WP-Safety

WPBot – AI ChatBot for Live Support, Lead Generation, AI Services Security & Risk Analysis

wordpress.org/plugins/chatbot

AI ChatBot for WordPress WPBot - Automated 24/7 Live Chat Customer Support. NATIVE, Lead Generation, Forms, Gemini, DialogFlow, ChatGPT, OpenRouter

5K active installs v8.5.9 PHP 5.6+ WP 4.6+ Updated Jul 22, 2026
aichatbotchatgptlive-chatlive-support
76
B · Generally Safe
CVEs total38
Unpatched0
Last CVEJul 6, 2026
Plugin page Download
Safety Verdict

Is WPBot – AI ChatBot for Live Support, Lead Generation, AI Services Safe to Use in 2026?

Mostly Safe

Score 76/100

WPBot – AI ChatBot for Live Support, Lead Generation, AI Services is generally safe to use. 38 past CVEs were resolved.

38 known CVEsLast CVE: Jul 6, 2026Updated 1mo ago
Risk Assessment

The "chatbot" plugin v7.8.9 presents a concerning security posture, despite some positive code hygiene indicators. While a significant portion of SQL queries utilize prepared statements and a majority of output is properly escaped, the plugin suffers from a large attack surface with a substantial number of unprotected AJAX handlers. The presence of "unserialize" as a dangerous function, coupled with five high-severity taint flows, suggests potential for critical vulnerabilities. The plugin's history of 33 known CVEs, including five critical and two high-severity ones, with common patterns like missing authorization, path traversal, and SQL injection, is a strong indicator of recurrent security weaknesses. The fact that the last vulnerability was reported in October 2025, even though it's currently unpatched, is also a red flag. Overall, the plugin exhibits a history of severe security flaws and possesses characteristics that make it a high-risk component.

Key Concerns

  • Large attack surface without auth checks
  • Dangerous function: unserialize
  • High severity taint flows
  • Total known CVEs (33)
  • Critical CVEs (5)
  • High CVEs (2)
  • Vulnerability type: Missing Authorization
  • Vulnerability type: Path Traversal
  • Vulnerability type: SQL Injection
  • Vulnerability type: Deserialization of Untrusted Data
  • Unpatched critical CVE
Vulnerabilities
38 published

WPBot – AI ChatBot for Live Support, Lead Generation, AI Services Security Vulnerabilities

CVEs by Year

22 CVEs in 2023
2023
5 CVEs in 2024
2024
6 CVEs in 2025
2025
5 CVEs in 2026
2026
Patched Has unpatched

Severity Breakdown

Critical
5
High
5
Medium
28

38 total CVEs

CVE-2026-57363high · 7.2Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

WPBot – AI ChatBot for Live Support, Lead Generation, AI Services <= 8.3.7 - Unauthenticated Stored Cross-Site Scripting

Jul 6, 2026 Patched in 8.3.8 (9d)
CVE-2026-57362medium · 6.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

WPBot – AI ChatBot for Live Support, Lead Generation, AI Services <= 8.3.2 - Reflected Cross-Site Scripting

Jul 1, 2026 Patched in 8.3.3 (7d)
CVE-2026-13731high · 7.2Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

WPBot <= 8.4.9 - Unauthenticated Stored Cross-Site Scripting via 'conversation' Parameter

Jun 30, 2026 Patched in 8.5.0 (1d)
CVE-2026-40788medium · 4.3Missing Authorization

WPBot – AI ChatBot for Live Support, Lead Generation, AI Services <= 7.9.7 - Missing Authorization

Apr 23, 2026 Patched in 7.9.9 (8d)
CVE-2026-32499high · 7.5Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

WPBot – AI ChatBot for Live Support, Lead Generation, AI Services <= 7.7.9 - Unauthenticated SQL Injection

Mar 20, 2026 Patched in 7.8.0 (7d)
CVE-2025-62952medium · 4.3Missing Authorization

ChatBot <= 7.7.3 - Missing Authorization

Oct 13, 2025 Patched in 7.7.4 (114d)
CVE-2025-64277medium · 5.3Missing Authorization

ChatBot <= 7.3.9 - Missing Authorization

Oct 12, 2025 Patched in 7.4.0 (37d)
CVE-2025-9111medium · 4.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

AI ChatBot for WordPress <= 7.1.0 - Authenticated (Admin+) Stored Cross-Site Scripting

Aug 19, 2025 Patched in 7.1.0 (38d)
CVE-2025-53200medium · 5.4Missing Authorization

ChatBot <= 6.7.3 - Missing Authorization

Jun 27, 2025 Patched in 6.7.5 (5d)
CVE-2025-0329medium · 4.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

AI ChatBot for WordPress – WPBot <= 6.2.3 - Authenticated (Admin+) Stored Cross-Site Scripting

Mar 3, 2025 Patched in 6.2.4 (89d)
CVE-2025-26932high · 8.8Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')

ChatBot <= 6.3.5 - Authenticated (Contributor+) Local File Inclusion

Feb 23, 2025 Patched in 6.3.6 (9d)
CVE-2024-6669medium · 5.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

AI ChatBot for WordPress – WPBot <= 5.5.7 - Authenticated (Administrator+) Stored Cross-Site Scripting

Jul 16, 2024 Patched in 5.5.8 (1d)
CVE-2024-0451medium · 5Improper Access Control

AI ChatBot <= 5.3.4 - Missing Authorization via openai_file_list_callback

May 21, 2024 Patched in 5.3.6 (70d)
CVE-2024-0452medium · 5Improper Access Control

AI ChatBot <= 5.3.4 - Missing Authorization via openai_file_upload_callback

May 21, 2024 Patched in 5.3.6 (70d)
CVE-2024-0453medium · 5Improper Access Control

AI ChatBot <= 5.3.4 - Missing Authorization via openai_file_delete_callback

May 21, 2024 Patched in 5.3.6 (70d)
CVE-2024-22309critical · 9.8Deserialization of Untrusted Data

ChatBot <= 5.1.0 - Unauthenticated PHP Object Injection

Jan 19, 2024 Patched in 5.1.1 (6d)
CVE-2023-48741high · 7.2Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

ChatBot <= 4.7.8 - Authenticated (Administrator+) SQL Injection

Nov 23, 2023 Patched in 4.7.9 (61d)
CVE-2023-5606medium · 4.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

ChatBot 4.8.6 - 4.9.6 - Authenticated (Administrator+) Stored Cross-Site Scripting in FAQ Builder

Nov 1, 2023 Patched in 4.9.7 (83d)
CVE-2023-5241critical · 9.6Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

AI ChatBot <= 4.8.9 and 4.9.2 - Authenticated (Subscriber+) Directory Traversal to Arbitrary File Write via qcld_openai_upload_pagetraining_file

