WPBot – AI ChatBot for Live Support, Lead Generation, AI Services

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. A small install base leaves thin data to model from.

1. ★★★★★ irintasnim08

   2mo ago

   Thank you for the great plugin. The setup was quick and easy with the AI Wizard. Wpbot is the best chatbot. Does exactly what i needed.

   Read on wp.org ↗
2. ★★★★★ anelka22

   2mo ago

   I love this plugin and believe it represents the future. An exceptional team, attentive and very responsive. I’ve worked with them on several projects and I’m completely satisfied with the quality of their work and the attention they give to each client.I highly recommend them.

   Read on wp.org ↗
3. ★★★★★ andreamarucci

   2mo ago

   I think this one is the absolute best in this matter. Implemented on a site with great results and I’ve always got an awesome support from the developer 🙂

   Read on wp.org ↗
4. ★★★★★ akkiaggarwal

   2mo ago

   We have recently started using WPBot Pro on our membership-based website to build an AI-powered chatbot using the RAG knowledge base feature. The plugin allows connecting Google Sheets as knowledge base sources, and the chatbot handles complex multi-year queries, comparisons, and calculations remarkably well.What genuinely impressed us before we even purchased was the pre-sales support. When we asked detailed technical questions about whether the Professional plan supports building a RAG knowledge base using public Google Spreadsheets without issues, and whether auto-sync of data is available when sheets are updated, the team gave us an honest and transparent answer. Rather than overselling, they clearly explained the current state of the feature and proactively committed to building the auto-sync functionality within 3 to 5 days of us raising a support ticket after purchase. That level of honesty and responsiveness before a sale is rare.After purchase, the plugin delivered on its promise. The Gemini integration works smoothly, the knowledge base chunking approach is well designed for structured tabular data, and the chatbot handles sophisticated queries well beyond simple FAQ responses.During implementation we did encounter some technical issues with knowledge base source naming, chunk prefix formatting, and data retrieval for certain sheet formats. In every case the support team responded promptly, diagnosed the root cause accurately, and delivered working fixes quickly. When one fix inadvertently introduced a regression, they identified and resolved it without us needing to re-explain the full context. The support team clearly understands their product at a technical level — they are actually engaging with the specifics of our RAG implementation. That level of technical depth in support is rare and genuinely valuable when you are building a production system that paying members depend on. <span style=”font-size: inherit;”>I really haven’t witnessed such fast ticket responsiveness & resolutions with any wordpress plugin till date.</span>If you are looking to build a capable AI chatbot on WordPress backed by a structured data knowledge base, especially with Google Sheets, WPBot Pro is the strongest choice. The combination of solid plugin functionality and genuinely excellent support makes it worth recommending with confidence. Highly recommended!

   Read on wp.org ↗
5. ★★★★★ Joerg

   3mo ago

   The WPBot plugin is a great tool, very flexible and offers great plans. Their customer service and support is super fast, very friendly and professional and altogether one of the best I’ve ever experienced. Keep up the excellent work guys!

   Read on wp.org ↗
6. ★★★★★ Md Mahedi Hasan

   9mo ago

   Absolutely love this ChatBot! Setup was simple, features are great, and the support team is lightning-fast. Many thanks for providing such a great solution and for all your help.

