Title: Certloom – Certificate Verification
Author: Ecapla
Published: <strong>August 17, 2026</strong>
Last modified: August 17, 2026

---

Search plugins

![](https://ps.w.org/certloom/assets/banner-772x250.png?rev=3651155)

![](https://ps.w.org/certloom/assets/icon-256x256.png?rev=3651155)

# Certloom – Certificate Verification

 By [Ecapla](https://profiles.wordpress.org/ecapla/)

[Download](https://downloads.wordpress.org/plugin/certloom.1.5.0.zip)

 * [Details](https://wordpress.org/plugins/certloom/#description)
 * [Reviews](https://wordpress.org/plugins/certloom/#reviews)
 *  [Installation](https://wordpress.org/plugins/certloom/#installation)
 * [Development](https://wordpress.org/plugins/certloom/#developers)

 [Support](https://wordpress.org/support/plugin/certloom/)

## Description

Certloom helps certification bodies, training providers, associations, auditors,
and other organizations manage certificate records and publish public verification
on WordPress.

Visitors enter the complete certificate number to view its current status and only
the fields approved for public display. Letter case is ignored, while spaces, punctuation,
and hyphens must match. Records stay in the site’s WordPress database; Certloom 
does not require an external verification service.

#### WordPress-first and self-hosted

Certloom provides a practical certificate registry without requiring a separate 
SaaS platform or a page builder. The native block and shortcode work with WordPress
itself, while Elementor integration remains optional.

#### Publishing methods

 * **Native WordPress block** with six designs.
 * **Shortcode** using `[certloom]` in the Classic Editor, a Shortcode block, templates,
   or other page builders.
 * **Direct links** using `?certloom_number=YOUR-NUMBER` for QR-code destinations.
   These requests receive noindex and private-cache headers, although the number
   may still appear in browser history, infrastructure logs, or site analytics.
 * **Optional Elementor widgets** when Elementor 3.10 or later is active: Professional,
   Meridian, Halo, Axis, Nova, and Forge.

Each Elementor widget has isolated content and style controls. Structural responsiveness
is automatic and container-aware. Certloom is independent and is not affiliated 
with or endorsed by Elementor.

#### Certificate management

 * Dedicated indexed database table.
 * Add, edit, search, filter, sort, paginate, delete, and bulk-delete records.
 * Valid, Suspended, and Withdrawn workflow statuses; Expired is normally calculated
   from the expiry date.
 * Protected review handling for explicitly restored historical Expired records.
 * Configurable core and custom fields with ordering and public-visibility controls.
 * Fresh installations publish only certificate number and status by default.
 * Removed custom fields are retired so their keys and stored values remain protected.
 * Dedicated `manage_certverify` capability and optional Certificate Manager role.

#### Import, export, and complete backup

 * CSV template generated from the current field schema, followed by mapping review.
 * Partial updates preserve fields not included in the import.
 * Blank mapped cells preserve existing values unless clearing is explicitly enabled.
   Status cannot be cleared, and a new row with a mapped-but-blank Status is rejected.
 * Per-row validation, formula neutralization, and bounded file, row, column, and
   cell limits.
 * Administrator-only Historical restore mode for trusted Certloom exports containing
   protected legacy Expired records.
 * Versioned streaming JSON backup for lossless restoration of certificates, settings,
   fields, retired values, workflow sources, and timestamps.
 * Restore preview before choosing exact snapshot replacement or a non-destructive
   certificate merge.
 * Restore locking pauses Certloom writes during commit while public verification
   remains available.
 * Chunked imports, indexed prefetching, deferred counts, and keyset exports reduce
   memory and query pressure on large registries.

#### Security and privacy

 * Whole-number exact lookup; partial matches are never returned.
 * Public output includes only fields explicitly enabled by the site owner.
 * Private-cache and noindex headers for REST verification and supported direct-
   link requests.
 * Bounded input, basic rate limiting, accessible announcements, and safe no-JavaScript
   verification.
 * Identical same-page lookups share one in-flight request and stale responses cannot
   overwrite newer searches.
 * No analytics, telemetry, remote scripts, remote fonts, or external certificate
   processing.
 * Suggested privacy-policy wording is added to WordPress’s Privacy Policy Guide.
 * Certificate data and settings are retained on uninstall by default; administrators
   may opt into complete removal.

## Screenshots

[⌊Public certificate verification page with status guide.⌉⌊Public certificate verification
page with status guide.⌉[

Public certificate verification page with status guide.

[⌊Appearance & Embed admin screen showing the block, shortcode, and Elementor widget
options.⌉⌊Appearance & Embed admin screen showing the block, shortcode, and Elementor
widget options.⌉[

Appearance & Embed admin screen showing the block, shortcode, and Elementor widget
options.

[⌊Professional Elementor widget design in the editor preview.⌉⌊Professional Elementor
widget design in the editor preview.⌉[

Professional Elementor widget design in the editor preview.

[⌊Meridian Elementor widget design in the editor preview.⌉⌊Meridian Elementor widget
design in the editor preview.⌉[

Meridian Elementor widget design in the editor preview.

## Blocks

This plugin provides 1 block.

 *   Certloom – Certificate Verification Add a certificate verification interface
   without requiring Elementor.

