WPBot – AI ChatBot for Live Support, Lead Generation, WordPress Automation, AI Services

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory searches this plugin turns up in, and which way each one is moving. WordPress.org publishes no history of search positions, so this starts the day we first tracked a keyword and never backfills.

wp.org is where the directory puts the plugin for that search. On merit is where it would sit if results were ranked on rating, support and updates, without the install boost. The last column is how far the wp.org position moved, from our first reading in the last 90 days to the latest.

559 searches this plugin appeared in over the last 90 days, 20 listed. 469 left out as unrelated or noise (years, numbers, stray words). 3 of its tags aren't in the top 24 for their own search.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Crossed into this band 4 months ago; a band this size takes about a year or more to cross, which places it about 70% of the way through.

1. ★★★★★ irintasnim08

   4mo ago

   Thank you for the great plugin. The setup was quick and easy with the AI Wizard. Wpbot is the best chatbot. Does exactly what i needed.

   Read on wp.org ↗
2. ★★★★★ anelka22

   4mo ago

   I love this plugin and believe it represents the future. An exceptional team, attentive and very responsive. I’ve worked with them on several projects and I’m completely satisfied with the quality of their work and the attention they give to each client.I highly recommend them.

   Read on wp.org ↗
3. ★★★★★ andreamarucci

   4mo ago

   I think this one is the absolute best in this matter. Implemented on a site with great results and I’ve always got an awesome support from the developer 🙂

   Read on wp.org ↗
4. ★★★★★ akkiaggarwal

   4mo ago

   We have recently started using WPBot Pro on our membership-based website to build an AI-powered chatbot using the RAG knowledge base feature. The plugin allows connecting Google Sheets as knowledge base sources, and the chatbot handles complex multi-year queries, comparisons, and calculations remarkably well.What genuinely impressed us before we even purchased was the pre-sales support. When we asked detailed technical questions about whether the Professional plan supports building a RAG knowledge base using public Google Spreadsheets without issues, and whether auto-sync of data is available when sheets are updated, the team gave us an honest and transparent answer. Rather than overselling, they clearly explained the current state of the feature and proactively committed to building the auto-sync functionality within 3 to 5 days of us raising a support ticket after purchase. That level of honesty and responsiveness before a sale is rare.After purchase, the plugin delivered on its promise. The Gemini integration works smoothly, the knowledge base chunking approach is well designed for structured tabular data, and the chatbot handles sophisticated queries well beyond simple FAQ responses.During implementation we did encounter some technical issues with knowledge base source naming, chunk prefix formatting, and data retrieval for certain sheet formats. In every case the support team responded promptly, diagnosed the root cause accurately, and delivered working fixes quickly. When one fix inadvertently introduced a regression, they identified and resolved it without us needing to re-explain the full context. The support team clearly understands their product at a technical level — they are actually engaging with the specifics of our RAG implementation. That level of technical depth in support is rare and genuinely valuable when you are building a production system that paying members depend on. <span style=”font-size: inherit;”>I really haven’t witnessed such fast ticket responsiveness & resolutions with any wordpress plugin till date.</span>If you are looking to build a capable AI chatbot on WordPress backed by a structured data knowledge base, especially with Google Sheets, WPBot Pro is the strongest choice. The combination of solid plugin functionality and genuinely excellent support makes it worth recommending with confidence. Highly recommended!

   Read on wp.org ↗
5. ★★★★★ Joerg

   6mo ago

   The WPBot plugin is a great tool, very flexible and offers great plans. Their customer service and support is super fast, very friendly and professional and altogether one of the best I’ve ever experienced. Keep up the excellent work guys!

   Read on wp.org ↗
6. ★★★★★ Md Mahedi Hasan

   11mo ago

   Absolutely love this ChatBot! Setup was simple, features are great, and the support team is lightning-fast. Many thanks for providing such a great solution and for all your help.

