Headline

CVE-2022-38470: Customer Reviews for WooCommerce

Cross-Site Request Forgery (CSRF) vulnerability in Customer Reviews for WooCommerce plugin <= 5.3.5 at WordPress.

2 years ago

#csrf #vulnerability #web #google #wordpress #php #perl #auth

Details
Reviews
Installation
Support
Development

Happy customers are your best marketers. So why not ask them to leave a review?

Send an automated, personalized email reminder to each customer after a transaction – make reviewing easier than ever before!

Enhance the standard WooCommerce reviews with extra features, and reassure customers by having their questions answered with a Q&A section on product pages.

The Customer Reviews for WooCommerce plugin helps you increase engagement, build loyalty, improve SEO, and get more sales with social proof.

Localized to over 40 languages and installed on over 50,000 stores!

The plugin includes an optional integration with an external service to verify customer reviews. CusRev collects reviews from customers and verifies their authenticity.

You can find information about CusRev‘s terms, privacy, and data protection policies on our website.

🔥 Main Features

Automated or manual review reminder emails
Aggregated review forms to allow quick and easy reviewing
Enhanced reviews, including ratings, images, voting and filtering options
Offer discounts in exchange for reviews
Integration with Google Shopping
Question and Answer feature, allowing customers to ask and answer FAQs
Import and export reviews

✉️ Review Reminders – Make Reviewing Easy

Customer Reviews for WooCommerce makes reviewing simple.

You can easily set it to send out review collection emails, days or weeks after purchase. The review form makes it as simple as possible for the customer to leave a review.

It’s an easy process:

Your customer places an order.
You fulfill the order and mark it as completed.
After a delay (customizable by you), your customer receives our automated review request email.
The customer leaves a review for all of their purchases on our aggregated form. Reviews can include ratings and images to increase trust.
The review is exported to WooCommerce and published on your site.

You can even choose to automatically send the customer a discount code for future purchases as a thank you.

Plus, benefit from:

A one-page review form where customers can review multiple items in one go
Manual email invitations for selected orders
Personalized emails for each customer with built-in variables
Emails restricted for particular categories of products or customers with specific user roles
Quick and easy functionality thanks to a responsive email template and custom colors
An Unsubscribe option
A built-in testing tool to ensure emails look beautiful before sending
Reminders in different languages via “qTranslate X”, “Polylang” and “WPML” plugin integration
Support for custom WooCommerce order statuses

💸 Boost Sales – With Extra Features

Did you know that displaying reviews can increase conversion by 270%?

Reviews show that people can trust your site. Other people have bought from you before, and it went so well that they want to share their experience. That social proof is important. Customers need to know your product images and descriptions can be trusted. They need to know their bank account is safe.

Turn your visitors into customers by displaying reviews!

Plus, benefit from:

Enabling customers to attach pictures to reviews
Preventing spam by enabling reCAPTCHA for reviews
Showing reviews summary bar on product pages
Filtering reviews by rating
Enabling visitors to vote on reviews left by your customers
Lazy loading of reviews and attached pictures
Sorting reviews by date or votes
Review tagging
Trust Badges that show a summary of verified customer reviews
Built-in shortcodes to display a responsive list, grid, or slider of reviews on any page or post

🔎 Boost SEO – The Automated Way

Google loves something new! Add new content to your site automatically with customer reviews.

Show off review ratings directly in Google searches, and boost your site’s clickthrough rate.

Plus, benefit from:

Getting unique, user-generated SEO content for your shop – customer reviews often contain long tail keywords
Building user-generated content (UGC) such as photos and videos uploaded by your customers
Enhancing rich snippets and structured data markup for reviews with pictures
Enhancing the standard WooCommerce structured data markup with product identifiers (GTIN, MPN, Brand)

😀 Boost Engagement – With Better Feedback

Customers believe that only 8% of companies deliver a great experience – but that can change!

