WP-Safety

HR RAG Chatbot Security & Risk Analysis

wordpress.org/plugins/hr-rag-chatbot

AI-powered HR policy chatbot using RAG (Retrieval Augmented Generation) technology.

0 active installs v1.0.0 PHP 7.4+ WP 5.8+ Updated Dec 13, 2025
aichatbothrpolicyrag
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Plugin page Download
Safety Verdict

Is HR RAG Chatbot Safe to Use in 2026?

Generally Safe

Score 100/100

HR RAG Chatbot has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 5mo ago
Risk Assessment

The "hr-rag-chatbot" v1.0.0 plugin exhibits a generally good security posture, with no known vulnerabilities in its history and a notable absence of dangerous functions. The static analysis indicates a strong adherence to security best practices, particularly with a high percentage of properly escaped output and a significant number of nonce and capability checks. The attack surface, while present with AJAX handlers and shortcodes, appears to be protected by authentication checks.

Key Concerns

  • Flows with unsanitized paths
  • SQL queries not always prepared
  • File operations detected
  • External HTTP requests detected
Vulnerabilities
None known

HR RAG Chatbot Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

HR RAG Chatbot Release Timeline

v1.0.0Current
Code Analysis
Analyzed Mar 17, 2026

HR RAG Chatbot Code Analysis

Dangerous Functions
0
Raw SQL Queries
12
10 prepared
Unescaped Output
11
116 escaped
Nonce Checks
9
Capability Checks
6
File Operations
2
External Requests
4
Bundled Libraries
0

SQL Query Safety

45% prepared22 total queries

Output Escaping

91% escaped127 total outputs
Data Flows · Security
3 unsanitized

Data Flow Analysis

4 flows3 with unsanitized paths
render_knowledge_tab (includes\class-hr-rag-admin.php:218)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

HR RAG Chatbot Attack Surface

Entry Points6
Unprotected0

AJAX Handlers 5

authwp_ajax_hr_rag_test_apiincludes\class-hr-rag-admin.php:19
authwp_ajax_hr_rag_chatincludes\class-hr-rag-chat-handler.php:10
noprivwp_ajax_hr_rag_chatincludes\class-hr-rag-chat-handler.php:11
authwp_ajax_hr_rag_save_contextincludes\class-hr-rag-chat-handler.php:12
noprivwp_ajax_hr_rag_save_contextincludes\class-hr-rag-chat-handler.php:13

Shortcodes 1

[hr_rag_policy_chatbot] hr-rag-chatbot.php:40
WordPress Hooks 13
actionplugins_loadedhr-rag-chatbot.php:38
actioninithr-rag-chatbot.php:39
actioninithr-rag-chatbot.php:66
actionplugins_loadedhr-rag-chatbot.php:202
actionadmin_menuincludes\class-hr-rag-admin.php:10
actionadmin_initincludes\class-hr-rag-admin.php:11
actionadmin_enqueue_scriptsincludes\class-hr-rag-admin.php:12
actionadmin_noticesincludes\class-hr-rag-admin.php:13
actionadmin_post_hr_rag_save_settingsincludes\class-hr-rag-admin.php:14
actionadmin_post_hr_rag_add_documentincludes\class-hr-rag-admin.php:15
actionadmin_post_hr_rag_upload_fileincludes\class-hr-rag-admin.php:16
actionadmin_post_hr_rag_rebuild_indexincludes\class-hr-rag-admin.php:17
actionadmin_post_hr_rag_clear_indexincludes\class-hr-rag-admin.php:18
Maintenance & Trust

HR RAG Chatbot Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedDec 13, 2025
PHP min version7.4
Downloads136

Community Trust

Rating0/100
Number of ratings0
Active installs0
Alternatives

HR RAG Chatbot Alternatives

Fast RAGbot

Fast RAGbot

fast-ragbot

A
100

AI-powered chatbot with multi-LLM support (Gemini/OpenAI/Claude), multi-domain indexing, document upload, and conversation memory.

10 No CVEs
RAG Chat for Amazon Bedrock

RAG Chat for Amazon Bedrock

rag-chat-ab

A
100

Integrate WordPress content with Amazon Bedrock Knowledge Bases to create an intelligent RAG (Retrieval-Augmented Generation) chatbot system.

10 No CVEs
Inqyra

Inqyra

inqyra

A
100

AI-powered chatbot that answers visitor questions based on your own WordPress content. Bring your own API key — zero markup.

0 No CVEs
Intellichat – AI Chatbot For WordPress with RAG

Intellichat – AI Chatbot For WordPress with RAG

intellichat-ai-chatbot

A
100

AI Chatbot with RAG, Gemini & Floating Widget. Train on your content, customize the widget, and answer visitor questions instantly.

0 No CVEs
Mind Web Concierge

Mind Web Concierge

mind-web-concierge

A
100

Mind Web Concierge is an intelligent WordPress assistant powered by RAG technology. It acts as a digital concierge for your website - guiding users th …

0 No CVEs
Developer Profile

HR RAG Chatbot Developer Profile

Muhammad Adnan Hanif

2 plugins · 10 total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect HR RAG Chatbot

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/hr-rag-chatbot/assets/css/chat.css/wp-content/plugins/hr-rag-chatbot/assets/js/chat.js
Script Paths
/wp-content/plugins/hr-rag-chatbot/assets/js/chat.js
Version Parameters
hr-rag-chatbot/assets/css/chat.css?ver=hr-rag-chatbot/assets/js/chat.js?ver=

HTML / DOM Fingerprints

CSS Classes
hr-rag-chatbot-containerhr-chat-messagehr-chat-message userhr-chat-message bot
JS Globals
hr_rag_ajax
Shortcode Output
<div class="hr-rag-chatbot-container"></div>
FAQ

Frequently Asked Questions about HR RAG Chatbot