   Read on wp.org ↗
7. ★★★★★ Pat

   11mo ago

   Not sure from where to begin. I bought the top tier of WP BOT chatbot about 4 months ago considering all the comprehensive feature list mentioned on their site. In these 4 months I have tested this chatbot in-depth and can confidently say that most of the things mentioned in their plan does not work. To be precise, I have tested all the yellow highlighted modules in this image. Let’s start with their live chat option. You can check this video that I recorded for their support. Their solution to this problem is to take the live chat to Slack. According to Slack’s policy, chat’s beyond 90 day’s cannot be stored for free accounts. This mean now I need to purchase Slack’s plan separately! Now let’s discuss the webhook mailing list, their support asked me to disable the conversational forms as it has bugs, so I am not sure how would the mailing list would work. Now let’s talking about their Facebook and Instagram module, firstly this feature will not come as out of box or plug and play and you will have to spend a lot of time following their this documentation and creating the meta app and still, their bot will not auto respond to any messages. Can be seen in this videoExtended UI module: Don’t even think about trying this on otherwise this will break your site. I tried this and it painted everything in my site with dark blue. See it here. In fact they also don’t have any solution for this and my ticket from 1 months+ ago is still openMore issues with the bot:1. I could not get screenshots from the asset clean up plugin to show that their bot unnecessarily loads a lot of javascript on all your pages bloating them and thus compromising your site speed. 2. 4 times in a day the bot sends a chat session summary request to open AI exhausting all your tokens. To this they still don’t have any solution and my ticket is still open. Luckily, my site is not launched yet and no user conversation is there hence it did not emptied my pocket but these images will give you better understanding of what I am talking about – image 1, image 2, image 3, image 43. Every user message, results in a redundant system prompt thus eating more tokens and also a reflection of the poor coded bot. Notice how for this chat in first image 1 the redundant system is instructing open ai image 24. Upon their support’s guidance, I created a GPT assistant with my site data. Despite this the bot gave out wrong information about the core functionality of my site – Video, image 1In the span of 3 months, I would have spend countless hours understanding, configuring, resolving issues in their bot and now I can safely conclude that it’s not worth the effort. The product is very poorly coded. More images can be found here. Also notice how many tickets are not closed yet. For a lot of issues, I haven’t even opened and ticket and just took it as a limitation of this bot, for example below every message, it will write BACK TO START. Looks very poorly on the quality of your site.Don’t use it! Period. Unfortunately, I am unable to place links of the videos and images uploaded in my drive for this review. Please reach out to me at [email protected] if you want to check the screen recordings of their bot. Also check out reddit to find how shitty this bot isAlso, pay close attention to their fake positive reviews. This topic was modified 7 months, 3 weeks ago by Pat. Reason: Mistakenly gave 5 start This topic was modified 7 months, 3 weeks ago by threadi. Reason: Formatting

   Read on wp.org ↗
8. ★★★★★ annasilic

   1.6y ago

   The app has a more complicated setup, and even though I’m not a programmer, I was able to set up the chatbot together thanks to the amazing support that responds very quickly.

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 8.5.9 UI update for chatwindow email greetings option added user data option added start menu default item added 8.5.9
2. — Version 8.5.8 Fixed “AI Settings” issue Fixed RTL issue 8.5.8
3. — Version 8.5.7 Fixed prompt save issue Improved security 8.5.7
4. — Version 8.5.6 back to start menu disable issue fix css issue fixed on wpbot paragraph 8.5.6
5. — Version 8.5.5 More system prompts Improved security 8.5.5
6. — Version 8.5.4 Added Options for Default System Command for OpenAI Added options for Post Meta Data Settings in RAG 8.5.4

All 48 disclosed vulnerabilities are patched in the current version (8.8.9). Sites still on an older version should update.