Oct 11, 2023 Patched in 4.9.1 (104d)
CVE-2023-5204critical · 9.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

AI ChatBot <= 4.8.9 - Unauthenticated SQL Injection via qc_wpbo_search_response

Oct 11, 2023 Patched in 4.9.1 (104d)
CVE-2023-5212critical · 9.6Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

AI ChatBot <= 4.8.9 and 4.9.2- Authenticated (Subscriber+) Arbitrary File Deletion via qcld_openai_delete_training_file

Oct 11, 2023 Patched in 4.9.1 (104d)
CVE-2023-5534medium · 4.3Cross-Site Request Forgery (CSRF)

AI ChatBot <= 4.8.9 and 4.9.2 - Cross-Site Request Forgery on AJAX actions

Oct 11, 2023 Patched in 4.9.1 (104d)
CVE-2023-5533medium · 5.3Missing Authorization

AI ChatBot <= 4.8.9 and 4.9.2 - Missing Authorization on AJAX actions

Oct 11, 2023 Patched in 4.9.1 (104d)
CVE-2023-5254medium · 5.3Exposure of Sensitive Information to an Unauthorized Actor

AI ChatBot <= 4.8.9 - Unauthenticated Sensitive Information Exposure via qcld_wb_chatbot_check_user

Oct 11, 2023 Patched in 4.9.1 (104d)
CVE-2023-44993medium · 5.3Cross-Site Request Forgery (CSRF)

ChatBot <= 4.7.8 - Cross-Site Request Forgery via qc_wp_latest_update_check

Oct 3, 2023 Patched in 4.7.9 (112d)
CVE-2023-4254medium · 4.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

ChatBot 4.7.7 - Authenticated (Administrator+) Stored Cross-Site Scripting in Language Settings

Aug 8, 2023 Patched in 4.7.8 (168d)
CVE-2023-4253medium · 4.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

ChatBot <= 4.7.7 - Authenticated (Administrator+) Stored Cross-Site Scripting in FAQ Builder

Aug 8, 2023 Patched in 4.7.8 (168d)
CVE-2023-2811medium · 4.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

AI ChatBot <= 4.5.5 - Authenticated (Administrator+) Stored Cross-Site Scripting

May 25, 2023 Patched in 4.5.6 (243d)
CVE-2023-3175medium · 4.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

AI ChatBot <= 4.6.0 - Authenticated (Administrator+) Stored Cross-Site Scripting

May 22, 2023 Patched in 4.6.1 (246d)
CVE-2023-2742medium · 4.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

AI ChatBot <= 4.5.4 - Authenticated (Administrator+) Stored Cross-Site Scripting

May 22, 2023 Patched in 4.5.5 (246d)
CVE-2023-1011medium · 6.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

ChatBot <= 4.4.4 - Unauthenticated Stored Cross-Site Scripting via Cross-Site Request Forgery

Apr 20, 2023 Patched in 4.4.5 (278d)
CVE-2023-1650critical · 9.8Deserialization of Untrusted Data

ChatBot <= 4.4.6 - Unauthenticated PHP Object Injection via Cookies

Apr 12, 2023 Patched in 4.4.7 (286d)
CVE-2023-1660medium · 6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

ChatBot <= 4.4.8 - Unauthenticated Stored Cross-Site Scripting in Admin Dashboard

Apr 12, 2023 Patched in 4.4.9 (286d)
CVE-2023-1649medium · 4.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

AI ChatBot <= 4.4.9 - Authenticated (Administrator+) Stored Cross-Site Scripting

Apr 12, 2023 Patched in 4.5.1 (286d)
CVE-2023-1651medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

ChatBot <= 4.4.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting via openai_settings_option_callback

Apr 12, 2023 Patched in 4.4.9 (286d)
WF-b33bf55c-0397-44a2-8c18-ea5f8f1e2ec9-chatbotmedium · 5.4Missing Authorization

AI ChatBot <= 4.4.7 - Missing Authorization on openai_settings_option_callback

Mar 29, 2023 Patched in 4.4.8 (300d)
CVE-2023-24415medium · 5.4Cross-Site Request Forgery (CSRF)

ChatBot <= 4.2.8 - Cross-Site Request Forgery to Stored Cross-Site Scripting and Settings Reset

Jan 27, 2023 Patched in 4.2.9 (361d)
CVE-2022-47613medium · 4.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

ChatBot <= 4.3.0 - Authenticated (Admin+) Cross-Site Scripting

Jan 27, 2023 Patched in 4.3.1 (361d)
Version History

WPBot – AI ChatBot for Live Support, Lead Generation, AI Services Release Timeline

v8.5.9Current
v8.5.8
v8.5.7
v8.5.6
v8.5.5
v8.5.4
v8.5.3
v8.5.2
v8.5.0
v8.4.91 CVE
CVE-2026-13731
v8.4.81 CVE
CVE-2026-13731
v8.4.71 CVE
CVE-2026-13731
v8.4.61 CVE
CVE-2026-13731
v8.4.41 CVE
CVE-2026-13731
v8.4.31 CVE
CVE-2026-13731
v8.4.21 CVE
CVE-2026-13731
v8.4.11 CVE
CVE-2026-13731
v8.3.91 CVE
CVE-2026-13731
v8.3.81 CVE
CVE-2026-13731
v8.3.72 CVEs
CVE-2026-13731 CVE-2026-57363
Code Analysis
Analyzed Mar 16, 2026

WPBot – AI ChatBot for Live Support, Lead Generation, AI Services Code Analysis

Dangerous Functions
113
Raw SQL Queries
22
105 prepared
Unescaped Output
444
1765 escaped
Nonce Checks
50
Capability Checks
46
File Operations
8
External Requests
46
Bundled Libraries
1