   Read on wp.org ↗
7. ★★★★★ Pat

   9mo ago

   Not sure from where to begin. I bought the top tier of WP BOT chatbot about 4 months ago considering all the comprehensive feature list mentioned on their site. In these 4 months I have tested this chatbot in-depth and can confidently say that most of the things mentioned in their plan does not work. To be precise, I have tested all the yellow highlighted modules in this image. Let’s start with their live chat option. You can check this video that I recorded for their support. Their solution to this problem is to take the live chat to Slack. According to Slack’s policy, chat’s beyond 90 day’s cannot be stored for free accounts. This mean now I need to purchase Slack’s plan separately! Now let’s discuss the webhook mailing list, their support asked me to disable the conversational forms as it has bugs, so I am not sure how would the mailing list would work. Now let’s talking about their Facebook and Instagram module, firstly this feature will not come as out of box or plug and play and you will have to spend a lot of time following their this documentation and creating the meta app and still, their bot will not auto respond to any messages. Can be seen in this videoExtended UI module: Don’t even think about trying this on otherwise this will break your site. I tried this and it painted everything in my site with dark blue. See it here. In fact they also don’t have any solution for this and my ticket from 1 months+ ago is still openMore issues with the bot:1. I could not get screenshots from the asset clean up plugin to show that their bot unnecessarily loads a lot of javascript on all your pages bloating them and thus compromising your site speed. 2. 4 times in a day the bot sends a chat session summary request to open AI exhausting all your tokens. To this they still don’t have any solution and my ticket is still open. Luckily, my site is not launched yet and no user conversation is there hence it did not emptied my pocket but these images will give you better understanding of what I am talking about – image 1, image 2, image 3, image 43. Every user message, results in a redundant system prompt thus eating more tokens and also a reflection of the poor coded bot. Notice how for this chat in first image 1 the redundant system is instructing open ai image 24. Upon their support’s guidance, I created a GPT assistant with my site data. Despite this the bot gave out wrong information about the core functionality of my site – Video, image 1In the span of 3 months, I would have spend countless hours understanding, configuring, resolving issues in their bot and now I can safely conclude that it’s not worth the effort. The product is very poorly coded. More images can be found here. Also notice how many tickets are not closed yet. For a lot of issues, I haven’t even opened and ticket and just took it as a limitation of this bot, for example below every message, it will write BACK TO START. Looks very poorly on the quality of your site.Don’t use it! Period. Unfortunately, I am unable to place links of the videos and images uploaded in my drive for this review. Please reach out to me at [email protected] if you want to check the screen recordings of their bot. Also check out reddit to find how shitty this bot isAlso, pay close attention to their fake positive reviews. This topic was modified 7 months, 3 weeks ago by Pat. Reason: Mistakenly gave 5 start This topic was modified 7 months, 3 weeks ago by threadi. Reason: Formatting

   Read on wp.org ↗
8. ★★★★★ annasilic

   1.4y ago

   The app has a more complicated setup, and even though I’m not a programmer, I was able to set up the chatbot together thanks to the amazing support that responds very quickly.

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 8.5.9 UI update for chatwindow email greetings option added user data option added start menu default item added 8.5.9
2. — Version 8.5.8 Fixed “AI Settings” issue Fixed RTL issue 8.5.8
3. — Version 8.5.7 Fixed prompt save issue Improved security 8.5.7
4. — Version 8.5.6 back to start menu disable issue fix css issue fixed on wpbot paragraph 8.5.6
5. — Version 8.5.5 More system prompts Improved security 8.5.5
6. — Version 8.5.4 Added Options for Default System Command for OpenAI Added options for Post Meta Data Settings in RAG 8.5.4

