WP Manifestindependent plugin directory
manifest / ai / ocade-chatbot-anything-llm-n8n

Ocade Fusion AnythingLLM Chatbot WP Registry grade A-. Low-severity findings · 1 findingWP RegistryLow-severity findings · 1 findingOpen the reportA-

Ocade Chatbot V2 permet de connecter Anything LLM RAG ou N8N.

★ 0stars
25release downloads
1.2.1latest · 6mo ago

Install

Download ocade-fusion-anythingllm-chatbot.zip From the 1.2.1 release on GitHub, Apr 24, 2026

Upload it under Plugins → Add New Plugin → Upload Plugin, then activate.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/ocade-graciet-system/ocade-chatbot-anything-llm-n8n/releases/download/1.2.1/ocade-fusion-anythingllm-chatbot.zip
Updates itself. It ships its own updater, so new versions appear under Dashboard → Updates.

A fully accessible, GDPR-compliant AI chatbot powered by AnythingLLM for WordPress.

Description

Ocade Fusion AnythingLLM Chatbot integrates a powerful AI assistant into your WordPress site, connecting to your AnythingLLM instance. Built with accessibility (RGAA AA compliant) and privacy (GDPR compliant) at its core.

Key Features

AI-Powered Conversations

  • Connect to your AnythingLLM instance
  • Real-time streaming responses (SSE)
  • Support for multiple workspaces
  • File upload capability
  • Markdown rendering with syntax highlighting

Accessibility (RGAA AA Compliant)

  • Skip link navigation
  • Full keyboard support with focus trap
  • ARIA live regions for screen readers
  • Respects prefers-reduced-motion
  • Minimum contrast ratios enforced

Privacy & GDPR Compliance

  • Independent consent management
  • Anonymized IP storage
  • Configurable data retention
  • Data export and deletion tools
  • Integration with WordPress Privacy Tools

Customization

  • Position in any corner
  • Light/Dark theme support
  • Custom colors and avatars
  • Configurable messages
  • Shortcode and Gutenberg block

Performance

  • Lazy loading of assets
  • Response caching
  • Rate limiting
  • Optimized bundle size (<300KB gzipped)

Security

  • Nonce verification
  • Input sanitization
  • Honeypot spam protection
  • WordPress coding standards

Requirements

  • WordPress 6.0 or higher
  • PHP 8.0 or higher
  • An AnythingLLM instance with API access

Links

Installation

  1. Upload the plugin files to /wp-content/plugins/ocade-fusion-anythingllm-chatbot/
  2. Activate the plugin through the 'Plugins' menu in WordPress
  3. Go to 'Chatbot' > 'Settings' in your admin menu
  4. Enter your AnythingLLM API URL, API Key, and Workspace Slug
  5. Configure appearance, privacy, and accessibility settings
  6. Save and the chatbot will appear on your site

Using the Shortcode

You can embed the chatbot in specific pages using the shortcode:

[ofac_chatbot]

With custom attributes:

[ofac_chatbot title="Ask me anything" position="bottom-left"]

Using the Gutenberg Block

  1. Edit a page or post
  2. Add a new block
  3. Search for "AnythingLLM Chatbot"
  4. Configure the block settings in the sidebar

Frequently Asked Questions

What is AnythingLLM?

AnythingLLM is an open-source, all-in-one AI application that allows you to chat with your documents, use various LLM providers, and build AI-powered applications.

Do I need my own AnythingLLM instance?

Yes, this plugin connects to your own AnythingLLM instance. You need to have AnythingLLM installed and running, either self-hosted or using their cloud service.

Is this plugin GDPR compliant?

Yes, the plugin is designed with GDPR compliance in mind:

  • User consent is requested before data collection
  • IP addresses are anonymized
  • Data retention periods are configurable
  • Users can request export or deletion of their data
  • Integrates with WordPress Privacy Tools

Is the chatbot accessible?

Yes, the plugin follows RGAA AA accessibility guidelines:

  • Full keyboard navigation
  • Screen reader support with ARIA attributes
  • Focus management
  • Respects reduced motion preferences
  • High contrast support

Can I customize the appearance?

Yes, you can customize:

  • Position (4 corners)
  • Theme (light/dark/auto)
  • Primary color
  • Bot and user avatars
  • Title and welcome message
  • All text labels

Does it support file uploads?

Yes, users can upload files to the chatbot. You can configure:

  • Maximum file size
  • Allowed file types
  • Enable/disable the feature

Screenshots

  1. Chatbot in action - Light theme
  2. Chatbot in action - Dark theme
  3. Admin settings - API configuration
  4. Admin settings - Appearance customization
  5. Admin settings - Privacy options
  6. Statistics dashboard
  7. Conversation logs
  8. GDPR tools

Changelog

1.0.0

  • Initial release
  • AnythingLLM integration
  • SSE streaming support
  • RGAA AA accessibility compliance
  • GDPR compliance features
  • Shortcode and Gutenberg block
  • Admin dashboard with statistics
  • Conversation logs management
  • Import/export settings
  • Multi-language support (EN/FR)

Upgrade Notice

1.0.0

Initial release of Ocade Fusion AnythingLLM Chatbot.

