Site Reviews

91 Quality Score

Active Installs

21/30

With 60,000 active installs, Site Reviews has solid adoption but is far behind top review-feed plugins like Widgets for Google Reviews at 900,000 installs.

Update Freshness

25/25

A perfect maintenance score reflects an update on 2026-07-11, indicating the developer is actively shipping fixes and improvements.

User Rating

15/15

A 98 out of 100 rating from 370 users shows near-universal satisfaction among those who have reviewed it.

Support Health

15/15

Support threads resolve at 70.0%, which is acceptable but not outstanding, leaving roughly 3 out of 10 threads unanswered.

WP Compatibility

15/15

Full compatibility marks come from being tested with WordPress 7.0.1 and requiring the modern PHP 8.1.2 baseline.

Scores higher than 99% of indexed plugins

About

Site Reviews is the best free reviews plugin. It integrates with WooCommerce & SureCart and works just like reviews on Amazon, Tripadvisor, and Yelp.

Active Installs 60k+

Rating ★★★★½ 4.9/5

Last Updated 2026-09-19 1:30am GMT

Requires WordPress 6.8+

Tested Up To 7.1.1

Requires PHP 8.1.2+

Security History

16 known vulnerabilities, all patched

3 High 13 Medium

Most recent: September 11, 2026

View details ▸

Site Reviews 7.2.2 - 8.2.2 - Unauthenticated PHP Object Injection High

September 11, 2026 Patched in ["8.3.0"] CVE-2026-82925

Site Reviews <= 8.2.0 - Unauthenticated Stored Cross-Site Scripting High

August 14, 2026 Patched in ["8.2.1"] CVE-2026-73382

Site Reviews <= 8.0.11 - Authenticated (Subscriber+) Sensitive Information Exposure Medium

June 26, 2026 Patched in ["8.0.12"] CVE-2026-57318

Site Reviews <= 7.2.4 - Unauthenticated Stored Cross-Site Scripting Medium

February 26, 2025 Patched in ["7.2.5"] CVE-2025-1232

Site Reviews <= 6.11.8 - IP Address Spoofing to Blocking Bypass Medium

May 8, 2024 Patched in ["7.0.0"] CVE-2024-3050

Site Reviews <= 6.11.6 - Authenticated (Author+) Stored Cross-Site Scripting Medium

March 15, 2024 Patched in ["6.11.7"] CVE-2024-29095

Site Reviews <= 6.11.4 - Authenticated(Subscriber+) Stored Cross-Site Scripting via display name Medium

March 11, 2024 Patched in ["6.11.7"] CVE-2024-2293

Site Reviews <= 6.10.2 - Missing Authorization Medium

August 29, 2023 Patched in ["6.10.3"] CVE-2023-49832

Site Reviews <= 6.7.0 - Authenticated (Administrator+) Stored Cross-Site Scripting Medium

April 5, 2023 Patched in ["6.7.1"] CVE-2023-1525

Site Reviews <= 6.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via block attribute Medium

March 13, 2023 Patched in ["6.6.0"] CVE-2023-27629

Site Reviews <= 6.5.1 - Missing Authorization Medium

March 13, 2023 Patched in ["6.6.0"] CVE-2023-27625

Site Reviews <= 6.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode Medium

March 13, 2023 Patched in ["6.6.0"] CVE-2023-27612

Site Reviews <= 6.2.0 - Unauthenticated CSV Injection Medium

January 27, 2023 Patched in ["6.4.0"] CVE-2022-46801

Site Reviews <= 5.17.2 - Unauthenticated Stored Cross-Site Scripting High

December 6, 2021 Patched in ["5.17.3"] CVE-2021-24973

Site Reviews <= 5.13.0 - Admin+ Stored Cross-Site Scripting Medium

August 9, 2021 Patched in ["5.13.1"] CVE-2021-24603

Site Reviews <= 2.15.2 - Cross-Site Scripting Medium

May 28, 2018 Patched in ["2.15.3"] CVE-2018-0603

What It Does

Site Reviews lets you collect, display, and manage reviews on your WordPress site using a familiar Amazon-style star rating system. It integrates directly with WooCommerce and SureCart, so product reviews can be collected and shown alongside your existing product pages. Reviews can be submitted by visitors through forms you place anywhere on your site, and you can respond to them from the admin dashboard.

Who It's For

This plugin is best suited for small to mid-sized WooCommerce or SureCart store owners who want a native, self-hosted reviews system instead of pulling testimonials from a third-party platform. It also works well for service businesses, directories, or local business sites that want to capture and showcase user-generated reviews on their own domain.

Who Should Skip It

If you only need to display Google, Yelp, or TripAdvisor reviews imported from a third-party source, this plugin is not the right fit, and a dedicated feed plugin will save you time. Sites running PHP older than 8.1.2 or WordPress older than 6.8 cannot run it at all.

The Bottom Line

Site Reviews earns an overall score of 86.6 out of 100, making it a strong, well-maintained choice for WooCommerce and SureCart merchants who want a self-hosted review collection system. The 98 out of 100 user rating and recent update log suggest the developer is responsive and the codebase is stable. The main gaps are mid-tier popularity and a 70% support resolution rate, so buyers needing guaranteed premium-level support may want to verify response times before relying on it for a high-traffic store.

Related Plugins

Widgets for Google Reviews 94/100

Pick this instead if your goal is to display Google Business Profile reviews on your site rather than collect new ones from visitors.

Rich Showcase for Google Reviews 90/100

Choose this if you want more visually polished, styled testimonial showcases imported from Google or Facebook.

Reviews Feed – Add Testimonials and Customer Reviews From Google Reviews, Yelp, TripAdvisor, and More 83/100

Pick this if you need multi-platform review aggregation across Google, Yelp, and TripAdvisor in a single feed.

Real Testimonials – Testimonial Slider, Collect Customer Reviews and Video Testimonials 82/100

Choose this if you want a slider-based testimonial display with video review support rather than a star-rating system.

WP Google Review Slider 82/100

Pick this for a lightweight, single-purpose slider focused specifically on Google Places reviews.

Site Reviews

About

Security History

What It Does

Who It's For

Who Should Skip It

The Bottom Line

Related Plugins

Tags