44 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. Medium · 5.3 WPBot <= 8.5.9 - Unauthenticated Sensitive Information Exposure in 'wpbot_send_email_transcript' AJAX Action ↗
   2026-07-27 CVE-2026-16773 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 8.5.9 Patched in 8.6.0
2. Medium · 5.3 WPBot <= 8.5.9 - Missing Authorization to Unauthenticated Email Relay via wpcs_send_email AJAX Action ↗
   2026-07-27 CVE-2026-16774 Missing Authorization Affects <= 8.5.9 Patched in 8.6.0
3. Medium · 5.3 WPBot <= 8.5.6 - Missing Authorization to Unauthenticated Arbitrary Chat Session Deletion via 'userid' Parameter ↗
   2026-07-15 CVE-2026-15106 Missing Authorization Affects <= 8.5.6 Patched in 8.5.7
4. Medium · 4.3 WPBot <= 8.5.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary RAG Document Re-Sync via ajax_rag_manual_sync() Function ↗
   2026-07-15 CVE-2026-15610 Missing Authorization Affects <= 8.5.6 Patched in 8.5.7
5. Medium · 4.9 WPBot AI ChatBot <= 8.5.1 - Authenticated (Administrator+) SQL Injection ↗
   2026-07-06 CVE-2026-14189 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 8.5.1 Patched in 8.5.2
6. High · 7.2 WPBot – AI ChatBot for Live Support, Lead Generation, AI Services <= 8.3.7 - Unauthenticated Stored Cross-Site Scripting ↗
   2026-07-06 CVE-2026-57363 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 8.3.7 Patched in 8.3.8
7. Medium · 6.1 WPBot – AI ChatBot for Live Support, Lead Generation, AI Services <= 8.3.2 - Reflected Cross-Site Scripting ↗
   2026-07-01 CVE-2026-57362 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 8.3.2 Patched in 8.3.3
8. High · 7.2 WPBot <= 8.4.9 - Unauthenticated Stored Cross-Site Scripting via 'conversation' Parameter ↗
   2026-06-30 CVE-2026-13731 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 8.4.9 Patched in 8.5.0
9. Medium · 4.3 WPBot AI ChatBot <= 8.1.0 - Missing Authorization ↗
   2026-06-30 CVE-2026-14185 Missing Authorization Affects <= 8.1.0 Patched in 8.2.0
10. Medium · 4.3 WPBot – AI ChatBot for Live Support, Lead Generation, AI Services <= 7.9.7 - Missing Authorization ↗
    2026-04-23 CVE-2026-40788 Missing Authorization Affects <= 7.9.7 Patched in 7.9.9
11. High · 7.5 WPBot – AI ChatBot for Live Support, Lead Generation, AI Services <= 7.7.9 - Unauthenticated SQL Injection ↗
    2026-03-20 CVE-2026-32499 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 7.7.9 Patched in 7.8.0
12. Medium · 4.3 ChatBot <= 7.7.3 - Missing Authorization ↗
    2025-10-13 CVE-2025-62952 Missing Authorization Affects <= 7.7.3 Patched in 7.7.4
13. Medium · 5.3 ChatBot <= 7.3.9 - Missing Authorization ↗
    2025-10-12 CVE-2025-64277 Missing Authorization Affects <= 7.3.9 Patched in 7.4.0
14. Medium · 4.4 AI ChatBot for WordPress <= 7.1.0 - Authenticated (Admin+) Stored Cross-Site Scripting ↗
    2025-08-19 CVE-2025-9111 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 7.0.0 Patched in 7.1.0
15. Medium · 5.4 ChatBot <= 6.7.3 - Missing Authorization ↗
    2025-06-27 CVE-2025-53200 Missing Authorization Affects <= 6.7.3 Patched in 6.7.5
16. Medium · 4.4 AI ChatBot for WordPress – WPBot <= 6.2.3 - Authenticated (Admin+) Stored Cross-Site Scripting ↗
    2025-03-03 CVE-2025-0329 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 6.2.3 Patched in 6.2.4
17. High · 8.8 ChatBot <= 6.3.5 - Authenticated (Contributor+) Local File Inclusion ↗
    2025-02-23 CVE-2025-26932 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') Affects <= 6.3.5 Patched in 6.3.6
18. Medium · 5.5 AI ChatBot for WordPress – WPBot <= 5.5.7 - Authenticated (Administrator+) Stored Cross-Site Scripting ↗
    2024-07-16 CVE-2024-6669 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 5.5.7 Patched in 5.5.8
19. Medium · 5.0 AI ChatBot <= 5.3.4 - Missing Authorization via openai_file_list_callback ↗
    2024-05-21 CVE-2024-0451 Improper Access Control Affects <= 5.3.4 Patched in 5.3.6
20. Medium · 5.0 AI ChatBot <= 5.3.4 - Missing Authorization via openai_file_upload_callback ↗
    2024-05-21 CVE-2024-0452 Improper Access Control Affects <= 5.3.4 Patched in 5.3.6
21. Medium · 5.0 AI ChatBot <= 5.3.4 - Missing Authorization via openai_file_delete_callback ↗
    2024-05-21 CVE-2024-0453 Improper Access Control Affects <= 5.3.4 Patched in 5.3.6
22. Critical · 9.8 ChatBot <= 5.1.0 - Unauthenticated PHP Object Injection ↗
    2024-01-19 CVE-2024-22309 Deserialization of Untrusted Data Affects <= 5.1.0 Patched in 5.1.1
23. High · 7.2 ChatBot <= 4.7.8 - Authenticated (Administrator+) SQL Injection ↗