1. Patched Medium · 4.3 WPBot 8.7.2 - 8.7.5 - Missing Authorization ↗
   2026-09-14 CVE-2026-87959 Missing Authorization Affects 8.7.2 - 8.7.5 Patched in 8.7.6
2. Patched Medium · 5.3 WPBot – AI ChatBot for Live Support, Lead Generation, WordPress Automation, AI Services < 8.5.7 - Missing Authorization ↗
   2026-09-12 CVE-2026-87918 Missing Authorization Affects < 8.5.7 Patched in 8.5.7
3. Patched Medium · 5.3 WPBot <= 8.5.9 - Unauthenticated Information Exposure ↗
   2026-09-10 CVE-2026-87916 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 8.5.9 Patched in 8.6.0
4. Patched High · 7.2 WPBot <= 8.7.3 - Unauthenticated Stored Cross-Site Scripting via 'conversation' Parameter ↗
   2026-09-08 CVE-2026-83593 Improper Neutralization of Input During Web Page Generation Affects <= 8.7.3 Patched in 8.7.4
5. Patched Medium · 5.3 WPBot <= 8.5.9 - Unauthenticated Sensitive Information Exposure in 'wpbot_send_email_transcript' AJAX Action ↗
   2026-07-27 CVE-2026-16773 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 8.5.9 Patched in 8.6.0
6. Patched Medium · 5.3 WPBot <= 8.5.9 - Missing Authorization to Unauthenticated Email Relay via wpcs_send_email AJAX Action ↗
   2026-07-27 CVE-2026-16774 Missing Authorization Affects <= 8.5.9 Patched in 8.6.0
7. Patched Medium · 5.3 WPBot <= 8.5.6 - Missing Authorization to Unauthenticated Arbitrary Chat Session Deletion via 'userid' Parameter ↗
   2026-07-15 CVE-2026-15106 Missing Authorization Affects <= 8.5.6 Patched in 8.5.7
8. Patched Medium · 4.3 WPBot <= 8.5.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary RAG Document Re-Sync via ajax_rag_manual_sync() Function ↗
   2026-07-15 CVE-2026-15610 Missing Authorization Affects <= 8.5.6 Patched in 8.5.7
9. Patched Medium · 4.9 WPBot AI ChatBot <= 8.5.1 - Authenticated (Administrator+) SQL Injection ↗
   2026-07-06 CVE-2026-14189 Improper Neutralization of Special Elements used in an SQL Command Affects <= 8.5.1 Patched in 8.5.2
10. Patched High · 7.2 WPBot – AI ChatBot for Live Support, Lead Generation, AI Services <= 8.3.7 - Unauthenticated Stored Cross-Site Scripting ↗
    2026-07-06 CVE-2026-57363 Improper Neutralization of Input During Web Page Generation Affects <= 8.3.7 Patched in 8.3.8
11. Patched Medium · 6.1 WPBot – AI ChatBot for Live Support, Lead Generation, AI Services <= 8.3.2 - Reflected Cross-Site Scripting ↗
    2026-07-01 CVE-2026-57362 Improper Neutralization of Input During Web Page Generation Affects <= 8.3.2 Patched in 8.3.3
12. Patched High · 7.2 WPBot <= 8.4.9 - Unauthenticated Stored Cross-Site Scripting via 'conversation' Parameter ↗
    2026-06-30 CVE-2026-13731 Improper Neutralization of Input During Web Page Generation Affects <= 8.4.9 Patched in 8.5.0
13. Patched Medium · 4.3 WPBot AI ChatBot <= 8.1.0 - Missing Authorization ↗
    2026-06-30 CVE-2026-14185 Missing Authorization Affects <= 8.1.0 Patched in 8.2.0
14. Patched Medium · 4.3 WPBot – AI ChatBot for Live Support, Lead Generation, AI Services <= 7.9.7 - Missing Authorization ↗
    2026-04-23 CVE-2026-40788 Missing Authorization Affects <= 7.9.7 Patched in 7.9.9
15. Patched High · 7.5 WPBot – AI ChatBot for Live Support, Lead Generation, AI Services <= 7.7.9 - Unauthenticated SQL Injection ↗
    2026-03-20 CVE-2026-32499 Improper Neutralization of Special Elements used in an SQL Command Affects <= 7.7.9 Patched in 7.8.0
16. Patched Medium · 4.3 ChatBot <= 7.7.3 - Missing Authorization ↗
    2025-10-13 CVE-2025-62952 Missing Authorization Affects <= 7.7.3 Patched in 7.7.4
17. Patched Medium · 5.3 ChatBot <= 7.3.9 - Missing Authorization ↗
    2025-10-12 CVE-2025-64277 Missing Authorization Affects <= 7.3.9 Patched in 7.4.0
18. Patched Medium · 4.4 AI ChatBot for WordPress <= 7.1.0 - Authenticated (Admin+) Stored Cross-Site Scripting ↗
    2025-08-19 CVE-2025-9111 Improper Neutralization of Input During Web Page Generation Affects <= 7.0.0 Patched in 7.1.0
