Customer Reviews for WooCommerce

88 Quality Score

Active Installs

22/30

With 80,000 active installs and a popularity score of 73, the plugin has a solid user base though it sits well below the top WooCommerce extensions in its category by install count.

Update Freshness

25/25

The maintenance score is a perfect 100, reflecting very recent updates (within days of assessment) and active development, which is critical for a plugin that hooks into WooCommerce order events.

User Rating

14/15

The user rating of 96 out of 100 from 1,524 reviews is excellent and indicates strong real-world satisfaction across a meaningful sample size.

Support Health

12/15

With 18 of 21 support threads resolved (85.7%), support health is good, though the relatively low thread volume limits how much we can infer about response speed under heavier load.

WP Compatibility

15/15

Full marks on compatibility, with the plugin tested up to WordPress 7.0 and requiring only PHP 7.4, which keeps it accessible to stores on common hosting environments.

Scores higher than 98% of indexed plugins

About

Customer Reviews for WooCommerce plugin helps you get more sales with social proof. Set up automated review reminders and increase conversion rate.

Active Installs 80k+

Rating ★★★★½ 4.8/5

Last Updated 2026-09-21 12:30am GMT

Requires WordPress 4.5+

Tested Up To 7.0.5

Requires PHP 7.4+

Security History

27 known vulnerabilities, all patched

1 Critical 6 High 20 Medium

Most recent: September 24, 2026

View details ▸

Customer Reviews for WooCommerce <= 5.120.0 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion via 'items[][media]' Parameter Critical

September 24, 2026 Patched in ["5.121.0"] CVE-2026-89055

Customer Reviews for WooCommerce < 5.118.0 - Unauthenticated Stored Cross-Site Scripting High

August 31, 2026 Patched in ["5.118.0"] CVE-2026-76585

Customer Reviews for WooCommerce <= 5.106.0 - Unauthenticated Stored Cross-Site Scripting via Aggregated Review Form High

August 27, 2026 Patched in ["5.107.0"] CVE-2026-6176

Customer Reviews for WooCommerce <= 5.115.0 - Missing Authorization Medium

August 6, 2026 Patched in ["5.116.0"] CVE-2026-14941

Customer Reviews for WooCommerce <= 5.113.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'color' Shortcode Attribute Medium

July 8, 2026 Patched in ["5.114.0"] CVE-2026-13771

Customer Reviews for WooCommerce <= 5.110.1 - Unauthenticated Stored Cross-Site Scripting High

June 24, 2026 Patched in ["5.111.0"] CVE-2026-56043

Customer Reviews for WooCommerce <= 5.101.0 - Reflected Cross-Site Scripting via 'crsearch' Medium

April 15, 2026 Patched in ["5.102.0"] CVE-2026-3355

Customer Reviews for WooCommerce <= 5.103.0 - Unauthenticated Authentication Bypass to Arbitrary Review Submission via 'key' Parameter Medium

April 9, 2026 Patched in ["5.104.0"] CVE-2026-4664

Customer Reviews for WooCommerce <= 5.97.0 - Unauthenticated Stored Cross-Site Scripting via media[].href Parameter High

February 12, 2026 Patched in ["5.98.0"] CVE-2026-1316

Customer Reviews for WooCommerce <= 5.93.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via displayName Parameter Medium

January 6, 2026 Patched in ["5.94.0"] CVE-2025-14891

Customer Reviews for WooCommerce <= 5.80.2 - Unauthenticated Stored Cross-Site Scripting via `author` Parameter Medium

July 30, 2025 Patched in ["5.81.0"] CVE-2025-5720

Customer Reviews for WooCommerce <= 5.61.0 - Missing Authorization to Authenticated (Subscriber+) Import Cancellation Medium

November 15, 2024 Patched in ["5.62.0"] CVE-2024-10614

Customer Reviews for WooCommerce <= 5.47.0 - Reflected Cross-Site Scripting via 's' Medium

April 18, 2024 Patched in ["5.48.0"] CVE-2024-3731

Customer Reviews for WooCommerce <= 5.46.0 - Missing Authorization to Authenticated (Subscriber+) Coupon Search Medium

April 15, 2024 Patched in ["5.47.0"] CVE-2024-3869

Customer Reviews for WooCommerce <= 5.46.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Email Sending Medium