Dangerous Functions Found

unserialize$wp_chatbot_select_pages = unserialize(get_option('wp_chatbot_show_pages_list'));functions.php:253
unserialize$wpwbot_times = wp_kses_post(unserialize(get_option('wpwbot_hours')));functions.php:321
unserialize$html .= '<p style="text-align: center"><button type="button" id="wp-chatbot-loadmore" data-offset="functions.php:390
unserialize$html .= '<p style="text-align: center"><button type="button" id="wp-chatbot-loadmore" data-offset="functions.php:420
unserialize$html .= '<p style="text-align: center"><button type="button" id="wp-chatbot-loadmore" data-offset="functions.php:541
unserialize$html .= '<p style="text-align: center"><button type="button" id="wp-chatbot-loadmore" data-offset="functions.php:604
unserialize$html .= '<p style="text-align: center"><button type="button" id="wp-chatbot-loadmore" data-offset="functions.php:702
unserialize$variations .= '<option value="">' . wp_kses_post(wpb_randmom_message_handle(unserialize(get_option(functions.php:921
unserialize$add_cart_button .= '<input type="button" id="wp-chatbot-variation-add-to-cart" wp-chatbot-product-functions.php:933
unserialize$add_cart_button .= '<input type="button" id="wp-chatbot-add-cart-button" wp-chatbot-product-id="' .functions.php:936
unserialize$product_quantity .= '<label for="">' . wp_kses_post(wpb_randmom_message_handle(unserialize(get_optifunctions.php:939
unserialize$response['message'] = wp_kses_post(wpb_randmom_message_handle(unserialize(get_option('qlcd_wp_chatbfunctions.php:1012
unserialize$response['message'] = wp_kses_post(wpb_randmom_message_handle(unserialize(get_option('qlcd_wp_chatbfunctions.php:1112
unserialize$response['message'] .= wp_kses_post(wpb_randmom_message_handle(unserialize(get_option('qlcd_wp_chatfunctions.php:1145
unserialize$order_html .= '<p>' . wp_kses_post(wpb_randmom_message_handle(unserialize(get_option('qlcd_wp_chatbfunctions.php:1179
unserialize$wp_chatbot_product_title = wp_kses_post(wpb_randmom_message_handle(unserialize(get_option('qlcd_wp_functions.php:1218
unserialize$wp_chatbot_product_title = wp_kses_post(wpb_randmom_message_handle(unserialize(get_option('qlcd_wp_functions.php:1226
unserialize$wp_chatbot_product_title = wp_kses_post(wpb_randmom_message_handle(unserialize(get_option('qlcd_wp_functions.php:1236
unserialize$wp_chatbot_product_title = wp_kses_post(wpb_randmom_message_handle(unserialize(get_option('qlcd_wp_functions.php:1239
unserialize$wp_chatbot_product_title = wp_kses_post(wpb_randmom_message_handle(unserialize(get_option('qlcd_wp_functions.php:1289
unserialize$wp_chatbot_product_title = wp_kses_post(wpb_randmom_message_handle(unserialize(get_option('qlcd_wp_functions.php:1297
unserialize$wp_chatbot_product_title = wp_kses_post(wpb_randmom_message_handle(unserialize(get_option('qlcd_wp_functions.php:1307
unserialize$wp_chatbot_product_title = wp_kses_post(wpb_randmom_message_handle(unserialize(get_option('qlcd_wp_functions.php:1310
unserialize$cart_title = wp_kses_post(wpb_randmom_message_handle(unserialize(get_option('qlcd_wp_chatbot_shoppifunctions.php:1365
unserialize$no_cart_item_msg = wp_kses_post(wpb_randmom_message_handle(unserialize(get_option('qlcd_wp_chatbot_functions.php:1366
unserialize<div class="wp-chatbot-bubble">' . wp_kses_post(wpb_randmom_message_handle(unserialize(get_option('qfunctions.php:1377
unserialize$html .= '<div class="wp-chatbot-cart-header"><div class="qcld-wp-chatbot-cell">' . wp_kses_post(wpbfunctions.php:1381
unserialize$html .= '<div class="wp-chatbot-cart-header"><div class="qcld-wp-chatbot-cell">' . wp_kses_post(wpbfunctions.php:1381
unserialize$html .= '<div class="wp-chatbot-cart-header"><div class="qcld-wp-chatbot-cell">' . wp_kses_post(wpbfunctions.php:1381
unserialize$html .= '<div class="wp-chatbot-cart-footer"><div class="qcld-wp-chatbot-cart-page"><a class="wp-chfunctions.php:1401
unserialize$html .= '<div class="wp-chatbot-cart-footer"><div class="qcld-wp-chatbot-cart-page"><a class="wp-chfunctions.php:1401
unserialize$no_cart_item_msg = wp_kses_post(wpb_randmom_message_handle(unserialize(get_option('qlcd_wp_chatbot_functions.php:1422
unserialize$html .= '<div class="wp-chatbot-cart-header"><div class="qcld-wp-chatbot-cell">' . wp_kses_post(wpbfunctions.php:1427
unserialize$html .= '<div class="wp-chatbot-cart-header"><div class="qcld-wp-chatbot-cell">' . wp_kses_post(wpbfunctions.php:1427
unserialize$html .= '<div class="wp-chatbot-cart-header"><div class="qcld-wp-chatbot-cell">' . wp_kses_post(wpbfunctions.php:1427
unserialize$html .= '<div class="wp-chatbot-cart-footer"><div class="qcld-wp-chatbot-cart-page"><a class="wp-chfunctions.php:1447
unserialize$html .= '<div class="wp-chatbot-cart-footer"><div class="qcld-wp-chatbot-cart-page"><a class="wp-chfunctions.php:1447
unserialize$cart_title = wp_kses_post(wpb_randmom_message_handle(unserialize(get_option('qlcd_wp_chatbot_shoppifunctions.php:1463
unserialize$no_cart_item_msg = wp_kses_post(wpb_randmom_message_handle(unserialize(get_option('qlcd_wp_chatbot_functions.php:1464
unserialize<div class="wp-chatbot-bubble">' . wp_kses_post(wpb_randmom_message_handle(unserialize(get_option('qfunctions.php:1475
unserialize$html .= '<div class="wp-chatbot-cart-header"><div class="qcld-wp-chatbot-cell">' . wp_kses_post(wpbfunctions.php:1479
unserialize$html .= '<div class="wp-chatbot-cart-header"><div class="qcld-wp-chatbot-cell">' . wp_kses_post(wpbfunctions.php:1479
unserialize$html .= '<div class="wp-chatbot-cart-header"><div class="qcld-wp-chatbot-cell">' . wp_kses_post(wpbfunctions.php:1479
unserialize$html .= '<div class="wp-chatbot-cart-footer"><div class="qcld-wp-chatbot-cart-page"><a href="' . sifunctions.php:1499
unserialize$html .= '<div class="wp-chatbot-cart-footer"><div class="qcld-wp-chatbot-cart-page"><a href="' . sifunctions.php:1499
unserialize$html .= wp_kses_post(wpb_randmom_message_handle(unserialize(get_option('qlcd_wp_chatbot_no_cart_itefunctions.php:1538
unserialize$html .= wp_kses_post(wpb_randmom_message_handle(unserialize(get_option('qlcd_wp_chatbot_no_cart_itefunctions.php:1553
unserializereturn @unserialize( $request['body'] );includes\integration\openai\plugin-upgrader\classes\plugin-upgrader.php:189
unserializereturn @unserialize( $request['body'] );includes\openai\plugin-upgrader\classes\plugin-upgrader.php:189
unserialize$form = unserialize($result->config);qcld-wpwbot.php:471
unserialize'agent_join' => $this->qcld_wb_chatbot_str_replace(unserialize(get_option('qlcd_wp_chatbot_agent_joiqcld-wpwbot.php:499
unserialize'welcome' => $this->qcld_wb_chatbot_str_replace(unserialize(get_option('qlcd_wp_chatbot_welcome'))),qcld-wpwbot.php:500
unserialize'welcome_back' => $this->qcld_wb_chatbot_str_replace(unserialize(get_option('qlcd_wp_chatbot_welcomeqcld-wpwbot.php:501
unserialize'hi_there' => $this->qcld_wb_chatbot_str_replace(unserialize(get_option('qlcd_wp_chatbot_hi_there'))qcld-wpwbot.php:502
unserialize'asking_name' => $this->qcld_wb_chatbot_str_replace(unserialize(get_option('qlcd_wp_chatbot_asking_nqcld-wpwbot.php:504
unserialize'i_am' => $this->qcld_wb_chatbot_str_replace(unserialize(get_option('qlcd_wp_chatbot_i_am'))),qcld-wpwbot.php:505
unserialize'name_greeting' => $this->qcld_wb_chatbot_str_replace(unserialize(get_option('qlcd_wp_chatbot_name_gqcld-wpwbot.php:506
