shouldiuse.io

New check

Categories

VERDICT

Should I use EmbedSocial?

New: Instagram Insights API. Pull account overview, trends and audience data with one call. - embedsocial.com

Depends. Buy if you're a marketer or agency embedding Google/Instagram reviews and UGC on client sites. Pass if you're security-strict on WordPress or just need one simple embed.

Confidence

Medium. Based on ~40 public sources; many snippets truncated, so exact tier pricing is unverified.

Ratings

  • Value for moneyPricing tiers exist but costs unverified
  • Ease of use
  • Feature depth
  • Support qualityNo support evidence in sources
  • Security posture

Pricing

Not disclosed

ModelNot disclosed
Monthly feesNot disclosed
HardwareNot disclosed
Free tierYes

Best for

  • Marketers embedding Google/Instagram reviews
  • Agencies managing client widgets
  • WordPress sites adding social proof
  • Small brands collecting UGC

Not for

  • Security-strict orgs — repeated WordPress plugin XSS CVEs
  • Buyers who can't tolerate platform-API dependency
  • Developers happy building widgets themselves — DIY is common
  • One-simple-feed buyers — free widget or rivals may suffice

Gotchas - check before you buy

medium

Instagram/Google API changes can break embeds; you depend on vendor fix speed

medium

Keep the WordPress plugin updated — two XSS CVEs since 2023

medium

Hudson Rock lists 1,540 infostealer credentials for — ask vendor how they responded

low

Exact tier prices not visible in reviewed sources — verify before committing

Pros and cons

Pros

  • 4.8/5 rating across 205 G2 reviews
  • Free Google Reviews widget available
  • Approved API integrations: Instagram, Google Business Profile
  • Agency partner program for multi-client widget management
  • Self-reported ISO 27001:2022 certification

Cons

  • WordPress plugin had repeated stored-XSS CVEs (2023, 2024)
  • 1,540 domain credentials appear in infostealer logs
  • Widgets depend on volatile third-party platform APIs
  • Some DIY-minded users build their own widgets instead

Sources & method

Analyzed 9/29/2026 - 11 sources - Recurring WordPress plugin XSS CVEs (2023, 2024) plus an infostealer credential listing; vendor self-reports ISO 27001:2022.

official x3review x4security x3news x1
  • CVE-2024-3984 — stored XSS in WordPress plugin, Authenticated contributor stored cross-site scripting in the EmbedSocial Social Media Feeds, Reviews and Galleries plugin.
  • CVE-2023-0371 — cross-site scripting, XSS in the Embedsocial plugin; patch required updating to version 1.1.28 or later.
  • Infostealer credential exposure, Hudson Rock lists 1,540 credentials from appearing in infostealer databases.

Key stats

  • Ease of use: 4/5

    Rating

  • Not disclosed

    Starting price

  • 11

    Sources

  • Analyzed

  • Value for money. Pricing tiers exist but costs unverified
  • Ease of use: 4/5. Guess: no-code widget setup, works in Webflow
  • Feature depth: 4/5. Reviews, feeds, listening, forms, AI, APIs
  • Support quality. No support evidence in sources
  • Security posture: 2/5. Two plugin XSS CVEs; credential exposure listed
  • 4.8/5 G2 rating 205 G2 reviews
  • Yes Free tier Free Google Reviews widget
  • 2016 Founded 32 employees
  • $2.1M Est. revenue Owler estimate

Pricing

Free tier: Yes

Security

Recurring WordPress plugin XSS CVEs (2023, 2024) plus an infostealer credential listing; vendor self-reports ISO 27001:2022.

  • CVE-2024-3984 — stored XSS in WordPress pluginAuthenticated contributor stored cross-site scripting in the EmbedSocial Social Media Feeds, Reviews and Galleries plugin.⁴
  • CVE-2023-0371 — cross-site scriptingXSS in the Embedsocial plugin; patch required updating to version 1.1.28 or later.
  • Infostealer credential exposureHudson Rock lists 1,540 credentials from appearing in infostealer databases.⁵

What users say

Ratings are strong (4.8/5 on G2 across 205 reviews), though some developers build their own widgets instead of paying.

“I've built 50+ Google reviews widgets. Here is how”
Reddit, r/embedsocial
Full analysis

Based on ~40 public sources; many snippets truncated, so exact tier pricing is unverified.

Solid 4.8/5 G2 widget suite for social proof — but the WordPress plugin has repeated XSS CVEs and pricing is opaque.

Methodology

Based on ~40 public sources; many snippets truncated, so exact tier pricing is unverified.

Sources

  1. EmbedSocial Products | 205 Reviews on G2g2.com
    review
  2. EmbedSocial Trustpilot reviewstrustpilot.com
    review
  3. CVE-2024-3984 in EmbedSocial Pluginvuldb.com
    security
  4. EmbedSocial WordPress Vulnerabilities (Wordfence)wordfence.com
    security
  5. EmbedSocial — 1540 Infostealer Credentials (Hudson Rock)hudsonrock.com
    security
  6. EmbedSocial Pricingembedsocial.com
    official
  7. Free Google Reviews Widgetembedsocial.com
    official
  8. EmbedSocial Partner Programembedsocial.com
    official
  9. EmbedSocial headcount and founding (Crustdata)crustdata.com
    news
  10. Reddit: Best way for live Google review embedreddit.com
    review
  11. EmbedSocial Review 2026 (Ampifire)ampifire.com
    review

Rate this review

Anonymous. You can change your vote.

Loading votes…

Comments

One queue. No nested comments. Give a display name first. Limit: 200 words per comment and 7 comments per day. You can edit or delete yours.

Save a name to write a comment.

0 / 200 words

No comments yet.