Does Hexabot Chat Widget have any unpatched vulnerabilities?

No published vulnerabilities and no findings under coordinated disclosure as of the latest data update. Always keep the plugin updated to the latest version.

Is Hexabot Chat Widget compatible with WordPress 7.0.2?

According to WordPress.org data, Hexabot Chat Widget 3.2.3 has been tested up to WordPress 7.0.2. Check the plugin's changelog for the latest compatibility information.

Is Hexabot Chat Widget compatible with PHP 7.4+?

Hexabot Chat Widget requires PHP 7.4 or higher. Most modern WordPress hosts run PHP 8.1 or 8.2. If you are on an older PHP version, consider upgrading before installing this plugin.

How often is Hexabot Chat Widget updated?

Hexabot Chat Widget was last updated on Jun 11, 2026. Frequent updates are generally a positive security signal.

What is Hexabot Chat Widget's security score?

Hexabot Chat Widget has a WP-Safety security score of 100/100. This score is computed from CVE history, patch response time, developer trust signals, and plugin maintenance activity.

Hexabot Chat Widget Security & Risk Analysis

wordpress.org/plugins/hexabot-chat-widget

Add a self-hosted conversational AI chatbot for WordPress with Hexabot v3 workflows for support, lead capture, onboarding, and engagement.

10 active installs v3.2.3 PHP 7.4+ WP 5.6+ Updated Jun 11, 2026

ai-chatbotautomationchat-widgetconversational-aicustomer-support

A · Safe

CVEs total0

Unpatched0

Last CVENever

Download

Safety Verdict

Is Hexabot Chat Widget Safe to Use in 2026?

Generally Safe

Score 100/100

Hexabot Chat Widget has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 2mo ago

Risk Assessment

Based on the static analysis and vulnerability history, the hexabot-chat-widget v2.0.3 plugin exhibits a strong security posture. The absence of any identified entry points such as AJAX handlers, REST API routes, shortcodes, or cron events significantly reduces the plugin's attack surface. Furthermore, the code signals indicate a commitment to secure coding practices, with no dangerous functions, all SQL queries using prepared statements, and all output properly escaped. The lack of file operations, external HTTP requests, and the absence of nonce and capability checks in the analyzed code (though this also means they are not missing in places where they might be needed) contribute to a seemingly clean codebase.

Vulnerabilities

None known

Hexabot Chat Widget Security Vulnerabilities

No known vulnerabilities — this is a good sign.

Version History

Hexabot Chat Widget Release Timeline

v3.2.3Current

v3.2.2

v2.0.3

v2.0.1

Code Analysis

Analyzed Mar 17, 2026

Hexabot Chat Widget Code Analysis

Dangerous Functions

Raw SQL Queries

0 prepared

Unescaped Output

6 escaped

Nonce Checks

Capability Checks

File Operations

External Requests

Bundled Libraries

Output Escaping

100% escaped6 total outputs

Attack Surface

Hexabot Chat Widget Attack Surface

Entry Points0

Unprotected0

WordPress Hooks 3

actionadmin_inithexabot.php:21

actionadmin_menuhexabot.php:27

actionwp_footerhexabot.php:96

Maintenance & Trust

Hexabot Chat Widget Maintenance & Trust

Maintenance Signals

WordPress version tested7.0.2

Last updatedJun 11, 2026

PHP min version7.4

Downloads1K

Community Trust

Rating100/100

Number of ratings1

Active installs10

Alternatives

Hexabot Chat Widget Alternatives

Hyve Lite – AI Chatbot, ChatGPT-Powered Conversational Support

hyve-lite

Hyve is an AI-powered WordPress chatbot that transforms your content into engaging conversations. Powered by ChatGPT, with custom knowledge base.

7K 1 CVE

Gapify AI Customer Communication

gapify-ai-customer-communication

100

AI-powered customer support and chat widget. Automate responses, increase sales, and provide 24/7 customer service with Gapify's intelligent chatbot.

40 No CVEs

aGo AI Chatbot, AI Chat Widget with Knowledge Base

ago-ai-chatbot

100

Free AI chat widget for WordPress powered by Google Gemini. Upload your knowledge files and the AI answers visitor questions using your own content.

30 No CVEs

Agentyme – AI Chatbot, customer support, knowledge base, lead generation

agentyme

100

Add an AI-powered chatbot to your WordPress site. Automates customer support, captures leads, and answers questions using your own knowledge base.

0 No CVEs

Appzo Chatbot Widget

appzo-chatbot-widget

Add an intelligent AI chatbot widget to your WordPress site with customizable positioning and styling. Improve customer engagement and support.

0 No CVEs

Developer Profile

Hexabot Chat Widget Developer Profile

Mohamed Marrouchi

1 plugin · 10 total installs

trust score

Avg Security Score

100/100

Avg Patch Time

30 days

View full developer profile

Detection Fingerprints

How We Detect Hexabot Chat Widget

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths

/wp-content/plugins/hexabot-chat-widget/assets/hexabot-widget.css/wp-content/plugins/hexabot-chat-widget/assets/hexabot-widget.umd.js

Script Paths

/wp-content/plugins/hexabot-chat-widget/assets/hexabot-widget.umd.js

Version Parameters

hexabot-chat-widget/assets/hexabot-widget.umd.js?ver=

HTML / DOM Fingerprints

JS Globals

ReactReactDOM

Shortcode Output

<div id="hb-chat-widget"></div>

FAQ