WP Manifestindependent plugin directory
manifest / ai / ez-chatbot

EZ Chatbot WP Registry grade C-. High-severity findings · 1 findingWP RegistryHigh-severity findings · 1 findingOpen the reportC-

EZ Chatbot is a WordPress plugin that allows you to create a custom chatbot for your website using the OpenAI API.

★ 1stars
22release downloads
v2.0.0latest · 6mo ago

Install

Download ez-chatbot.zip From the v2.0.0 release on GitHub, Apr 23, 2026

Upload it under Plugins → Add New Plugin → Upload Plugin, then activate.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/medinnna/ez-chatbot/releases/download/v2.0.0/ez-chatbot.zip
No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.

WordPress plugin that integrates a personalized AI chatbot into your website.

EZ Chatbot

Features

  • 🤖 Custom AI Chatbot: Powered by your own knowledge base to deliver smart, tailored replies.
  • 🎨 Customizable UI: Style it your way with live preview.
  • 💾 Conversation Storage: Saves chats directly to your WordPress database.
  • 📥 CSV Export: Download conversations anytime.
  • 🔍 Search: Quickly find chats by name or email.
  • 📊 Analytics: Total, monthly and weekly stats with trend insights.
  • 🔗 Webhooks: Connect with your favorite external services.


EZ Chatbot Dashboard

Installation

  • Download ez-chatbot.zip from the releases page.
  • Go to Plugins on your WordPress admin panel.
  • Select Add new plugin.
  • Select Upload plugin and choose the downloaded file.
  • Click Install Now.

Build/Development

  • Clone the repository:
git clone https://github.com/medinnna/ez-chatbot.git
  • Install the dependencies.
npm install
  • Build the plugin.
npm run build

The build automatically creates the plugin zip file in the dist folder only with the necessary files.

License

EZ Chatbot is licensed under the GPL v3 or later.

Releases

6 releases. Each count is every asset in that release; expand a row for the breakdown.

Tag
Published
Assets
Downloads
v2.0.0 latest
Apr 23, 2026 6mo ago
ez-chatbot.zip
2
Jul 2, 2025 1 year ago
ez-chatbot.zip
5
May 1, 2025 1 year ago
ez-chatbot.zip
4
Jan 6, 2025 1 year ago
ez-chatbot.zip
7
Jan 5, 2025 1 year ago
ez-chatbot.zip
4
Dec 31, 2024 1 year ago
ez-chatbot.zip
0
C- grade

Security

EZ Chatbot 2.0.0 · audited by WP Registry

High-severity findings.

1 high
Audited release
2.0.0
Findings
1
Worst severity
high
Content hash
3e2740253a90c73f94438e65…

Findings

  • high REST auth is Referer-only (effectively missing authentication)

    missing_auth

    ez-chatbot/v1/openai, /conversations, and /messages use permission_callback request_validator(), which returns true when HTTP_REFERER starts with home_url(). Referer is attacker-controlled for scripts/curl, so unauthenticated callers can invoke the site OpenAI key (cost/abuse) and create/update chat_conversation posts and messages. Require a nonce, capability, or shared secret.

    index.php:399-415,573-577

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.