Does HR RAG Chatbot have any unpatched vulnerabilities?

No published vulnerabilities and no findings under coordinated disclosure as of the latest data update. Always keep the plugin updated to the latest version.

Is HR RAG Chatbot compatible with WordPress 6.9.5?

According to WordPress.org data, HR RAG Chatbot 1.0.0 has been tested up to WordPress 6.9.5. Check the plugin's changelog for the latest compatibility information.

Is HR RAG Chatbot compatible with PHP 7.4+?

HR RAG Chatbot requires PHP 7.4 or higher. Most modern WordPress hosts run PHP 8.1 or 8.2. If you are on an older PHP version, consider upgrading before installing this plugin.

How often is HR RAG Chatbot updated?

HR RAG Chatbot was last updated on Dec 13, 2025. Frequent updates are generally a positive security signal.

What is HR RAG Chatbot's security score?

HR RAG Chatbot has a WP-Safety security score of 100/100. This score is computed from CVE history, patch response time, developer trust signals, and plugin maintenance activity.

HR RAG Chatbot Security & Risk Analysis

wordpress.org/plugins/hr-rag-chatbot

AI-powered HR policy chatbot using RAG (Retrieval Augmented Generation) technology.

0 active installs v1.0.0 PHP 7.4+ WP 5.8+ Updated Dec 13, 2025

aichatbothrpolicyrag

A · Safe

CVEs total0

Unpatched0

Last CVENever

Plugin page Download

Safety Verdict

Is HR RAG Chatbot Safe to Use in 2026?

Generally Safe

Score 100/100

HR RAG Chatbot has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 8mo ago

Risk Assessment

The "hr-rag-chatbot" v1.0.0 plugin exhibits a generally good security posture, with no known vulnerabilities in its history and a notable absence of dangerous functions. The static analysis indicates a strong adherence to security best practices, particularly with a high percentage of properly escaped output and a significant number of nonce and capability checks. The attack surface, while present with AJAX handlers and shortcodes, appears to be protected by authentication checks.

Key Concerns

Flows with unsanitized paths
SQL queries not always prepared
File operations detected
External HTTP requests detected

Vulnerabilities

None known

HR RAG Chatbot Security Vulnerabilities

No known vulnerabilities — this is a good sign.

Version History

HR RAG Chatbot Release Timeline

v1.0.0Current

Code Analysis

Analyzed Mar 17, 2026

HR RAG Chatbot Code Analysis

Dangerous Functions

Raw SQL Queries

10 prepared

Unescaped Output

116 escaped

Nonce Checks

Capability Checks

File Operations

External Requests

Bundled Libraries

SQL Query Safety

45% prepared22 total queries

Output Escaping

91% escaped127 total outputs

Data Flows · Security

3 unsanitized

Data Flow Analysis

4 flows3 with unsanitized paths

render_knowledge_tab (includes\class-hr-rag-admin.php:218)

Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized

Attack Surface

HR RAG Chatbot Attack Surface

Entry Points6

Unprotected0

AJAX Handlers 5

authwp_ajax_hr_rag_test_apiincludes\class-hr-rag-admin.php:19

authwp_ajax_hr_rag_chatincludes\class-hr-rag-chat-handler.php:10

noprivwp_ajax_hr_rag_chatincludes\class-hr-rag-chat-handler.php:11

authwp_ajax_hr_rag_save_contextincludes\class-hr-rag-chat-handler.php:12

noprivwp_ajax_hr_rag_save_contextincludes\class-hr-rag-chat-handler.php:13

Shortcodes 1

[hr_rag_policy_chatbot] hr-rag-chatbot.php:40

WordPress Hooks 13

actionplugins_loadedhr-rag-chatbot.php:38

actioninithr-rag-chatbot.php:39

actioninithr-rag-chatbot.php:66

actionplugins_loadedhr-rag-chatbot.php:202

actionadmin_menuincludes\class-hr-rag-admin.php:10

actionadmin_initincludes\class-hr-rag-admin.php:11

actionadmin_enqueue_scriptsincludes\class-hr-rag-admin.php:12

actionadmin_noticesincludes\class-hr-rag-admin.php:13

actionadmin_post_hr_rag_save_settingsincludes\class-hr-rag-admin.php:14

actionadmin_post_hr_rag_add_documentincludes\class-hr-rag-admin.php:15

actionadmin_post_hr_rag_upload_fileincludes\class-hr-rag-admin.php:16

actionadmin_post_hr_rag_rebuild_indexincludes\class-hr-rag-admin.php:17

actionadmin_post_hr_rag_clear_indexincludes\class-hr-rag-admin.php:18

Maintenance & Trust

HR RAG Chatbot Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.5

Last updatedDec 13, 2025

PHP min version7.4

Downloads257

Community Trust

Rating0/100

docubot-ai-secureweb

100

AI-powered Q&A chatbot using Retrieval-Augmented Generation (RAG). Upload documents or write manual knowledge entries and let the AI answer visito …

0 No CVEs

Developer Profile

HR RAG Chatbot Developer Profile

Muhammad Adnan Hanif

2 plugins · 10 total installs

trust score

Avg Security Score

100/100

Avg Patch Time

30 days

View full developer profile

Detection Fingerprints

How We Detect HR RAG Chatbot

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths

/wp-content/plugins/hr-rag-chatbot/assets/css/chat.css/wp-content/plugins/hr-rag-chatbot/assets/js/chat.js

Script Paths

/wp-content/plugins/hr-rag-chatbot/assets/js/chat.js

Version Parameters

hr-rag-chatbot/assets/css/chat.css?ver=hr-rag-chatbot/assets/js/chat.js?ver=

HTML / DOM Fingerprints

CSS Classes

hr-rag-chatbot-containerhr-chat-messagehr-chat-message userhr-chat-message bot

JS Globals

hr_rag_ajax

Shortcode Output

<div class="hr-rag-chatbot-container"></div>

FAQ