19. Patched Medium · 5.4 ChatBot <= 6.7.3 - Missing Authorization ↗
    2025-06-27 CVE-2025-53200 Missing Authorization Affects <= 6.7.3 Patched in 6.7.5
20. Patched Medium · 4.4 AI ChatBot for WordPress – WPBot <= 6.2.3 - Authenticated (Admin+) Stored Cross-Site Scripting ↗
    2025-03-03 CVE-2025-0329 Improper Neutralization of Input During Web Page Generation Affects <= 6.2.3 Patched in 6.2.4
21. Patched High · 8.8 ChatBot <= 6.3.5 - Authenticated (Contributor+) Local File Inclusion ↗
    2025-02-23 CVE-2025-26932 Improper Control of Filename for Include/Require Statement in PHP Program Affects <= 6.3.5 Patched in 6.3.6
22. Patched Medium · 5.5 AI ChatBot for WordPress – WPBot <= 5.5.7 - Authenticated (Administrator+) Stored Cross-Site Scripting ↗
    2024-07-16 CVE-2024-6669 Improper Neutralization of Input During Web Page Generation Affects <= 5.5.7 Patched in 5.5.8
23. Patched Medium · 5.0 AI ChatBot <= 5.3.4 - Missing Authorization via openai_file_list_callback ↗
    2024-05-21 CVE-2024-0451 Improper Access Control Affects <= 5.3.4 Patched in 5.3.6
24. Patched Medium · 5.0 AI ChatBot <= 5.3.4 - Missing Authorization via openai_file_upload_callback ↗
    2024-05-21 CVE-2024-0452 Improper Access Control Affects <= 5.3.4 Patched in 5.3.6
25. Patched Medium · 5.0 AI ChatBot <= 5.3.4 - Missing Authorization via openai_file_delete_callback ↗
    2024-05-21 CVE-2024-0453 Improper Access Control Affects <= 5.3.4 Patched in 5.3.6
26. Patched Critical · 9.8 ChatBot <= 5.1.0 - Unauthenticated PHP Object Injection ↗
    2024-01-19 CVE-2024-22309 Deserialization of Untrusted Data Affects <= 5.1.0 Patched in 5.1.1
27. Patched High · 7.2 ChatBot <= 4.7.8 - Authenticated (Administrator+) SQL Injection ↗
    2023-11-23 CVE-2023-48741 Improper Neutralization of Special Elements used in an SQL Command Affects <= 4.7.8 Patched in 4.7.9
28. Patched Medium · 4.4 ChatBot 4.8.6 - 4.9.6 - Authenticated (Administrator+) Stored Cross-Site Scripting in FAQ Builder ↗
    2023-11-01 CVE-2023-5606 Improper Neutralization of Input During Web Page Generation Affects 4.8.6 - 4.9.6 Patched in 4.9.7
29. Patched Critical · 9.6 AI ChatBot <= 4.8.9 and 4.9.2 - Authenticated (Subscriber+) Directory Traversal to Arbitrary File Write via qcld_openai_upload_pagetraining_file ↗
    2023-10-11 CVE-2023-5241 Improper Limitation of a Pathname to a Restricted Directory Affects <= 4.8.9 Patched in 4.9.1
30. Patched Critical · 9.8 AI ChatBot <= 4.8.9 - Unauthenticated SQL Injection via qc_wpbo_search_response ↗
    2023-10-11 CVE-2023-5204 Improper Neutralization of Special Elements used in an SQL Command Affects <= 4.8.9 Patched in 4.9.1
31. Patched Critical · 9.6 AI ChatBot <= 4.8.9 and 4.9.2- Authenticated (Subscriber+) Arbitrary File Deletion via qcld_openai_delete_training_file ↗
    2023-10-11 CVE-2023-5212 Improper Limitation of a Pathname to a Restricted Directory Affects <= 4.8.9 Patched in 4.9.1
32. Patched Medium · 4.3 AI ChatBot <= 4.8.9 and 4.9.2 - Cross-Site Request Forgery on AJAX actions ↗
    2023-10-11 CVE-2023-5534 Cross-Site Request Forgery Affects <= 4.8.9 Patched in 4.9.1
33. Patched Medium · 5.3 AI ChatBot <= 4.8.9 and 4.9.2 - Missing Authorization on AJAX actions ↗
    2023-10-11 CVE-2023-5533 Missing Authorization Affects <= 4.8.9 Patched in 4.9.1
34. Patched Medium · 5.3 AI ChatBot <= 4.8.9 - Unauthenticated Sensitive Information Exposure via qcld_wb_chatbot_check_user ↗
    2023-10-11 CVE-2023-5254 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 4.8.9 Patched in 4.9.1
35. Patched Medium · 5.3 ChatBot <= 4.7.8 - Cross-Site Request Forgery via qc_wp_latest_update_check ↗
    2023-10-03 CVE-2023-44993 Cross-Site Request Forgery Affects <= 4.7.8 Patched in 4.7.9
36. Patched Medium · 4.4 ChatBot 4.7.7 - Authenticated (Administrator+) Stored Cross-Site Scripting in Language Settings ↗
    2023-08-08 CVE-2023-4254 Improper Neutralization of Input During Web Page Generation Affects <= 4.7.7 Patched in 4.7.8