Use reviews to get direct feedback from your customers. Find out the good and bad parts of their experience.

You can make business decisions based on the feedback you receive and keep your customers happy.

Plus, benefit from:

Receiving feedback for multiple products at once with aggregated review forms
Personalized email templates
Enabling customers to vote on past reviews

🚀 Boost Loyalty – Grow Your Repeat Business

Market to your existing customers!

It’s simple: our review reminders keep you in the forefront of their minds, and offering coupon codes for future purchases gets them back to your store.

It’s easy for a customer to leave a review and receive their coupon, which creates a double whammy effect: the customer comes back for more, and you gain valuable feedback. Maybe they’ll even gift the voucher to a friend!

Plus, benefit from:

Automatically generating new coupons for ongoing customer reviews
Fair rules for coupon creation – customers will be awarded with a coupon regardless of how positive or negative their review is
Automatic emails with coupons upon review submission
Personalizing emails with coupons for each customer using built-in variables
Fine-tuning coupon properties according to your sales strategy
Working out-of-the-box with a responsive email template with custom colors
A built-in testing tool to ensure emails look beautiful before sending
Emailing coupons in different languages via “qTranslate X”, “Polylang”, and “WPML” plugin integration

🤔 Reassure Customers – With Questions & Answers

There’s nothing more reassuring to customers than having their questions answered – with Customer Reviews for WooCommerce you can do just that by:

Adding a tab with Questions & Answers or FAQs to product pages on your website
Letting your prospective customers ask questions about products and view questions others have asked
Increasing sales by answering questions and making sure prospective customers have all the information available to make a purchase decision
Reducing return and refund requests by providing answers to common questions about products, as well as offering extra information to avoid any potential misunderstanding of product features or benefits
Improving SEO with content created by your customers – that in turn helps search engines better understand and index your website
Sending email notifications to customers about replies to their questions and making them come back to your website

🛒 Google Shopping Integration

Generate an XML feed with products for Google Shopping
Generate an XML feed with product reviews for Google Shopping
Show star ratings in Google Shopping search results

⬇ Import and Export Reviews

Want to add product reviews from external websites? No problemo.

Just use the import reviews feature, which automatically creates reviews in WooCommerce based on a CSV file.

Similarly, you can export WooCommerce reviews to a CSV file.

Quick and Easy Set-Up

Make sure that WooCommerce is installed.
Then, just follow the Getting Started Tutorial on our official support portal or watch the video tutorial.

Get Even More Features – With the Pro Version

CusRev has two plans: Free and Pro. The Pro plan offers additional features and email support – to find out more and purchase a license, please visit CusRev’s website.

This plugin provides 1 block.

Reviews Grid Block showing a grid with WooCommerce product reviews.

Make sure that WooCommerce plugin is installed and activated. If it is not installed, please install WooCommerce. Our plugin will not work without WooCommerce.
Upload the plugin files to the /wp-content/plugins directory, or install the plugin through the WordPress ‘Plugins’ screen directly.
Activate the plugin through the ‘Plugins’ screen in WordPress
Go the Reviews > Settings in WordPress admin area to configure the plugin

I found a bug in the plugin. How to get it fixed?

Please create a new topic at the support forum and provide detailed information with a screenshot.

How to get Site Key and Secret Key for reCAPTCHA?

Please visit reCAPTCHA website and sign up for an account. Then, you will be able to get API key pair (Site Key and Secret Key) for your website. Copy these keys and paste into the settings of the plugin.

Will collected reviews be shown as stars in Google?

The standard WooCommerce functionality already includes structured data mark up to display your product reviews effectively within organic search results. This plugin extends the standard functionality and adds some extra mark up to help search engines properly crawl your shop. It is important to understand that having a valid structured data mark up in place makes your website eligible for organic stars in Google but it doesn’t guarantee that they will be shown. You can test the rich snippets using Google’s Structured Data Testing Tool.

How to customize template of the reviews on a single product page?