unserialize'wildcard_msg' => $this->qcld_wb_chatbot_str_replace(unserialize(get_option('qlcd_wp_chatbot_wildcarqcld-wpwbot.php:507
unserialize'empty_filter_msg' => $this->qcld_wb_chatbot_str_replace(unserialize(get_option('qlcd_wp_chatbot_empqcld-wpwbot.php:508
unserialize'did_you_mean' => $this->qcld_wb_chatbot_str_replace(unserialize(get_option('qlcd_wp_chatbot_did_youqcld-wpwbot.php:509
unserialize'is_typing' => $this->qcld_wb_chatbot_str_replace(unserialize(get_option('qlcd_wp_chatbot_is_typing'qcld-wpwbot.php:510
unserialize'send_a_msg' => $this->qcld_wb_chatbot_str_replace(unserialize(get_option('qlcd_wp_chatbot_send_a_msqcld-wpwbot.php:511
unserialize'viewed_products' => $this->qcld_wb_chatbot_str_replace(unserialize(get_option('qlcd_wp_chatbot_viewqcld-wpwbot.php:513
unserialize'shopping_cart' => $this->qcld_wb_chatbot_str_replace(unserialize(get_option('qlcd_wp_chatbot_shoppiqcld-wpwbot.php:515
unserialize'cart_updating' => $this->qcld_wb_chatbot_str_replace(unserialize(get_option('qlcd_wp_chatbot_cart_uqcld-wpwbot.php:516
unserialize'cart_removing' => $this->qcld_wb_chatbot_str_replace(unserialize(get_option('qlcd_wp_chatbot_cart_rqcld-wpwbot.php:517
unserialize'help_welcome' => $this->qcld_wb_chatbot_str_replace(unserialize(get_option('qlcd_wp_chatbot_help_weqcld-wpwbot.php:526
unserialize'back_to_start' => $this->qcld_wb_chatbot_str_replace(unserialize(get_option('qlcd_wp_chatbot_back_tqcld-wpwbot.php:527
unserialize'help_msg' => $this->qcld_wb_chatbot_str_replace(unserialize(get_option('qlcd_wp_chatbot_help_msg'))qcld-wpwbot.php:528
unserialize'reset' => $this->qcld_wb_chatbot_str_replace(unserialize(get_option('qlcd_wp_chatbot_reset'))),qcld-wpwbot.php:529
unserialize'wildcard_product' => $this->qcld_wb_chatbot_str_replace(unserialize(get_option('qlcd_wp_chatbot_wilqcld-wpwbot.php:530
unserialize'wildcard_catalog' => $this->qcld_wb_chatbot_str_replace(unserialize(get_option('qlcd_wp_chatbot_wilqcld-wpwbot.php:531
unserialize'featured_products' => $this->qcld_wb_chatbot_str_replace(unserialize(get_option('qlcd_wp_chatbot_feqcld-wpwbot.php:532
unserialize'sale_products' => $this->qcld_wb_chatbot_str_replace(unserialize(get_option('qlcd_wp_chatbot_sale_pqcld-wpwbot.php:533
unserialize'wildcard_order' => $this->qcld_wb_chatbot_str_replace(unserialize(get_option('qlcd_wp_chatbot_wildcqcld-wpwbot.php:534
unserialize'product_asking' => $this->qcld_wb_chatbot_str_replace(unserialize(get_option('qlcd_wp_chatbot_produqcld-wpwbot.php:536
unserialize'product_suggest' => $this->qcld_wb_chatbot_str_replace(unserialize(get_option('qlcd_wp_chatbot_prodqcld-wpwbot.php:537
unserialize'product_infinite' => $this->qcld_wb_chatbot_str_replace(unserialize(get_option('qlcd_wp_chatbot_proqcld-wpwbot.php:538
unserialize'product_success' => $this->qcld_wb_chatbot_str_replace(unserialize(get_option('qlcd_wp_chatbot_prodqcld-wpwbot.php:539
unserialize'product_fail' => $this->qcld_wb_chatbot_str_replace(unserialize(get_option('qlcd_wp_chatbot_productqcld-wpwbot.php:540
unserialize'support_welcome' => $this->qcld_wb_chatbot_str_replace(unserialize(get_option('qlcd_wp_chatbot_suppqcld-wpwbot.php:541
unserialize'support_option_again' => $this->qcld_wb_chatbot_str_replace(unserialize(get_option('qlcd_wp_chatbotqcld-wpwbot.php:543
unserialize'asking_email' => $this->qcld_wb_chatbot_str_replace(unserialize(get_option('qlcd_wp_chatbot_asking_qcld-wpwbot.php:544
unserialize'asking_msg' => $this->qcld_wb_chatbot_str_replace(unserialize(get_option('qlcd_wp_chatbot_asking_msqcld-wpwbot.php:545
unserialize'no_result' => $this->qcld_wb_chatbot_str_replace(unserialize(get_option('qlcd_wp_chatbot_no_result'qcld-wpwbot.php:546
unserialize'asking_phone' => $this->qcld_wb_chatbot_str_replace(unserialize(get_option('qlcd_wp_chatbot_asking_qcld-wpwbot.php:548
unserialize'thank_for_phone' => $this->qcld_wb_chatbot_str_replace(unserialize(get_option('qlcd_wp_chatbot_thanqcld-wpwbot.php:549
unserialize'support_query' => ((gettype(get_option('support_query')) == 'string') ? $this->qcld_wb_chatbot_str_qcld-wpwbot.php:550
unserialize'support_ans' => (gettype(get_option('support_ans')) == 'string') ? $this->qcld_wb_chatbot_str_replaqcld-wpwbot.php:551
unserialize'notifications' => $this->qcld_wb_chatbot_str_replace(unserialize(get_option('qlcd_wp_chatbot_notifiqcld-wpwbot.php:553
unserialize'order_welcome' => $this->qcld_wb_chatbot_str_replace(unserialize(get_option('qlcd_wp_chatbot_order_qcld-wpwbot.php:554
unserialize'order_username_asking' => $this->qcld_wb_chatbot_str_replace(unserialize(get_option('qlcd_wp_chatboqcld-wpwbot.php:555
unserialize'order_username_password' => $this->qcld_wb_chatbot_str_replace(unserialize(get_option('qlcd_wp_chatqcld-wpwbot.php:556
unserialize'order_email_support' => $this->qcld_wb_chatbot_str_replace(unserialize(get_option('qlcd_wp_chatbot_qcld-wpwbot.php:561
unserialize'invalid_email' => $this->qcld_wb_chatbot_str_replace(unserialize(get_option('qlcd_wp_chatbot_invaliqcld-wpwbot.php:563
unserialize'messenger_label' => $this->qcld_wb_chatbot_str_replace(unserialize(get_option('qlcd_wp_chatbot_messqcld-wpwbot.php:567
unserialize'whats_label' => $this->qcld_wb_chatbot_str_replace(unserialize(get_option('qlcd_wp_chatbot_whats_laqcld-wpwbot.php:571
unserialize'feedback_label' => $this->qcld_wb_chatbot_str_replace(unserialize(get_option('qlcd_wp_chatbot_feedbqcld-wpwbot.php:588
unserialize$welcomes = unserialize(get_option('qlcd_wp_chatbot_welcome'));templates\template-00\shortcode.php:33
unserialize<input id="wp-chatbot-editor" class="wp-chatbot-editor" required="" placeholder="<?php echo esc_attrtemplates\template-00\shortcode.php:48
unserialize<input id="wp-chatbot-editor" class="wp-chatbot-editor" required placeholder="<?php echo esc_attr(wptemplates\template-00\template.php:68
unserialize$welcomes = unserialize(get_option('qlcd_wp_chatbot_welcome'));templates\template-01\shortcode.php:34
unserialize<input id="wp-chatbot-editor" class="wp-chatbot-editor" required="" placeholder="<?php echo esc_attrtemplates\template-01\shortcode.php:49
unserialize<input id="wp-chatbot-editor" class="wp-chatbot-editor" required placeholder="<?php echo esc_attr(wptemplates\template-01\template.php:50
unserialize$welcomes = unserialize(get_option('qlcd_wp_chatbot_welcome'));templates\template-02\shortcode.php:48
unserialize<input id="wp-chatbot-editor" class="wp-chatbot-editor" required="" placeholder="<?php echo esc_attrtemplates\template-02\shortcode.php:63
unserialize$welcomes=unserialize(get_option('qlcd_wp_chatbot_welcome'));templates\template-02\template.php:27
unserialize<input id="wp-chatbot-editor" class="wp-chatbot-editor" required placeholder="<?php echo esc_attr(wptemplates\template-02\template.php:50
unserialize$welcomes = unserialize(get_option('qlcd_wp_chatbot_welcome'));templates\template-03\shortcode.php:32
unserialize<input id="wp-chatbot-editor" class="wp-chatbot-editor" required="" placeholder="<?php echo esc_attrtemplates\template-03\shortcode.php:47
unserialize$welcomes = unserialize(get_option('qlcd_wp_chatbot_welcome'));templates\template-03\template.php:27
unserialize<input id="wp-chatbot-editor" class="wp-chatbot-editor" required placeholder="<?php echo esc_attr(wptemplates\template-03\template.php:50
unserialize<input id="wp-chatbot-editor" class="wp-chatbot-editor" required placeholder="<?php echo esc_attr(wptemplates\template-horizontal\template.php:74

