shouldiuse.io

Categories

VERDICT

Trustindex Review

Depends

Should I use Trustindex?

Workshop - trustindex.io

· 1 week ago

Buy it if you run a small WordPress or Shopify site and just want Google reviews displayed cheaply — keep the plugin updated. Skip it if you need a genuinely free widget, tight security, or a full review-management suite.

Confidence

Medium. Based on 20+ public sources: WordPress.org support, Wordfence/WPScan/GitHub advisories, Reddit, Capterra, SourceForge.

Ratings

  • Value for money
  • Ease of use
  • Feature depth
  • Support quality
  • Security posture

Pricing

$0

Free

ModelNot disclosed
Monthly feesNot disclosed
HardwareNot disclosed
Free tierYes
Single (paid)US$65.00

Best for

  • Small WordPress sites displaying Google reviews
  • Shopify stores wanting cheap review widgets
  • Local businesses collecting reviews by email
  • Owners okay with light plugin upkeep

Not for

  • Security-sensitive sites — the plugin CVE history is real
  • Anyone expecting a usable truly-free widget
  • Enterprises needing full review-management suites
  • Non-technical owners who won't troubleshoot sync bugs

Gotchas - check before you buy

high

Free plan limits push most real usage to paid; reviewers call the 'free' framing misleading

high

Plugin CVE history means applying updates fast — or removing it

medium

Paid-to-WordPress sync bugs reported; test after upgrading before relying on it

low

Widgets display at most 255 reviews; more needs workarounds

Pros and cons

Pros

  • Easily displays genuine Google reviews on WordPress and other sites
  • Free plan available
  • Offers trust certificates showing visitors the site is trustworthy
  • Paid tier cited at US$65 — cheap for the category

Cons

  • Multiple plugins had arbitrary-file-upload and missing-authorization CVEs
  • Redditors reported's own site hacked; some pulled the plugin
  • Free tier heavily restricted; 'not free as they say'
  • Paid version reportedly out of sync with WordPress
  • Mobile rendering problems reported

Sources & method

- 12 sources - Multiple CVEs in Trustindex WordPress plugins (arbitrary file upload, missing authorization); Reddit users reported the company's own site was hacked.

official x2review x7security x3
  • Arbitrary file upload in multiple plugins, Authenticated editor-level users could upload arbitrary files across several Trustindex plugins (Nov 2023).
  • CVE-2025-68595: missing authorization, Missing authorization vulnerability in Trustindex Widgets for Google Reviews, per GitHub advisory.
  • CVE-2023-48275, Arbitrary file upload in Trustindex's customer-reviews-collector for WooCommerce.
  • Reported hack of trustindex.io itself, Redditors reported the main site was hacked and removed the plugin; not officially confirmed in sources.

Key stats

  • Value for money: 3/5

    Rating

  • $0

    Starting price

  • 12

    Sources

  • Analyzed

  • Value for money: 3/5. Cheap paid tier, but free plan misleads
  • Ease of use: 3/5. Setup praised; mobile and CSS bugs reported
  • Feature depth: 4/5. Widgets, collection, certificates, AI-assisted replies
  • Support quality: 3/5. Responsive on forums; recurring unresolved complaints
  • Security posture: 2/5. Multiple plugin CVEs; hacked-site report
  • US$65 Starting price Paid plan price cited by Capterra
  • Yes Free tier Limited; users call it misleading
  • 1,000,000+ businesses Claimed users Official claim; SourceForge says 100,000+

Pricing

Free

$0

  • Basic Google review widgets
  • Users report tight limits

Single (paid)

US$65.00

  • Cited by Capterra
  • 1-year plan referenced in support threads

Security

Multiple CVEs in Trustindex WordPress plugins (arbitrary file upload, missing authorization); Reddit users reported the company's own site was hacked.

  • Arbitrary file upload in multiple pluginsAuthenticated editor-level users could upload arbitrary files across several Trustindex plugins (Nov 2023).¹
  • CVE-2025-68595: missing authorizationMissing authorization vulnerability in Trustindex Widgets for Google Reviews, per GitHub advisory.²
  • CVE-2023-48275Arbitrary file upload in Trustindex's customer-reviews-collector for WooCommerce.
  • Reported hack of trustindex.io itselfRedditors reported the main site was hacked and removed the plugin; not officially confirmed in sources.⁴
Full analysis

Based on 20+ public sources: WordPress.org support, Wordfence/WPScan/GitHub advisories, Reddit, Capterra, SourceForge.

Cheap Google-review widgets for WordPress/Shopify, but the free tier is crippled and the plugins carry a real CVE history.

Methodology

Based on 20+ public sources: WordPress.org support, Wordfence/WPScan/GitHub advisories, Reddit, Capterra, SourceForge.

Read how a report is made.

Sources

  1. Wordfence: Multiple Plugins by Trustindex.io — Arbitrary File Uploadwordfence.com
    security
  2. GitHub Advisory: CVE-2025-68595 Missing Authorizationgithub.com
    security
  3. WPScan: Multiple Trustindex plugin vulnerabilitieswpscan.com
    security
  4. Reddit: The trustindex main site was hackedreddit.com
    review
  5. WordPress.org: Not good for freewordpress.org
    review
  6. WordPress.org: Not free as they saywordpress.org
    review
  7. Capterra: Trustindex Pricing, Cost & Reviewscapterra.co.uk
    review
  8. SourceForge: Trustindex Reviewssourceforge.net
    review
  9. Trustindex official sitetrustindex.io
    official
  10. Trustindex KB: 255-review widget limittrustindex.zohodesk.eu
    official
  11. Reddit: Trustindex mobile issuesreddit.com
    review
  12. StackDex: Trustindex vs Trust Reviewstackdex.io
    review

Add this review to your site

This check for Trustindex says Depends.

Put the badge on your site.

Visitors see the independent review.

The link points here, and search engines follow it.

This is the badge visitors see on your site.

Depends Trustindex Independent review on Should I Use It

Paste one snippet. Keep the link as it is. A nofollow tag stops search engines from following it.

Rate this review

Anonymous. You can change your vote.

Loading votes…

Comments

One queue. No nested comments. Give a display name first. Limit: 200 words per comment and 7 comments per day. You can edit or delete yours.

Save a name to write a comment.

0 / 200 words

No comments yet.