

    Rating

  • $0

    Starting price

  • 16

    Sources

  • Analyzed

  • Value for money: 2/5. Per-widget pricing stacks; flat-fee rivals undercut it
  • Ease of use: 4/5. No-code, minutes-fast setup; official platform integrations
  • Feature depth: 5/5. 90+ widgets across every site category
  • Support quality: 4/5. Active community forum; positive Trustpilot feedback
  • Security posture: 2/5. Nine CVEs; 2025 data-exposure and XSS flaws
  • 4.8/5 G2 rating 913 reviews
  • 90+ Widget library Reviews, forms, feeds, calculators
  • Yes Free tier Free plans before paid tiers
  • $6–20/mo Per-widget price Single-app billing adds up fast

Pricing

Free

$0

  • Basic widget access to try before paying

Single app

From $6–20/mo

  • One widget, billed per app
  • Higher limits than free

All-apps plans

3 paid tiers (per G2)

  • Full 90+ widget library

Security

Not clean: nine CVEs on record, including 2025 contact-form data exposure and plugin XSS, plus a documented widget supply-chain incident.

  • CVE-2025-31045 — Contact Form data exposureExposure of sensitive system information flaw in Elfsight Contact Form (2025).⁹
  • CVE-2025-31584 — Missing authorizationMissing authorization vulnerability listed on NVD for Elfsight (2025).10
  • CVE-2025-31587 — Testimonials Slider XSSCross-site scripting in the Elfsight Testimonials Slider WordPress plugin.11
  • Widget supply-chain incidentAnalysis documented widget-vendor-controlled code inside the White House app.13

What users say

Ratings are strong (4.8/5 on G2, 4.74 on AppSumo) but buyers openly debate whether the per-widget pricing is worth it long-term.

Companies that use it

  • Top Left Design15
Full analysis

Based on ~30 public sources: G2, Trustpilot, AppSumo, Reddit, NVD, Wordfence, Reflectiz, and vendor pages.

Legit no-code widget library, 4.8/5 on G2 — but per-widget pricing stacks and third-party script risk. Use free native plugins if you can.

Methodology

Based on ~30 public sources: G2, Trustpilot, AppSumo, Reddit, NVD, Wordfence, Reflectiz, and vendor pages.

Sources

  1. Elfsight Reviews 2026 | G2 (913 reviews)g2.com
    review
  2. 90+ Website Widgets — Elfsightelfsight.com
    official
  3. Elfsight Pricingelfsight.com
    official
  4. Elfsight Pricing in 2026: Plans, Costs & Alternatives — StoreRocketstorerocket.io
    review
  5. Is Elfsight worth it? : r/webflowreddit.com
    review
  6. I built an Elfsight alternative that's $5/mo flat instead of $6–20 per widgetreddit.com
    review
  7. Trustpilot — apps.elfsight.comtrustpilot.com
    review
  8. Elfsight Review: Good, but. — AppSumoappsumo.com
    review
  9. CVE-2025-31045: Elfsight Contact Form Data Exposure Flaw — SentinelOnesentinelone.com
    security
  10. CVE-2025-31584 Detail — NVDnvd.nist.gov
    security
  11. CVE-2025-31587: Elfsight Testimonials Slider XSSfused.com
    security
  12. Elfsight CVEs and Security Vulnerabilities — OpenCVE (9 CVEs)app.opencve.io
    security
  13. The Elfsight Incident: When a Widget Vendor Controls Code — Reflectizreflectiz.com
    security
  14. Why We Replaced Elfsight With Our Own Form — And What It Costresultsyoucanmeasure.com
    review
  15. A post about Elfsight — Top Left Designtopleftdesign.com
    news
  16. Elfsight: How a Wishlist Category Shaped 700 Feature Releases — Discourse blogblog.discourse.org
    news

Rate this review

Anonymous. You can change your vote.

Loading votes…

Comments

One queue. No nested comments. Give a display name first. Limit: 200 words per comment and 7 comments per day. You can edit or delete yours.

Save a name to write a comment.

0 / 200 words

No comments yet.