Bundled Libraries

jQuery

SQL Query Safety

83% prepared127 total queries

Output Escaping

80% escaped2209 total outputs
Data Flows · Security
13 unsanitized

Data Flow Analysis

25 flows13 with unsanitized paths
qcld_grok_remove_collection_callback (includes\integration\grok\qcld-bot-grok.php:456)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface
68 unprotected

WPBot – AI ChatBot for Live Support, Lead Generation, AI Services Attack Surface

Entry Points125
Unprotected68

AJAX Handlers 123

authwp_ajax_qcld_goodbye_formclass-plugin-deactivate-feedback.php:62
authwp_ajax_qcld_wb_chatbot_keywordfunctions.php:339
noprivwp_ajax_qcld_wb_chatbot_keywordfunctions.php:340
authwp_ajax_qcld_wb_chatbot_categoryfunctions.php:432
noprivwp_ajax_qcld_wb_chatbot_categoryfunctions.php:433
authwp_ajax_qcld_wb_chatbot_sub_categoryfunctions.php:456
noprivwp_ajax_qcld_wb_chatbot_sub_categoryfunctions.php:457
authwp_ajax_qcld_wb_chatbot_category_productsfunctions.php:471
noprivwp_ajax_qcld_wb_chatbot_category_productsfunctions.php:472
authwp_ajax_qcld_wb_chatbot_featured_productsfunctions.php:553
noprivwp_ajax_qcld_wb_chatbot_featured_productsfunctions.php:554
authwp_ajax_qcld_wb_chatbot_sale_productsfunctions.php:623
noprivwp_ajax_qcld_wb_chatbot_sale_productsfunctions.php:624
authwp_ajax_qcld_wb_chatbot_load_morefunctions.php:710
noprivwp_ajax_qcld_wb_chatbot_load_morefunctions.php:711
authwp_ajax_qcld_wb_chatbot_product_detailsfunctions.php:845
noprivwp_ajax_qcld_wb_chatbot_product_detailsfunctions.php:846
authwp_ajax_qcld_variable_add_to_cartfunctions.php:947
noprivwp_ajax_qcld_variable_add_to_cartfunctions.php:948
authwp_ajax_qcld_wb_chatbot_add_to_cartfunctions.php:972
noprivwp_ajax_qcld_wb_chatbot_add_to_cartfunctions.php:973
authwp_ajax_qcld_wb_chatbot_support_emailfunctions.php:986
noprivwp_ajax_qcld_wb_chatbot_support_emailfunctions.php:987
authwp_ajax_qcld_wb_chatbot_support_phonefunctions.php:1040
noprivwp_ajax_qcld_wb_chatbot_support_phonefunctions.php:1041
authwp_ajax_qcld_wb_chatbot_login_userfunctions.php:1098
noprivwp_ajax_qcld_wb_chatbot_login_userfunctions.php:1099
authwp_ajax_qcld_wb_chatbot_loged_in_user_ordersfunctions.php:1119
noprivwp_ajax_qcld_wb_chatbot_loged_in_user_ordersfunctions.php:1120
authwp_ajax_qcld_wb_chatbot_recently_viewed_productsfunctions.php:1211
noprivwp_ajax_qcld_wb_chatbot_recently_viewed_productsfunctions.php:1212
authwp_ajax_qcld_wb_chatbot_show_cartfunctions.php:1355
noprivwp_ajax_qcld_wb_chatbot_show_cartfunctions.php:1356
authwp_ajax_qcld_wb_chatbot_only_cartfunctions.php:1412
noprivwp_ajax_qcld_wb_chatbot_only_cartfunctions.php:1413
authwp_ajax_qcld_wb_chatbot_update_cart_item_numberfunctions.php:1510
noprivwp_ajax_qcld_wb_chatbot_update_cart_item_numberfunctions.php:1511
authwp_ajax_qcld_wb_chatbot_cart_item_removefunctions.php:1521
noprivwp_ajax_qcld_wb_chatbot_cart_item_removefunctions.php:1522
authwp_ajax_qcld_wb_chatbot_cart_pagefunctions.php:1531
noprivwp_ajax_qcld_wb_chatbot_cart_pagefunctions.php:1532
authwp_ajax_qcld_wb_chatbot_checkout_pagefunctions.php:1545
noprivwp_ajax_qcld_wb_chatbot_checkout_pagefunctions.php:1546
authwp_ajax_qcld_wb_chatbot_session_countfunctions.php:1739
noprivwp_ajax_qcld_wb_chatbot_session_countfunctions.php:1740
authwp_ajax_qcld_small_talk_importfunctions.php:1798
authwp_ajax_qcld_change_language_from_centerfunctions.php:1847
noprivwp_ajax_qcld_change_language_from_centerfunctions.php:1848
authwp_ajax_qc_wpbotpro_floating_openai_keyword_suggestion_content_functioninc\qcld_openai_floating_content.php:393
noprivwp_ajax_qc_wpbotpro_floating_openai_keyword_suggestion_content_functioninc\qcld_openai_floating_content.php:394
authwp_ajax_qc_wpbotpro_floating_openai_save_draft_post_extrainc\qcld_openai_floating_content.php:1579
noprivwp_ajax_qc_wpbotpro_floating_openai_save_draft_post_extrainc\qcld_openai_floating_content.php:1580
authwp_ajax_qc_wpbotpro_floating_openai_keyword_rewrite_articleinc\qcld_openai_floating_content.php:1671
noprivwp_ajax_qc_wpbotpro_floating_openai_keyword_rewrite_articleinc\qcld_openai_floating_content.php:1672
authwp_ajax_qc_wpbotpro_floating_openai_qc_wpbotpro_content_generator_by_ajaxinc\qcld_openai_floating_content.php:1785
noprivwp_ajax_qc_wpbotpro_floating_openai_qc_wpbotpro_content_generator_by_ajaxinc\qcld_openai_floating_content.php:1786
authwp_ajax_wpbot_save_feedbackincludes\class-common-function.php:18
noprivwp_ajax_wpbot_save_feedbackincludes\class-common-function.php:19
authwp_ajax_wpbot_save_reportincludes\class-common-function.php:20
noprivwp_ajax_wpbot_save_reportincludes\class-common-function.php:21
authwp_ajax_rag_upload_pdfincludes\class-qcld-bot-rag.php:23
authwp_ajax_rag_upload_csvincludes\class-qcld-bot-rag.php:24
authwp_ajax_rag_upload_xamlincludes\class-qcld-bot-rag.php:25
