| #1 | AI Copilot – ChatGPT Chatbot & AI Engine for Post Automation | 56 | 65 | 20 | 1k+ | | | Text Domain Mismatch |
| #2 | AI Engine – The Chatbot, AI Framework & MCP for WordPress | 23 | 411 | 544 | 100k+ | | | error log error log |
| #3 | AI Bud – AI Content Generator, AI Chatbot, ChatGPT, Gemini, GPT-4o | 96 | 5 | 54 | 2k+ | | | Non-prefixed global variable |
| #4 | All-in-one Chat Button by anychat.one | 37 | 119 | 69 | 900 | | | Text Domain Mismatch |
| #5 | AI ChatBot with ChatGPT and Content Generator by AYS | 31 | 170 | 378 | 400 | | | Non-prefixed global variable |
| #6 | Boei – AI Chatbot, Live Chat & 50+ Channels for WordPress | 78 | 9 | 4 | 1k+ | | | Output is not escaped |
| #7 | BotPenguin – Generative AI Chatbot with Live Chat & ChatGPT | 56 | 12 | 7 | 700 | | | Unsafe printing function |
| #8 | Buttonizer – Live Chat, AI Chatbot, Call, Chat, Contact Button | 44 | 24 | 71 | 50k+ | | | Non-prefixed constant |
| #9 | Chaport — Live Chat & Chatbots | 98 | 5 | 0 | 2k+ | | | wp function not compatible with requires wp |
| #10 | WPBot – AI ChatBot for Live Support, Lead Generation, AI Services | 23 | 264 | 1,038 | 5k+ | | | Non-prefixed global variable |
| #11 | ChatBot Conversational AI Support | 41 | 72 | 32 | 1k+ | | | Short PHP open tag found |
| #12 | Chatra Live Chat + ChatBot + Cart Saver | 79 | 11 | 1 | 3k+ | | | Output is not escaped |
| #13 | Chatway Live Chat – AI Chatbot, Customer Support, FAQ & Helpdesk Customer Service & Chat Buttons | 69 | 22 | 24 | 30k+ | | | Text Domain Mismatch |
| #14 | Cliengo – Chatbot | 91 | 4 | 7 | 2k+ | | | Input is not sanitized |
| #15 | Chatbot for WordPress by Collect.chat ⚡️ | 38 | 58 | 36 | 6k+ | | | Unsafe printing function |
| #16 | Chatbot with IBM watsonx Assistant | 33 | 324 | 83 | 400 | | | Non Singular String Literal Domain |
| #17 | WPBot – ChatBot Conversational Forms | 24 | 1,254 | 1,226 | 2k+ | | | Text Domain Mismatch |
| #18 | Crisp – Live Chat and Chatbot | 40 | 24 | 20 | 20k+ | | | Unsafe printing function |
| #19 | Customize Tawk.to Widget | 50 | 21 | 28 | 500 | | | Request data is not unslashed |
| #20 | FastBots | 92 | 3 | 2 | 1k+ | | | Non Enqueued Script |
| #21 | Live Chat by Formilla – Real-time Chat & Chatbots Plugin | 57 | 22 | 13 | 2k+ | | | Missing Arg Domain |
| #22 | Futy.io Leadbots | 65 | 73 | 9 | 2k+ | | | wp function not compatible with requires wp |
| #23 | GeekyBot — AI Copilot, Chatbot, WooCommerce Lead Gen & Zero-Prompt Content | 25 | 87 | 863 | 6k+ | | | Non-prefixed global variable |
| #24 | AI Puffer – Chat. Create. Automate. (formerly AI Power) | 100 | | 0 | 10k+ | | | No open findings |
| #25 | HelpCrunch – Live Chat, Chatbot & Knowledge Base for Customer Service | 69 | 15 | 1 | 2k+ | | | Output is not escaped |
| #26 | Jotform – AI Chatbot | 84 | 1 | 8 | 5k+ | | | Input is not validated |
| #27 | AI Agent by SiteGround | 54 | 28 | 6 | 1m+ | | | Exception output is not escaped |
| #28 | Smartsupp – live chat, AI shopping assistant and chatbots | 96 | 16 | 4 | 20k+ | | | wp function not compatible with requires wp |
| #29 | Tidio – Live Chat & AI Chatbots | 34 | 52 | 19 | 80k+ | | | curl curl setopt |
| #30 | Typebot | 59 | 17 | 9 | 3k+ | | | Output is not escaped |
| #31 | UltraPress – AI Assistant, Chatbot & SEO | 59 | 12 | 38 | 800 | | | Non-prefixed global variable |
| #32 | AI ChatBot for eCommerce – WoowBot | 24 | 145 | 528 | 1k+ | | | Request data is not unslashed |
| #33 | LiveChat – Live Chat Plugin for WP Websites | 95 | 62 | 9 | 10k+ | | | Text Domain Mismatch |
| #34 | Zeno – AI-Powered Chatbot | 36 | 311 | 131 | 500 | | | Text Domain Mismatch |
| #35 | Zoho SalesIQ – Live chat, chatbots, and visitor tracking | 73 | 11 | 9 | 20k+ | | | Input is not validated |
| #36 | AI Copilot – Content Generator | 29 | 166 | 161 | 1k+ | | | wp function not compatible with requires wp |