    2023-11-23 CVE-2023-48741 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 4.7.8 Patched in 4.7.9
24. Medium · 4.4 ChatBot 4.8.6 - 4.9.6 - Authenticated (Administrator+) Stored Cross-Site Scripting in FAQ Builder ↗
    2023-11-01 CVE-2023-5606 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects 4.8.6 - 4.9.6 Patched in 4.9.7
25. Critical · 9.6 AI ChatBot <= 4.8.9 and 4.9.2 - Authenticated (Subscriber+) Directory Traversal to Arbitrary File Write via qcld_openai_upload_pagetraining_file ↗
    2023-10-11 CVE-2023-5241 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Affects <= 4.8.9 Patched in 4.9.1
26. Critical · 9.8 AI ChatBot <= 4.8.9 - Unauthenticated SQL Injection via qc_wpbo_search_response ↗
    2023-10-11 CVE-2023-5204 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 4.8.9 Patched in 4.9.1
27. Critical · 9.6 AI ChatBot <= 4.8.9 and 4.9.2- Authenticated (Subscriber+) Arbitrary File Deletion via qcld_openai_delete_training_file ↗
    2023-10-11 CVE-2023-5212 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Affects <= 4.8.9 Patched in 4.9.1
28. Medium · 4.3 AI ChatBot <= 4.8.9 and 4.9.2 - Cross-Site Request Forgery on AJAX actions ↗
    2023-10-11 CVE-2023-5534 Cross-Site Request Forgery (CSRF) Affects <= 4.8.9 Patched in 4.9.1
29. Medium · 5.3 AI ChatBot <= 4.8.9 and 4.9.2 - Missing Authorization on AJAX actions ↗
    2023-10-11 CVE-2023-5533 Missing Authorization Affects <= 4.8.9 Patched in 4.9.1
30. Medium · 5.3 AI ChatBot <= 4.8.9 - Unauthenticated Sensitive Information Exposure via qcld_wb_chatbot_check_user ↗
    2023-10-11 CVE-2023-5254 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 4.8.9 Patched in 4.9.1
31. Medium · 5.3 ChatBot <= 4.7.8 - Cross-Site Request Forgery via qc_wp_latest_update_check ↗
    2023-10-03 CVE-2023-44993 Cross-Site Request Forgery (CSRF) Affects <= 4.7.8 Patched in 4.7.9
32. Medium · 4.4 ChatBot 4.7.7 - Authenticated (Administrator+) Stored Cross-Site Scripting in Language Settings ↗
    2023-08-08 CVE-2023-4254 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 4.7.7 Patched in 4.7.8
33. Medium · 4.4 ChatBot <= 4.7.7 - Authenticated (Administrator+) Stored Cross-Site Scripting in FAQ Builder ↗
    2023-08-08 CVE-2023-4253 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 4.7.7 Patched in 4.7.8
34. Medium · 4.4 AI ChatBot <= 4.5.5 - Authenticated (Administrator+) Stored Cross-Site Scripting ↗
    2023-05-25 CVE-2023-2811 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 4.5.5 Patched in 4.5.6
35. Medium · 4.4 AI ChatBot <= 4.6.0 - Authenticated (Administrator+) Stored Cross-Site Scripting ↗
    2023-05-22 CVE-2023-3175 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 4.6.0 Patched in 4.6.1
36. Medium · 4.4 AI ChatBot <= 4.5.4 - Authenticated (Administrator+) Stored Cross-Site Scripting ↗
    2023-05-22 CVE-2023-2742 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 4.5.4 Patched in 4.5.5
37. Medium · 6.1 ChatBot <= 4.4.4 - Unauthenticated Stored Cross-Site Scripting via Cross-Site Request Forgery ↗
    2023-04-20 CVE-2023-1011 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 4.4.4 Patched in 4.4.5
38. Critical · 9.8 ChatBot <= 4.4.6 - Unauthenticated PHP Object Injection via Cookies ↗
    2023-04-12 CVE-2023-1650 Deserialization of Untrusted Data Affects <= 4.4.6 Patched in 4.4.7
39. Medium · 6.5 ChatBot <= 4.4.8 - Unauthenticated Stored Cross-Site Scripting in Admin Dashboard ↗
    2023-04-12 CVE-2023-1660 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 4.4.8 Patched in 4.4.9
40. Medium · 4.4 AI ChatBot <= 4.4.9 - Authenticated (Administrator+) Stored Cross-Site Scripting ↗
    2023-04-12 CVE-2023-1649 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 4.4.9 Patched in 4.5.1
41. Medium · 6.4 ChatBot <= 4.4.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting via openai_settings_option_callback ↗
    2023-04-12 CVE-2023-1651 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 4.4.8 Patched in 4.4.9
42. Medium · 5.4 AI ChatBot <= 4.4.7 - Missing Authorization on openai_settings_option_callback ↗
    2023-03-29 Missing Authorization Affects <= 4.4.7 Patched in 4.4.8
43. Medium · 5.4 ChatBot <= 4.2.8 - Cross-Site Request Forgery to Stored Cross-Site Scripting and Settings Reset ↗
    2023-01-27 CVE-2023-24415 Cross-Site Request Forgery (CSRF) Affects <= 4.2.8 Patched in 4.2.9
44. Medium · 4.4 ChatBot <= 4.3.0 - Authenticated (Admin+) Cross-Site Scripting ↗
    2023-01-27 CVE-2022-47613 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 4.3.0 Patched in 4.3.1