authwp_ajax_qcld_rag_manual_syncincludes\class-qcld-bot-rag.php:26
authwp_ajax_qcld_rag_delete_documentincludes\class-qcld-bot-rag.php:27
authwp_ajax_qcld_rag_get_documentincludes\class-qcld-bot-rag.php:28
authwp_ajax_qcld_rag_update_documentincludes\class-qcld-bot-rag.php:29
authwp_ajax_qcld_rag_bulk_delete_documentsincludes\class-qcld-bot-rag.php:30
authwp_ajax_qcld_rag_delete_all_documentsincludes\class-qcld-bot-rag.php:31
authwp_ajax_qcld_wp_chatbot_gc_client_downloadincludes\class-wpbot-gc-download.php:11
noprivwp_ajax_qcld_wp_chatbot_gc_client_downloadincludes\class-wpbot-gc-download.php:12
authwp_ajax_qcld_wp_chatbot_gc_client_extractincludes\class-wpbot-gc-download.php:13
noprivwp_ajax_qcld_wp_chatbot_gc_client_extractincludes\class-wpbot-gc-download.php:14
authwp_ajax_qcld-wp-chabot-reindexincludes\class-wpwbot-table.php:30
authwp_ajax_qcld-wp-chabot-cancel-indexincludes\class-wpwbot-table.php:31
authwp_ajax_qcld_gemini_responseincludes\integration\gemini\qcld-bot-gemini.php:62
noprivwp_ajax_qcld_gemini_responseincludes\integration\gemini\qcld-bot-gemini.php:63
authwp_ajax_update_settings_optionincludes\integration\gemini\qcld-bot-gemini.php:64
authwp_ajax_qcld_gemini_settings_optionincludes\integration\gemini\qcld-bot-gemini.php:65
authwp_ajax_qcld_gemini_get_model_listincludes\integration\gemini\qcld-bot-gemini.php:66
authwp_ajax_qcld_grok_responseincludes\integration\grok\qcld-bot-grok.php:70
noprivwp_ajax_qcld_grok_responseincludes\integration\grok\qcld-bot-grok.php:71
authwp_ajax_qcld_stream_grokaiincludes\integration\grok\qcld-bot-grok.php:72
authwp_ajax_qcld_grok_add_collectionincludes\integration\grok\qcld-bot-grok.php:73
authwp_ajax_qcld_grok_collectionlistincludes\integration\grok\qcld-bot-grok.php:74
noprivwp_ajax_qcld_stream_grokaiincludes\integration\grok\qcld-bot-grok.php:75
authwp_ajax_qcld_grok_remove_collectionincludes\integration\grok\qcld-bot-grok.php:76
authwp_ajax_qcld_grok_settings_optionincludes\integration\grok\qcld-bot-grok.php:77
authwp_ajax_qcld_grok_file_uploadincludes\integration\grok\qcld-bot-grok.php:78
authwp_ajax_openaiaddon__licensing_notice_dismissincludes\integration\openai\plugin-upgrader\admin\admin-notices.php:55
authwp_ajax_openai_settings_optionincludes\integration\openai\qcld-bot-openai.php:62
authwp_ajax_update_settings_optionincludes\integration\openai\qcld-bot-openai.php:63
authwp_ajax_qcld_rag_settings_optionincludes\integration\openai\qcld-bot-openai.php:64
authwp_ajax_qcld_openai_responseincludes\integration\openai\qcld-bot-openai.php:65
noprivwp_ajax_qcld_openai_responseincludes\integration\openai\qcld-bot-openai.php:66
authwp_ajax_openai_troubleshootingincludes\integration\openai\qcld-bot-openai.php:67
authwp_ajax_openai_save_assistantincludes\integration\openrouter\qcld-bot-openrouter.php:62
authwp_ajax_openrouter_responseincludes\integration\openrouter\qcld-bot-openrouter.php:63
noprivwp_ajax_openrouter_responseincludes\integration\openrouter\qcld-bot-openrouter.php:64
authwp_ajax_qcld_openrouter_settings_optionincludes\integration\openrouter\qcld-bot-openrouter.php:65
authwp_ajax_update_settings_optionincludes\integration\openrouter\qcld-bot-openrouter.php:67
authwp_ajax_openaiaddon__licensing_notice_dismissincludes\openai\plugin-upgrader\admin\admin-notices.php:55
authwp_ajax_openai_settings_optionincludes\openai\qcld-bot-openai.php:62
authwp_ajax_openai_responseincludes\openai\qcld-bot-openai.php:63
noprivwp_ajax_openai_responseincludes\openai\qcld-bot-openai.php:64
authwp_ajax_openai_troubleshootingincludes\openai\qcld-bot-openai.php:65
authwp_ajax_qc_chatbot_feedback_notice_dismissqc-rating-feature\qc-rating-class.php:30
authwp_ajax_qc_chatbot_blackfriday_notice_dismissqc-rating-feature\qc-rating-class.php:31
authwp_ajax_qcld_wpbot_free_process_qc_promo_formqc-support-promo-page\class-qc-support-promo-page.php:114
authwp_ajax_qcld_recommend_support_function_ajaxqc-support-promo-page\qc-clr-recommendbot-support-plugin.php:8
authwp_ajax_wpbo_search_siteqcld-wpwbot-search.php:301
noprivwp_ajax_wpbo_search_siteqcld-wpwbot-search.php:302
authwp_ajax_wpbo_search_responseby_intentqcld-wpwbot-search.php:315
noprivwp_ajax_wpbo_search_responseby_intentqcld-wpwbot-search.php:316
authwp_ajax_wpbo_search_site_paginationqcld-wpwbot-search.php:614
noprivwp_ajax_wpbo_search_site_paginationqcld-wpwbot-search.php:615
authwp_ajax_wpbo_search_response_catlistqcld-wpwbot-search.php:641
noprivwp_ajax_wpbo_search_response_catlistqcld-wpwbot-search.php:642
authwp_ajax_wpbo_search_responseqcld-wpwbot-search.php:672
noprivwp_ajax_wpbo_search_responseqcld-wpwbot-search.php:673
authwp_ajax_qcld_wb_chatboot_delete_all_optionsqcld-wpwbot.php:3159
authwp_ajax_qcld_wp_df_api_callqcld_df_api.php:81
noprivwp_ajax_qcld_wp_df_api_callqcld_df_api.php:82