The plugin uses the standard reviews template provided by WooCommerce and enhances it with the reviews summary bar. If your theme requires a customized reviews template or you would like to use a customized reviews template for some other reason, it is possible to do so. Here is how to do it:

Create a folder ‘customer-reviews-woocommerce’ in your current theme’s folder.
Copy file ‘ivole-single-product-reviews.php’ from ‘templates’ subfolder in the plugin’s folder to the folder created at step 1.
Customize the file ‘ivole-single-product-reviews.php’ in the current theme’s folder according to your requirements.

How to Change Sorting of Reviews?

If you would like to change how reviews are sorted on product pages, it is possible to do so using the standard WordPress functionality. Go to Settings -> Discussion menu and find options “Break comments into pages with X top level comments per page and the last/first page displayed by default” and “Comments should be displayed with the older/newer comments at the top of each page”. You can control how reviews are sorted and displayed on product pages by modifying these options.

Hi, When I submit Google Product Reviews XML Feed, Google prompts me the error: Missing or invalid product_id, Missing product_url Is there any way to map them? So thanks!

I’m using it since 2 years, and it’s great. I’d recommend it to every e-commerce owner.

Love the Google shopping feature as well.

Funciona muy bien, en estos dos años no hemos tenido problemas con el plugin

Read all 1,162 reviews

“Customer Reviews for WooCommerce” is open source software. The following people have contributed to this plugin.

Contributors

cusrev

5.3.7

Bug fixes and minor improvements

5.3.6

Bug fixes and minor improvements

5.3.5

Bug fixes and minor improvements

5.3.4

Bug fixes and minor improvements

5.3.3

Bug fixes and minor improvements

5.3.2

Bug fixes and minor improvements

5.3.1

Bug fixes and minor improvements

5.3.0

New feature: responsive design for local review forms
Bug fixes and minor improvements

5.2.1

Bug fixes and minor improvements

5.2.0

New feature: an age restriction option for verified reviews pages of stores selling age-restricted products
CSS enhancements – if you use any caching plugins, please clear cache after installing the update
Bug fixes and minor improvements

5.1.2

Bug fixes and minor improvements

5.1.1

Bug fixes and minor improvements

5.1.0

New feature: image and video attachments for reviews submitted via local aggregated review forms
Bug fixes and minor improvements

5.0.0

New feature: Local aggregated review forms to collect customer reviews without third-party verification by CusRev
New feature: Traditional and Simplified Chinese language support
New feature: support of [sale_price] and [sale_price_effective_date] attributes for Google Shopping XML product feed
Bug fixes and minor improvements

4.46

Bug fixes and minor improvements

4.45

Bug fixes and minor improvements

4.44

Bug fixes and minor improvements

4.43

New feature: email notifications about replies to Q & A
Bug fixes and minor improvements

4.42

Bug fixes and minor improvements

4.41

Improved compatibility with Polylang

4.40

Bug fixes and CSS improvements

4.39

New feature: an option to sort a grid with reviews by the number of attached images (‘sort_by’ parameter)
Bug fixes and minor improvements

4.38

Bug fixes and minor improvements

4.37

Bug fixes and minor improvements

4.36

New feature: enhanced UI for review tagging in the Admin Dashboard
Bug fixes and minor improvements

4.35

New feature: filter reviews by rating in the Admin Dashboard
Bug fixes and minor improvements

4.34

New feature: filter Product and Store reviews in the Admin Dashboard
Bug fixes and minor improvements

4.33

New feature: view breakdown of reviews by rating on the XML feed status page
New feature: like and dislike buttons to display votes for reviews
Bug fixes and minor improvements

4.32

Bug fixes and minor improvements

4.31

New feature: a diagnostics report about hidden reviews linked to products deleted in WooCommerce
Bug fixes and minor improvements

4.30

New feature: automatic download of videos attached by customers via aggregated review forms into the local WordPress Media Library
Bug fixes and minor improvements