## Installation

 1. Install the ZIP through Plugins > Add New > Upload Plugin, or upload the `certloom`
    folder to `/wp-content/plugins/`.
 2. Activate Certloom.
 3. Review Certloom > Field Manager and choose any additional fields that may appear
    publicly.
 4. Add records manually or through Certloom > Import & Export.
 5. Open Certloom > Appearance & Embed and choose the block, shortcode, or optional
    Elementor method.
 6. Review Certloom > Access & Settings for permissions, branding, privacy, and uninstall
    preferences.
 7. After widget CSS changes, use Elementor > Tools > Regenerate CSS & Data and clear
    site caches.

## FAQ

### Can I use Certloom without Elementor?

Yes. The native block, shortcode, administration, REST verification, CSV tools, 
direct links, roles, and status handling work independently.

### What happens when a certificate expires?

Expiry is calculated from the expiry date during normal administration and CSV workflows.
Extending the date renews the certificate unless it is Suspended or Withdrawn. Restored
historical Expired records remain protected until reviewed.

### Can a CSV update erase fields I did not import?

No. Unmapped values are preserved. Blank mapped cells on existing records are also
preserved unless clearing is explicitly enabled. Status cannot be cleared.

### What is the difference between CSV export and Complete backup?

CSV is intended for spreadsheet interchange. Complete backup is a versioned streaming
JSON format for lossless restoration, including settings, field definitions, retired
values, workflow sources, and timestamps.

### Does verification work without JavaScript?

Yes. The form can submit a normal GET request and render the result on the server.
JavaScript provides the faster in-page experience.

### Is certificate data sent to Ecapla?

No. Records stay in the site’s WordPress database and verification is performed 
by that site.

### Is data deleted on uninstall?

Not by default. Enable permanent data removal in Certloom > Access & Settings before
deleting the plugin only when that is intended.

### Where can I get support?

After publication, use the Support tab on the WordPress.org plugin page. Include
the WordPress, PHP, and Certloom versions, clear reproduction steps, and relevant
error text. Never post private certificate data, backup files, credentials, or personal
information in a public topic.

## Reviews

There are no reviews for this plugin.

## Contributors & Developers

“Certloom – Certificate Verification” is open source software. The following people
have contributed to this plugin.

Contributors

 *   [ Ecapla ](https://profiles.wordpress.org/ecapla/)

[Translate “Certloom – Certificate Verification” into your language.](https://translate.wordpress.org/projects/wp-plugins/certloom)

### Interested in development?

[Browse the code](https://plugins.trac.wordpress.org/browser/certloom/), check out
the [SVN repository](https://plugins.svn.wordpress.org/certloom/), or subscribe 
to the [development log](https://plugins.trac.wordpress.org/log/certloom/) by [RSS](https://plugins.trac.wordpress.org/log/certloom/?limit=100&mode=stop_on_copy&format=rss).

## Changelog

#### 1.5.0

 * Fixed Elementor Flexbox Container sizing so all Certloom widgets occupy the available
   row and remain centered; Professional stays capped at 680px.
 * Finalized the public identity as Certloom – Certificate Verification with the
   requested WordPress.org slug and text domain `certloom`.
 * Fixed an activation fatal introduced during the pre-release rename by restoring
   the correct settings, fields, and import include paths.
 * Restored Elementor width safety after the rename so Professional remains centered
   at up to 680px and Meridian, Halo, Axis, Nova, and Forge fill their Elementor
   containers without overflow.
 * Aligned the native block, admin navigation, shortcode, direct-link parameter,
   REST namespace, and Elementor widget identifiers with Certloom while preserving
   the existing database schema and stored data.
 * Prepared the corrected WordPress.org review-resubmission package and directory
   assets.

#### 1.4.9

 * Added an expiring restore-maintenance lock that pauses Certloom writes during
   a resumable complete restore.
 * Split restoration into exact Replace mode and non-destructive Merge mode with
   preview counts for current-only certificates.
 * Added registry and configuration checks so unexpected changes abort before the
   atomic restore commit.
 * Made complete-backup generation reject mixed-state files when records or configuration
   change during export.
 * Preserved public verification during restore and expanded restore-state cleanup.

For the complete release history, see `changelog.txt` included with the plugin.

## Meta

 *  Version **1.5.0**
 *  Last updated **1 day ago**
 *  Active installations **Fewer than 10**
 *  WordPress version ** 6.3 or higher **
 *  Tested up to **7.0.4**
 *  PHP version ** 7.4 or higher **
 * Tags
 * [certificate](https://wordpress.org/plugins/tags/certificate/)[certificate verification](https://wordpress.org/plugins/tags/certificate-verification/)
   [credentials](https://wordpress.org/plugins/tags/credentials/)[shortcode](https://wordpress.org/plugins/tags/shortcode/)
 *  [Advanced View](https://wordpress.org/plugins/certloom/advanced/)

## Ratings

No reviews have been submitted yet.

[Your review](https://wordpress.org/support/plugin/certloom/reviews/#new-post)

[See all reviews](https://wordpress.org/support/plugin/certloom/reviews/)

## Contributors

 *   [ Ecapla ](https://profiles.wordpress.org/ecapla/)

## Support

Got something to say? Need help?

 [View support forum](https://wordpress.org/support/plugin/certloom/)