Shortcodes 2

[wpwbot_products] functions.php:1284
[wpwbot_cart] functions.php:1458
WordPress Hooks 70
actionadmin_footer-plugins.phpclass-plugin-deactivate-feedback.php:61
filterwp_mail_content_typeclass-plugin-deactivate-feedback.php:97
actionadmin_headclass-qc-free-plugin-upgrade-notice.php:34
actionplugin_row_metaclass-qc-free-plugin-upgrade-notice.php:124
actionadmin_menuclass-qc-free-plugin-upgrade-notice.php:166
filterget_search_formfunctions.php:23
filterrender_block_core/searchfunctions.php:24
actionwp_footerfunctions.php:43
actionadmin_footerfunctions.php:45
actiontemplate_redirectfunctions.php:1209
filtertemplate_includefunctions.php:1631
filtertemplate_includefunctions.php:1639
filtertemplate_includefunctions.php:1647
actioninitfunctions.php:1650
actionwpcommerce_thankyoufunctions.php:1718
actionwp_footerfunctions.php:1844
actionadmin_enqueue_scriptsinc\qcld_openai_floating_content.php:6
actionadmin_footerinc\qcld_openai_floating_content.php:32
actionsave_postincludes\class-qcld-bot-rag.php:32
actionwp_insert_postincludes\class-wpwbot-table.php:20
actionwpcommerce_variable_product_sync_dataincludes\class-wpwbot-table.php:24
actionwpcommerce_variable_product_syncincludes\class-wpwbot-table.php:26
actionadmin_enqueue_scriptsincludes\integration\gemini\qcld-bot-gemini.php:69
actionadmin_enqueue_scriptsincludes\integration\gemini\qcld-bot-gemini.php:72
actionadmin_enqueue_scriptsincludes\integration\grok\qcld-bot-grok.php:80
actionadmin_noticesincludes\integration\openai\plugin-upgrader\admin\admin-notices.php:4
actionadmin_noticesincludes\integration\openai\plugin-upgrader\admin\admin-notices.php:23
actionadmin_initincludes\integration\openai\plugin-upgrader\admin\license-settings-page.php:10
filterpre_set_site_transient_update_pluginsincludes\integration\openai\plugin-upgrader\classes\plugin-upgrader.php:64
filterplugins_apiincludes\integration\openai\plugin-upgrader\classes\plugin-upgrader.php:67
actioninitincludes\integration\openai\plugin-upgrader\utils.php:17
actionupgrader_process_completeincludes\integration\openai\plugin-upgrader\utils.php:35
actionadmin_enqueue_scriptsincludes\integration\openai\plugin-upgrader\utils.php:37
actionadmin_enqueue_scriptsincludes\integration\openai\qcld-bot-openai.php:69
actionadmin_enqueue_scriptsincludes\integration\openrouter\qcld-bot-openrouter.php:70
actionadmin_enqueue_scriptsincludes\integration\openrouter\qcld-bot-openrouter.php:73
actionadmin_noticesincludes\openai\plugin-upgrader\admin\admin-notices.php:4
actionadmin_noticesincludes\openai\plugin-upgrader\admin\admin-notices.php:23
actionadmin_initincludes\openai\plugin-upgrader\admin\license-settings-page.php:10
filterpre_set_site_transient_update_pluginsincludes\openai\plugin-upgrader\classes\plugin-upgrader.php:64
filterplugins_apiincludes\openai\plugin-upgrader\classes\plugin-upgrader.php:67
actioninitincludes\openai\plugin-upgrader\utils.php:17
actionupgrader_process_completeincludes\openai\plugin-upgrader\utils.php:34
actionadmin_enqueue_scriptsincludes\openai\plugin-upgrader\utils.php:36
actionadmin_enqueue_scriptsincludes\openai\qcld-bot-openai.php:67
actionadmin_initqc-rating-feature\qc-rating-class.php:28
actionadmin_enqueue_scriptsqc-rating-feature\qc-rating-class.php:105
actionadmin_noticesqc-rating-feature\qc-rating-class.php:106
actionadmin_enqueue_scriptsqc-rating-feature\qc-rating-class.php:118
actionadmin_noticesqc-rating-feature\qc-rating-class.php:119
actionadmin_enqueue_scriptsqc-rating-feature\qc-rating-class.php:122
actionadmin_noticesqc-rating-feature\qc-rating-class.php:123
actionadmin_enqueue_scriptsqc-support-promo-page\class-qc-support-promo-page.php:60
filterposts_searchqcld-wpwbot-search.php:100
actionplugins_loadedqcld-wpwbot.php:22
actionadmin_menuqcld-wpwbot.php:139
actionadmin_initqcld-wpwbot.php:142
actionadmin_enqueue_scriptsqcld-wpwbot.php:155
actionadmin_noticesqcld-wpwbot.php:158
actionwpqcld-wpwbot.php:162
actioninitqcld-wpwbot.php:163
actionwp_enqueue_scriptsqcld-wpwbot.php:172
actionadmin_noticesqcld-wpwbot.php:208
actionplugins_loadedqcld-wpwbot.php:2403
actionupgrader_process_completeqcld-wpwbot.php:3425
actionplugins_loadedqcld-wpwbot.php:3454
actioninitqcld-wpwbot.php:3895
actionadmin_noticesqcld-wpwbot.php:4035
actionactivated_pluginqcld-wpwbot.php:4121
actioninitqcld_df_api.php:15
Maintenance & Trust