April 15, 2024 Patched in ["5.47.0"] CVE-2024-3243

Customer Reviews for WooCommerce <= 5.38.10 - Improper Authorization via submit_review Medium

February 6, 2024 Patched in ["5.39.0"] CVE-2024-1044

Customer Reviews for WooCommerce <= 5.38.9 - Authenticated (Author+) Arbitrary File Upload High

January 9, 2024 Patched in ["5.38.10"] CVE-2023-6979

Customer Reviews for WooCommerce <= 5.38.1 - Missing Authorization via CR_Manual Medium

December 27, 2023 Patched in ["5.38.2"] CVE-2023-51692

Customer Reviews for WooCommerce <= 5.38.1 - Cross-Site Request Forgery via manual review reminders Medium

November 19, 2023 Patched in ["5.38.2"]

Customer Reviews for WooCommerce <= 5.38.1 - Missing Authorization via manual review reminders Medium

November 19, 2023 Patched in ["5.38.2"]

Customer Reviews for WooCommerce <= 5.36.0 - Missing Authorization in Reviews Exporter Medium

October 6, 2023 Patched in ["5.36.1"] CVE-2023-45101

Customer Reviews for WooCommerce <= 5.36.0 - Missing Authorization Medium

October 4, 2023 Patched in ["5.36.1"]

Customer Reviews for WooCommerce <= 5.16.0 - Authenticated (Contributor+) Stored Cross-Site Scripting Medium

January 24, 2023 Patched in ["5.17.0"] CVE-2023-0079

Customer Reviews for WooCommerce <= 5.15.0 - Authenticated (Subscriber+) Local File Inclusion High

January 23, 2023 Patched in ["5.16.0"] CVE-2023-0080

Customer Reviews for WooCommerce <= 5.3.5 - Sensitive Data Exposure Medium

September 22, 2022 Patched in ["5.3.6"] CVE-2022-40194

Customer Reviews for WooCommerce <= 5.3.5 - Cross-Site Request Forgery Medium

September 22, 2022 Patched in ["5.3.6"] CVE-2022-38470

Customer Reviews for WooCommerce <= 5.3.5 - Multiple Unprotected AJAX Actions Medium

September 22, 2022 Patched in ["5.3.6"] CVE-2022-38134

What It Does

Customer Reviews for WooCommerce adds a structured review collection system to your WooCommerce store, sending automated email reminders to customers after purchase to encourage verified feedback. It also offers a review-for-discount incentive, letting you trade a coupon code for a submitted review to boost both engagement and repeat sales. The plugin displays collected reviews on product pages as social proof to support conversion.

Who It's For

This plugin is best suited for small to mid-sized WooCommerce store owners who want a low-friction way to collect more product reviews without paying for a SaaS solution like Yotpo or Judge.me. It fits stores that already rely on email-based customer communication and want automation around post-purchase review requests. Stores selling physical goods with repeat customers will get the most value from the discount incentive feature.

Who Should Skip It

If you already use a premium review platform like Yotpo, Judge.me, or a WooCommerce extension bundled with review features, this plugin is redundant. Large enterprises needing photo or video reviews, AI-driven moderation, or multi-channel syndication should look at paid platforms instead, since this plugin is focused on text reviews and email reminders.

The Bottom Line

Customer Reviews for WooCommerce scores 89.21 out of 100, combining excellent user ratings, recent maintenance, and a healthy install base into a strong value proposition for typical WooCommerce stores. It is not a replacement for enterprise review platforms, but for the price and feature set it delivers dependable, automated review collection. It is a sensible default pick for store owners who want a free, maintained review plugin without committing to a paid SaaS.

Related Plugins

Germanized for WooCommerce 91/100

Pick this if you operate a store targeting the German market and need invoicing, legal compliance, and reviews bundled into one locale-specific package.

PDF Invoices & Packing Slips for WooCommerce 90/100

Choose this instead if your primary operational need is invoice and packing slip generation rather than customer review collection.

WooCommerce Stripe Payment Gateway 88/100

Pick Stripe if your priority is adding or improving payment processing, since review collection is unrelated to checkout conversion.

Cart Abandonment Recovery for WooCommerce 86/100

Choose this if recovering abandoned carts via email is your bigger conversion gap, since reviews help existing buyers while cart recovery targets lost ones.

Variation Swatches for WooCommerce 86/100

Pick variation swatches if your conversion problem is product option selection rather than post-purchase social proof.