TrustMate.io – WooCommerce integration WordPress Plugin

TrustMate.io – WooCommerce integration

TrustMate.io – WooCommerce integration is a WordPress plugin with the following stats:

#1,675 Global Rank

3K+ active installs

4/5 10 ratings

Since 2020 7 years active

Vulnerabilities

3 Total

2 Patched

1 Resolved by version

0 Active

100% Resolved rate

TrustMate.io – WooCommerce integration <= 1.14.0 - Cross-Site Request Forgery

CWE-352 · Cross-Site Request Forgery (CSRF)

The TrustMate.io – WooCommerce integration plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.14.0. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to perform an unauthorized action granted they can trick a site administrator into performing an action such as clicking on a link.

4.3 Medium Affected All – 1.14.0 Patched in Resolved as of v1.17.0 (unconfirmed) Published 5 Sep 2025 CVE CVE-2025-58802

TrustMate.io integration for WooCommerce < 1.8.12 - Authenticated (Subscriber+) Arbitrary Blog Option Update

CWE-862 · Missing Authorization

The TrustMate.io integration for WooCommerce plugin for WordPress is vulnerable to Blog Option Update via the 'save_checkbox' AJAX action in versions up to, and including, 1.8.12. This makes it possible for authenticated Subscriber+ attackers to update the vulnerable site's options.

6.3 Medium Affected All – 1.8.11 Patched in ✓ 1.8.12 Published 3 Jan 2022

TrustMate.io integration for WooCommerce < 1.8.12 - Authenticated (Subscriber+) Arbitrary Settings Update

CWE-862 · Missing Authorization

The TrustMate.io integration for WooCommerce plugin for WordPress is vulnerable to Arbitrary Settings Update via the 'save_checkbox' AJAX action in versions up to, and including, 1.8.11. This makes it possible for authenticated Subscriber+ attackers to update otherwise restricted plugin settings and perform a subsequent stored XSS attack within the vulnerable service.

6.3 Medium Affected All – 1.8.11 Patched in ✓ 1.8.12 Published 3 Jan 2022

About TrustMate.io – WooCommerce integration

TrustMate - Reviews for your shop and products at you WooCommerce site. Generate valuable traffic and profit more than others!

TrustMate – Reviews for your shop and products at you WooCommerce site. Generate valuable traffic and profit more than others!

How does TrustMate work?

TrustMate is an innovative commerce marketing platform that supports businesses of various scales in gathering
and displaying customer reviews, images, and questions and answers at every stage of the customer’s purchasing process.
By leveraging these elements across multiple social platforms, TrustMate empowers brands to establish buyer confidence,
enhance website traffic, and boost conversion rates.

Enhance the online presence of your website and boost your conversion rate by harnessing the power of client reviews
through TrustMate. By utilizing TrustMate, you can achieve the following:

Maximize your returns compared to equivalent investments in online advertising.
Attract more committed and decisive clients.
Cultivate a strong and reputable brand image in the online sphere.

Trusted by renowned brands such as Sizeer, Decathlon, 4F, Wittchen, NewBalance, Adidas and many others, TrustMate offers
you the following benefits:

Company and product reviews that bolster your reputation.
The esteemed Trustworthy Company Certificate.
A prominent Business Card on TrustMate.
Widgets featuring company and product reviews, enabling you to garner stars in Google search results.
Increased website traffic for your store.
Acquiring new clients through social proof.
The ability to upload existing product reviews.
Redirecting traffic from gathered reviews back to your website, further expanding your online reach.

Frequently Asked Questions

Can I upload the reviews I have already collected to TrustMate?

Yes, absolutely! You can import the reviews you have already gathered into TrustMate. The wealth of experience you have accumulated over the years is highly valuable to us. That’s why we allow customers to upload previously collected company and product reviews.

How to start?

Just create your account and you have access to TrustMate services. No credit cards or other commitments required.

How does TrustMate work?

We enable you to collect and present reviews. We help with building your credibility and increase traffic on your website.

How hard is to integrate TrustMate?

You don’t need technical skills. You can use our plugin and setup everything is several minutes.

Can I test the tool for free?

We have 3 months test period.

What happens when the free trial ends?

After testing, we indicate which package is best for the client.

Will I get a higher invoice when I exceed the limit?

We don’t do anything without our clients knowledge! If you send too many invitations, their excess accumulates in the sending queue.
This means that you need a higher package or you can wait for the limit to be renewed.

How long does the subscription last?

We have two subscription periods of 1 and 12 months.

Changelog

1.17.0

Added Multihornet support for variable products
Allow requiring separate user consent for review invitation

1.16.2

Fix package build and info.php error

1.16.1

Added/fixed support for multiple TrustMate accounts per language for WPML users.
Added support for showing subsciption information.

1.16.0

Added support for long product category paths. Read the new option description before enabling.
Widgets are rendered from trustmate.pro domain, you may need to update CSP policy if you use one.
Added a notice about Multihornet configuration in client’s panel.

1.15.0

Added support for Multihornet widget
Orders with marketplate (like Amazon) e-mails are ignored when creating review invitation.
Added or updated serveral translations

1.14.0

Added support for multiple TrustMate accounts per language (for Polylang users).

1.13.2

Added some missing widget images.

1.13.1

Fix Bee images readability.

1.13.0

Added Bee widget.

1.12.4

Updated CS translations.

1.12.3

Added support for colleting product GTIN-s from Rank Math Pro plugin.

1.12.2

Made multihornet widget slighty faster avoiding one request during rendering
Upgraded chupacabra widget description to version 2
Owl widgets (the one with badges) can now be turned off from plugin
Fixed stars on hornet widget

1.12.1

Make widget JS scripts deffered to improve content loading time

1.12.0

Added support for renewed badger widget.
Improved collecting product microdata for variable products.

1.11.0

Added support for new and redesinged widgets.
Redesigned widget configuration page.
Added translations for: bulgarian, czech, german, greek, french, italian, lithuanian and swedish.