WPBot – AI ChatBot for Live Support, Lead Generation, AI Services Maintenance & Trust

Maintenance Signals

WordPress version tested7.0.2
Last updatedJul 22, 2026
PHP min version5.6
Downloads1.3M

Community Trust

Rating94/100
Number of ratings123
Active installs5K
Alternatives

WPBot – AI ChatBot for Live Support, Lead Generation, AI Services Alternatives

AI ChatBot for WordPress by AI BotKit – Live in 2 Minutes, No Code

AI ChatBot for WordPress by AI BotKit – Live in 2 Minutes, No Code

ai-botkit-for-lead-generation

A
99

Add a smart ChatGPT-powered AI chatbot to your WordPress site to automate support, answer FAQs, engage visitors 24/7, and escalate when needed.

100 1 CVE
Jotform – AI Chatbot

Jotform – AI Chatbot

jotform-ai-chatbot

A
100

AI chatbot that automates support, answers FAQs, drives WooCommerce sales, generates leads, and boosts engagement — easy setup, no coding!

5K No CVEs
BotPenguin – Generative AI Chatbot with Live Chat & ChatGPT

BotPenguin – Generative AI Chatbot with Live Chat & ChatGPT

botpenguinbot

A
100

WordPress AI Chatbot with Live Chat & ChatGPT for your website. It automates Customer Support, Lead Generation, Bookings, Marketing, eCommerce, etc.

600 No CVEs
Social Intents – Live Chat

Social Intents – Live Chat

live-chat-support-by-social-intents

B
71

AI Chatbot & Live Chat plugin for WordPress. Chat with visitors using ChatGPT, Claude, Gemini, Slack, Teams, and Google Chat.

400 1 unpatched
AI Chatbot for WordPress by Customerly

AI Chatbot for WordPress by Customerly

customerly

A
85

AI Chatbot to support customers, create engaging messages and send automated emails.

300 No CVEs
Developer Profile

WPBot – AI ChatBot for Live Support, Lead Generation, AI Services Developer Profile

QuantumCloud

29 plugins · 23K total installs

76
trust score
Avg Security Score
96/100
Avg Patch Time
233 days
View full developer profile
Detection Fingerprints

How We Detect WPBot – AI ChatBot for Live Support, Lead Generation, AI Services

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/chatbot/css/wpbot-style.css/wp-content/plugins/chatbot/css/wpbot-responsive.css/wp-content/plugins/chatbot/css/admin-style.css/wp-content/plugins/chatbot/js/wpbot-frontend.js/wp-content/plugins/chatbot/js/wpbot-admin.js/wp-content/plugins/chatbot/js/wpbot-script.js/wp-content/plugins/chatbot/includes/tinymce/tinymce.min.js
Script Paths
wp-content/plugins/chatbot/js/wpbot-frontend.jswp-content/plugins/chatbot/js/wpbot-admin.jswp-content/plugins/chatbot/js/wpbot-script.jswp-content/plugins/chatbot/includes/tinymce/tinymce.min.js
Version Parameters
chatbot/css/wpbot-style.css?ver=chatbot/css/wpbot-responsive.css?ver=chatbot/css/admin-style.css?ver=chatbot/js/wpbot-frontend.js?ver=chatbot/js/wpbot-admin.js?ver=chatbot/js/wpbot-script.js?ver=

HTML / DOM Fingerprints

CSS Classes
wpbot_conversation_boxqc-chatbot-popupwpbot-headerwpbot-message-containerwpbot-input-container
HTML Comments
<!-- Plugin Name: AI ChatBot - WPBot --><!-- Plugin URI: https://wordpress.org/plugins/chatbot/ --><!-- Author: QuantumCloud --><!-- Author URI: https://www.wpbot.pro/ -->+8 more
Data Attributes
data-wpbot-urldata-wpbot-imagedata-wpbot-titledata-wpbot-placeholderdata-wpbot-welcome-messagedata-wpbot-ai-model+20 more
JS Globals
wpbot_paramsQCqcld_wb_chatbot_objQCLD_wpCHATBOT_VERSIONQCLD_wpCHATBOT_PLUGIN_URLQCLD_wpCHATBOT_IMG_URL+3 more
REST Endpoints
/wp-json/wpbot/v1/get_response/wp-json/wpbot/v1/get_user_history/wp-json/wpbot/v1/send_message
FAQ

Frequently Asked Questions about WPBot – AI ChatBot for Live Support, Lead Generation, AI Services