4.29

Bug fixes and minor improvements

4.28

New feature: automatic download of images attached by customers via aggregated review forms into the local WordPress Media Library
Bug fixes and minor improvements

4.27

New feature: HTML implementation of Trust Badges (supports customizations via templates)
Bug fixes and minor improvements

4.26

New feature: download and save local copies of videos attached by customers via aggregated review forms (from the ‘Reviews’ page in admin area)
Bug fixes and minor improvements

4.25

New feature: a setting to create avatars with customer initials on WooCommerce single product pages
New feature: download and save local copies of images attached by customers via aggregated review forms (from the ‘Reviews’ page in admin area)
Bug fixes and minor improvements

4.24

New feature: use discount tiers to offer customers different coupons depending on how many photos/videos they uploaded with reviews
Bug fixes and minor improvements

4.23

New feature: a search bar for [cusrev_all_reviews] shortcode
Bug fixes and minor improvements

4.22

New feature: allow customers to share their discount coupons with other people
New feature: exclude out-of-stock products from XML feeds for Google Shopping
Bug fixes and minor improvements

4.21

New feature: create avatars with customer initials in [cusrev_reviews_slider] and [cusrev_reviews_all] shortcodes
Bug fixes and minor improvements

4.20

New feature: create avatars with customer initials in [cusrev_reviews_grid] shortcode and Gutenberg block
Bug fixes and minor improvements

4.19

New feature: display of images uploaded by customers in [cusrev_reviews_grid] shortcode and Gutenberg block
Bug fixes and minor improvements

4.18

New feature: import of reviews from CSV files with semicolon separators
Bug fixes and minor improvements

4.17

New feature: [cusrev_qna] shortcode to display Q&A block on any page or post
Bug fixes and minor improvements

4.16

New feature: visual enhancement for the admin area to display bubbles with counts of reviews and Q&A pending moderation
Bug fixes and minor improvements

4.15

New feature: improved upload of images for reviews left on WooCommerce product pages
Bug fixes and minor improvements

4.14

New feature: add a “featured” label to reviews and pin them to the top (requires “Lazy Load Reviews” option)
Bug fixes and minor improvements

4.13

New feature: restrict sending of discount coupons to selected user roles
Bug fixes and minor improvements

4.12

New feature: “show_summary_bar” parameter for [cusrev_reviews_grid] shortcode
Bug fixes and minor improvements

4.11

New feature: “show_dots” parameter for [cusrev_reviews_slider] shortcode
New feature: attach pictures to existing reviews from WordPress admin area
Bug fixes and minor improvements

4.10

New feature: support of additional attributes on the XML product feed for Google Shopping (‘color’, ‘gender’, and ‘age_group’)
Bug fixes and minor improvements

4.9

New feature: “min_chars” parameter for [cusrev_all_reviews], [cusrev_reviews_grid], and [cusrev_reviews_slider] shortcodes. Use it to set the minimum number of characters that a review must have to be displayed. If this argument is “0”, then all reviews (including rating-only reviews) will be displayed.
Bug fixes and minor improvements

4.8

New feature: “Show more” button can be added to [cusrev_all_reviews] shortcode to replace pagination
Bug fixes and minor improvements

4.7

New feature: improved summary of reviews on product pages and in [cusrev_all_reviews] shortcode
Bug fixes and minor improvements

4.6

New feature: ‘product_tags’ parameter for [cusrev_all_reviews], [cusrev_reviews_grid], and [cusrev_reviews_slider] shortcodes
Bug fixes and minor improvements

4.5

New feature: display count of answered questions next to the product rating and under the product name
Bug fixes and minor improvements

4.4

New feature: lazy loading attribute for pictures uploaded by customers
New feature: ‘Show more’ button to fetch and display additional Q & A on product pages
New feature: Search for Q & A on product pages
Bug fixes and minor improvements

4.3