WP-Safety

HR RAG Chatbot Security & Risk Analysis

wordpress.org/plugins/hr-rag-chatbot

AI-powered HR policy chatbot using RAG (Retrieval Augmented Generation) technology.

0 active installs v1.0.0 PHP 7.4+ WP 5.8+ Updated Unknown
aichatbothrpolicyrag
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Plugin page Download
Safety Verdict

Is HR RAG Chatbot Safe to Use in 2026?

Generally Safe

Score 100/100

HR RAG Chatbot has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs
Risk Assessment

The "hr-rag-chatbot" v1.0.0 plugin exhibits a generally good security posture, with no known vulnerabilities in its history and a notable absence of dangerous functions. The static analysis indicates a strong adherence to security best practices, particularly with a high percentage of properly escaped output and a significant number of nonce and capability checks. The attack surface, while present with AJAX handlers and shortcodes, appears to be protected by authentication checks.

Key Concerns

  • Flows with unsanitized paths
  • SQL queries not always prepared
  • File operations detected
  • External HTTP requests detected
Vulnerabilities
None known

HR RAG Chatbot Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 17, 2026

HR RAG Chatbot Code Analysis

Dangerous Functions
0
Raw SQL Queries
12
10 prepared
Unescaped Output
11
116 escaped
Nonce Checks
9
Capability Checks
6
File Operations
2
External Requests
4
Bundled Libraries
0

SQL Query Safety

45% prepared22 total queries

Output Escaping

91% escaped127 total outputs
Data Flows
3 unsanitized

Data Flow Analysis

4 flows3 with unsanitized paths
render_knowledge_tab (includes\class-hr-rag-admin.php:218)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

HR RAG Chatbot Attack Surface

Entry Points6
Unprotected0

AJAX Handlers 5

authwp_ajax_hr_rag_test_apiincludes\class-hr-rag-admin.php:19
authwp_ajax_hr_rag_chatincludes\class-hr-rag-chat-handler.php:10
noprivwp_ajax_hr_rag_chatincludes\class-hr-rag-chat-handler.php:11
authwp_ajax_hr_rag_save_contextincludes\class-hr-rag-chat-handler.php:12
noprivwp_ajax_hr_rag_save_contextincludes\class-hr-rag-chat-handler.php:13

Shortcodes 1

[hr_rag_policy_chatbot] hr-rag-chatbot.php:40
WordPress Hooks 13
actionplugins_loadedhr-rag-chatbot.php:38
actioninithr-rag-chatbot.php:39
actioninithr-rag-chatbot.php:66
actionplugins_loadedhr-rag-chatbot.php:202
actionadmin_menuincludes\class-hr-rag-admin.php:10
actionadmin_initincludes\class-hr-rag-admin.php:11
actionadmin_enqueue_scriptsincludes\class-hr-rag-admin.php:12
actionadmin_noticesincludes\class-hr-rag-admin.php:13
actionadmin_post_hr_rag_save_settingsincludes\class-hr-rag-admin.php:14
actionadmin_post_hr_rag_add_documentincludes\class-hr-rag-admin.php:15
actionadmin_post_hr_rag_upload_fileincludes\class-hr-rag-admin.php:16
actionadmin_post_hr_rag_rebuild_indexincludes\class-hr-rag-admin.php:17
actionadmin_post_hr_rag_clear_indexincludes\class-hr-rag-admin.php:18
Maintenance & Trust

HR RAG Chatbot Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedUnknown
PHP min version7.4
Downloads103

Community Trust

Rating0/100
Number of ratings0
Active installs0
Alternatives

HR RAG Chatbot Alternatives

Fast RAGbot

Fast RAGbot

fast-ragbot

A
100

AI-powered chatbot with multi-LLM support (Gemini/OpenAI/Claude), multi-domain indexing, document upload, and conversation memory.

10 No CVEs
RAG Chat for Amazon Bedrock

RAG Chat for Amazon Bedrock

rag-chat-ab

A
100

Integrate WordPress content with Amazon Bedrock Knowledge Bases to create an intelligent RAG (Retrieval-Augmented Generation) chatbot system.

10 No CVEs
NeuroRAG Agent Chatbot

NeuroRAG Agent Chatbot

neurorag-agent-chatbot

A
100

Simple AI-powered chatbot using modern AI LLM API providers with RAG technology.

0 No CVEs
Notria AI Suite

Notria AI Suite

notria-ai-suite

A
100

Supercharge your WordPress site with AI for content, chatbot, and forms.

0 No CVEs
SmartAI Search

SmartAI Search

smartai-search

A
100

SmartAI Search AI system using OpenAI embeddings with local database vector store and frontend chat interface.

0 No CVEs
Developer Profile

HR RAG Chatbot Developer Profile

Muhammad Adnan Hanif

2 plugins · 10 total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect HR RAG Chatbot

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/hr-rag-chatbot/assets/css/chat.css/wp-content/plugins/hr-rag-chatbot/assets/js/chat.js
Script Paths
/wp-content/plugins/hr-rag-chatbot/assets/js/chat.js
Version Parameters
hr-rag-chatbot/assets/css/chat.css?ver=hr-rag-chatbot/assets/js/chat.js?ver=

HTML / DOM Fingerprints

CSS Classes
hr-rag-chatbot-containerhr-chat-messagehr-chat-message userhr-chat-message bot
JS Globals
hr_rag_ajax
Shortcode Output
<div class="hr-rag-chatbot-container"></div>
FAQ

Frequently Asked Questions about HR RAG Chatbot