37. Patched Medium · 4.4 ChatBot <= 4.7.7 - Authenticated (Administrator+) Stored Cross-Site Scripting in FAQ Builder ↗
    2023-08-08 CVE-2023-4253 Improper Neutralization of Input During Web Page Generation Affects <= 4.7.7 Patched in 4.7.8
38. Patched Medium · 4.4 AI ChatBot <= 4.5.5 - Authenticated (Administrator+) Stored Cross-Site Scripting ↗
    2023-05-25 CVE-2023-2811 Improper Neutralization of Input During Web Page Generation Affects <= 4.5.5 Patched in 4.5.6
39. Patched Medium · 4.4 AI ChatBot <= 4.6.0 - Authenticated (Administrator+) Stored Cross-Site Scripting ↗
    2023-05-22 CVE-2023-3175 Improper Neutralization of Input During Web Page Generation Affects <= 4.6.0 Patched in 4.6.1
40. Patched Medium · 4.4 AI ChatBot <= 4.5.4 - Authenticated (Administrator+) Stored Cross-Site Scripting ↗
    2023-05-22 CVE-2023-2742 Improper Neutralization of Input During Web Page Generation Affects <= 4.5.4 Patched in 4.5.5
41. Patched Medium · 6.1 ChatBot <= 4.4.4 - Unauthenticated Stored Cross-Site Scripting via Cross-Site Request Forgery ↗
    2023-04-20 CVE-2023-1011 Improper Neutralization of Input During Web Page Generation Affects <= 4.4.4 Patched in 4.4.5
42. Patched Critical · 9.8 ChatBot <= 4.4.6 - Unauthenticated PHP Object Injection via Cookies ↗
    2023-04-12 CVE-2023-1650 Deserialization of Untrusted Data Affects <= 4.4.6 Patched in 4.4.7
43. Patched Medium · 6.5 ChatBot <= 4.4.8 - Unauthenticated Stored Cross-Site Scripting in Admin Dashboard ↗
    2023-04-12 CVE-2023-1660 Improper Neutralization of Input During Web Page Generation Affects <= 4.4.8 Patched in 4.4.9
44. Patched Medium · 4.4 AI ChatBot <= 4.4.9 - Authenticated (Administrator+) Stored Cross-Site Scripting ↗
    2023-04-12 CVE-2023-1649 Improper Neutralization of Input During Web Page Generation Affects <= 4.4.9 Patched in 4.5.1
45. Patched Medium · 6.4 ChatBot <= 4.4.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting via openai_settings_option_callback ↗
    2023-04-12 CVE-2023-1651 Improper Neutralization of Input During Web Page Generation Affects <= 4.4.8 Patched in 4.4.9
46. Patched Medium · 5.4 AI ChatBot <= 4.4.7 - Missing Authorization on openai_settings_option_callback ↗
    2023-03-29 Missing Authorization Affects <= 4.4.7 Patched in 4.4.8
47. Patched Medium · 5.4 ChatBot <= 4.2.8 - Cross-Site Request Forgery to Stored Cross-Site Scripting and Settings Reset ↗
    2023-01-27 CVE-2023-24415 Cross-Site Request Forgery Affects <= 4.2.8 Patched in 4.2.9
48. Patched Medium · 4.4 ChatBot <= 4.3.0 - Authenticated (Admin+) Cross-Site Scripting ↗
    2023-01-27 CVE-2022-47613 Improper Neutralization of Input During Web Page Generation Affects <= 4.3.0 Patched in 4.3.1

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0.1

Translated into 10 languages, 0 at 90% or more

Whether ChatGPT and Claude name this plugin when asked the category question, and whether the readme gives them something to quote.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-07-14 6K+ → 5K+ down after 3 days in tier
2. 2026-07-11 5K+ → 6K+ up after 27 days in tier
3. 2026-06-14 6K+ → 5K+ down after 211 days in tier
4. 2025-11-15 7K+ → 6K+ down after 4 days in tier
5. 2025-11-11 6K+ → 7K+ up after 5 days in tier
6. 2025-11-06 7K+ → 6K+ down after 2 days in tier
7. 2025-11-04 6K+ → 7K+ up after 1 days in tier
8. 2025-11-03 7K+ → 6K+ down after 4 days in tier

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

Embed this report card

Drop a live Pulse card for WPBot – AI ChatBot for Live Support, Lead Generation, WordPress Automation, AI Services into a readme, a review or a deck. It updates itself.

WPBot – AI ChatBot for Live Support, Lead Generation, WordPress Automation, AI Services: 5K+ active installs, 4.7★ (124 reviews). Plugin Pulse (WP Mayor), as of 2026-10-31. https://plugins.wpmayor.com/plugin/chatbot