About this plugin
KingWeb Testimonials Manager is a complete testimonials system for WordPress. Collect testimonials through a public submission form, moderate them in the admin, respond publicly, and display them as a grid, carousel, top-rated list, or a single embedded testimonial — via shortcodes, an Elementor widget, or a Gutenberg block.
Highlights
- Public submission form with star rating, optional photo (Media Library), and company.
- Moderation: approve / reject / delete, bulk actions, public admin responses, CSV export.
- Display modes: grid (with filters + search), carousel, top-rated, and single embed.
- Builders: “Custom Testimonials” Elementor widget and a native Gutenberg block — pick a Display Type, no shortcode required.
- Analytics dashboard: trends, status breakdown, rating distribution, response rate, and more.
- Editable, white-label emails (thank-you, admin notification, response) with branding controls.
- SEO: Schema.org review + aggregateRating JSON-LD.
- GDPR: consent capture, WordPress export/erase integration, data-retention notice.
- Spam protection: honeypot, per-IP rate limit, optional reCAPTCHA v3.
Third-party libraries
This plugin bundles the following third-party libraries (each MIT-licensed, GPL-compatible):
- Chart.js v4.5.1 — https://github.com/chartjs/Chart.js — MIT License
- Swiper v12.2.0 — https://github.com/nolimits4web/swiper — MIT License
External services
This plugin includes an optional Google reCAPTCHA v3 integration for spam protection on the testimonial submission form. It is disabled by default and only becomes active when a site administrator enters their own reCAPTCHA v3 Site Key and Secret Key under Testimonials → Settings.
When enabled:
- What it is / what it is used for: Google reCAPTCHA v3 scores form submissions to block automated spam, so only the testimonial submission form is affected.
- What data is sent and when: when a visitor submits the testimonial form, the reCAPTCHA script (loaded from www.google.com) generates a token in the visitor’s browser; the plugin then sends that token, the site’s reCAPTCHA secret key, and the visitor’s IP address to Google’s verification endpoint (https://www.google.com/recaptcha/api/siteverify) to obtain a spam score. No data is sent when the keys are not configured.
- Service provider: Google. Terms of Service: https://policies.google.com/terms — Privacy Policy: https://policies.google.com/privacy — reCAPTCHA terms: https://www.google.com/recaptcha/about/
If no reCAPTCHA keys are configured, the plugin does not contact any external service.