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0.1

Translated into 10 languages, 0 at 90% or more

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-07-14 6K+ → 5K+ down after 30 days in tier
2. 2026-06-14 6K+ → 5K+ down after 211 days in tier
3. 2025-11-15 7K+ → 6K+ down after 4 days in tier
4. 2025-11-11 6K+ → 7K+ up after 5 days in tier
5. 2025-11-06 7K+ → 6K+ down after 2 days in tier
6. 2025-11-04 6K+ → 7K+ up after 1 days in tier
7. 2025-11-03 7K+ → 6K+ down after 4 days in tier
8. 2025-10-30 6K+ → 7K+ up after 4 days in tier

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• Jotform – AI Chatbot 5K+ installs · 4.0★ · 4 shared tags B
• BotPenguin – Generative AI Chatbot with Live Chat & ChatGPT 600+ installs · 3.6★ · 4 shared tags B
• AI Bud – AI Content Generator, AI Chatbot, ChatGPT, Gemini, GPT-4o 2K+ installs · 4.3★ · 3 shared tags A
• AI Copilot – ChatGPT Chatbot & AI Engine for Post Automation 1K+ installs · 4.0★ · 3 shared tags B
• AI ChatBot with ChatGPT and Content Generator by AYS 300+ installs · 4.4★ · 3 shared tags A
• AI Chatbot & Live Chat – WebChatAgent 300+ installs · 4.1★ · 3 shared tags B

Embed this report card

Drop a live Pulse card for WPBot – AI ChatBot for Live Support, Lead Generation, AI Services into a readme, a review or a deck. It updates itself.

WPBot – AI ChatBot for Live Support, Lead Generation, AI Services: 5K+ active installs, 4.7★ (122 reviews). Plugin Pulse (WP Mayor), as of 2026-08-25. https://plugins.wpmayor.com/plugin/chatbot