CresentAI Chatbot Security & Risk Analysis

wordpress.org/plugins/cresentai-chatbot

Free Plug-and-play trainable AI website chatbot with live chat feature. 2 minutes setup, perfect for lead generation, FAQs, and customer support.

0 active installs v1.0.4 PHP 7.4+ WP 5.0+ Updated Unknown
aichatbotcustomer-supportlead-generationlive-chat
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Download
Safety Verdict

Is CresentAI Chatbot Safe to Use in 2026?

Generally Safe

Score 100/100

CresentAI Chatbot has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs
Risk Assessment

The static analysis of the cresentai-chatbot v1.0.4 plugin reveals a remarkably clean codebase from a vulnerability perspective. There are no detected AJAX handlers, REST API routes, shortcodes, or cron events, resulting in a zero attack surface. Furthermore, the code signals indicate a complete absence of dangerous functions, file operations, and external HTTP requests. All SQL queries utilize prepared statements, and all output is properly escaped, which are excellent security practices. The vulnerability history is also clean, with no known CVEs recorded, suggesting a strong track record for this plugin.

Key Concerns

  • No Nonce Checks detected
  • No Capability Checks detected
Vulnerabilities
None known

CresentAI Chatbot Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 17, 2026

CresentAI Chatbot Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
0
44 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

100% escaped44 total outputs
Attack Surface

CresentAI Chatbot Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 4
actionadmin_menucresentai-chatbot.php:31
actionadmin_initcresentai-chatbot.php:52
actionwp_enqueue_scriptscresentai-chatbot.php:165
actionwp_footercresentai-chatbot.php:207
Maintenance & Trust

CresentAI Chatbot Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedUnknown
PHP min version7.4
Downloads162

Community Trust

Rating0/100
Number of ratings0
Active installs0
Developer Profile

CresentAI Chatbot Developer Profile

vkinyua

1 plugin · 0 total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect CresentAI Chatbot

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/cresentai-chatbot/cresentai-chatbot.js/wp-content/plugins/cresentai-chatbot/cresentai-chatbot.css
Script Paths
/wp-content/plugins/cresentai-chatbot/cresentai-chatbot.js
Version Parameters
cresentai-chatbot/cresentai-chatbot.js?ver=cresentai-chatbot/cresentai-chatbot.css?ver=

HTML / DOM Fingerprints

CSS Classes
cresentai-chatbot-widgetcresentai-chatbot-headercresentai-chatbot-message-areacresentai-chatbot-input-areacresentai-chatbot-send-button
Data Attributes
data-cresentai-api-keydata-cresentai-default-modedata-cresentai-widget-titledata-cresentai-title-text-colordata-cresentai-title-background-colordata-cresentai-initial-prompt+6 more
JS Globals
cresentai_chat_settings
FAQ

Frequently Asked Questions about CresentAI Chatbot