Trustpilot Reviews
Trustpilot Reviews has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of September 2026. Their average CVSS score is 5.4, and the most serious one scores 5.4 out of 10.
The most common weakness is Missing Authorization, behind 1 of the records (100%).
The one issue recorded for Trustpilot Reviews has a vendor fix available, so running the current release closes it.
All of these findings were reported by Que Thanh Tuan - Blue Rock. Trustpilot Reviews is installed on roughly 30,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.2.11.
CVE-2025-57997Trustpilot Reviews <= 2.5.925 - Missing Authorization
Read the full analysisVulnerability Records

Trustpilot Reviews
Author
Trustpilot
What is Trustpilot? Grow and show brand trust with Trustpilot reviews. Trustpilot is the leading independent review platform – free and open to all. With more than 50 million reviews of over 250,000 companies, Trustpilot gives people a place to share and discover reviews of businesses, while giving every business the tools to turn consumer feedback into business results. Come join us! Trustpilot WooCommerce plugin World`s most effective review solution is now available with free WooCommerce plugin. Install Trustpilot’s WooCommerce plugin Configure Trustpilot’s WooCommerce plugin Trustpilot’s plugin allows you to automate your review collection for service and product reviews. You can also add a TrustBox widget using the plugin and invite past customers to write reviews. Features of Trustpilot Reviews Automate your review requests — a new order automatically triggers an email to your customer, requesting that they review your company on Trustpilot. Send requests to your past customers in one go! Add multiple TrustBox widgets using the plugin – simply drag and drop them for an instant preview Rearrange, customize, and publish widgets without any code changes Add TrustBoxes to different pages of your website It’s free!
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C