CertFusion

CertFusion connects your WordPress site to your CertFusion account (https://certfusion.com) using a personal API token. It is a pure API client — no CertFusion server changes are required.

Features:

• Connection settings with a one-click “Test connection” that shows your account and remaining quota.
• Recipient manager in the WordPress admin: browse your certificate lists, add recipients (with custom fields), issue certificates individually or in bulk, and delete recipients.
• Native recipient form (no third-party form plugin required): collect a name, email and custom fields, then automatically issue a certificate on submission. Includes nonce protection, a honeypot and per-IP throttling.
• Verification widget: visitors look up their issued certificates by email and get direct View / Download links.
• Shortcodes and blocks: [certfusion_form id="1"], [certfusion_verify], [certfusion_claim list_id="1"], plus matching Gutenberg blocks.

External services

This plugin connects to the CertFusion API (https://certfusion.com, or a self-hosted CertFusion URL you configure in the settings). CertFusion is the certificate platform this plugin is a client for; the connection is required for every feature of the plugin — without it the plugin does nothing.

Data sent to the CertFusion API, and when:

• Your CertFusion API token is sent with every request as an Authorization header, to authenticate your account.
• When an administrator opens the Recipients or Forms pages, the plugin requests your certificate lists and recipients from the API.
• When an administrator adds, issues or deletes a recipient, that recipient’s name, email address and any custom field values are sent to the API.
• When a visitor submits the recipient form, the name, email address and custom field values they entered are sent to the API to create the recipient and issue their certificate.
• When a visitor uses the verification widget, the email address they entered is sent to the API to look up their issued certificates.

No data is sent to CertFusion on ordinary page loads; requests happen only on the admin actions and visitor submissions listed above.

This service is provided by CertFusion: terms of service, privacy policy.