Privacy Policy

This plugin stores conversation data in your WordPress database. The data collected includes:

  • Session identifiers (randomly generated)
  • Anonymized IP addresses (last octet removed, then hashed)
  • Conversation messages and timestamps
  • User consent records

Data is automatically deleted after the configured retention period (default: 30 days).

No data is sent to third parties except your own AnythingLLM instance.

For more information, see our Privacy Policy.

Credits

  • Developed by Ocade Fusion
  • Icons by Lucide (ISC License)
  • Built with accessibility guidance from RGAA 4.1

Support

For support, please visit our support page or open an issue on GitHub.

Releases

Newest 25 of 27 recorded releases. Each count is every asset in that release; expand a row for the breakdown.

Tag
Published
Assets
Downloads
1.2.1 latest
Apr 24, 2026 6mo ago
ocade-fusion-anythingllm-chatbot.zip +1 asset
10
ocade-fusion-anythingllm-chatbot.zip7
metadata.json3
Apr 21, 2026 6mo ago
ocade-fusion-anythingllm-chatbot.zip +1 asset
3
ocade-fusion-anythingllm-chatbot.zip2
metadata.json1
Apr 13, 2026 6mo ago
ocade-fusion-anythingllm-chatbot.zip +1 asset
4
ocade-fusion-anythingllm-chatbot.zip3
metadata.json1
Mar 24, 2026 7mo ago
ocade-fusion-anythingllm-chatbot.zip +1 asset
3
ocade-fusion-anythingllm-chatbot.zip2
metadata.json1
Mar 24, 2026 7mo ago
ocade-fusion-anythingllm-chatbot.zip +1 asset
0
ocade-fusion-anythingllm-chatbot.zip0
metadata.json0
Mar 24, 2026 7mo ago
ocade-fusion-anythingllm-chatbot.zip +1 asset
0
ocade-fusion-anythingllm-chatbot.zip0
metadata.json0
Mar 24, 2026 7mo ago
ocade-fusion-anythingllm-chatbot.zip +1 asset
0
ocade-fusion-anythingllm-chatbot.zip0
metadata.json0
Mar 24, 2026 7mo ago
ocade-fusion-anythingllm-chatbot.zip +1 asset
0
ocade-fusion-anythingllm-chatbot.zip0
metadata.json0
Mar 23, 2026 7mo ago
ocade-fusion-anythingllm-chatbot.zip +1 asset
0
ocade-fusion-anythingllm-chatbot.zip0
metadata.json0
Mar 23, 2026 7mo ago
ocade-fusion-anythingllm-chatbot.zip +1 asset
0
ocade-fusion-anythingllm-chatbot.zip0
metadata.json0
Mar 23, 2026 7mo ago
ocade-fusion-anythingllm-chatbot.zip +1 asset
0
ocade-fusion-anythingllm-chatbot.zip0
metadata.json0
Mar 23, 2026 7mo ago
ocade-fusion-anythingllm-chatbot.zip +1 asset
0
ocade-fusion-anythingllm-chatbot.zip0
metadata.json0
Mar 23, 2026 7mo ago
ocade-fusion-anythingllm-chatbot.zip +1 asset
0
ocade-fusion-anythingllm-chatbot.zip0
metadata.json0
Mar 23, 2026 7mo ago
ocade-fusion-anythingllm-chatbot.zip +1 asset
0
ocade-fusion-anythingllm-chatbot.zip0
metadata.json0
Mar 23, 2026 7mo ago
ocade-fusion-anythingllm-chatbot.zip +1 asset
4
ocade-fusion-anythingllm-chatbot.zip4
metadata.json0
Mar 23, 2026 7mo ago
ocade-fusion-anythingllm-chatbot.zip +1 asset
0
ocade-fusion-anythingllm-chatbot.zip0
metadata.json0
Mar 23, 2026 7mo ago
ocade-fusion-anythingllm-chatbot.zip +1 asset
0
ocade-fusion-anythingllm-chatbot.zip0
metadata.json0
Mar 23, 2026 7mo ago
ocade-fusion-anythingllm-chatbot.zip +1 asset
0
ocade-fusion-anythingllm-chatbot.zip0
metadata.json0
Mar 19, 2026 7mo ago
ocade-fusion-anythingllm-chatbot.zip +1 asset
0
ocade-fusion-anythingllm-chatbot.zip0
metadata.json0
Mar 6, 2026 8mo ago
ocade-fusion-anythingllm-chatbot.zip +1 asset
2
ocade-fusion-anythingllm-chatbot.zip1
metadata.json1
Mar 3, 2026 8mo ago
ocade-fusion-anythingllm-chatbot.zip +1 asset
0
ocade-fusion-anythingllm-chatbot.zip0
metadata.json0
Feb 27, 2026 8mo ago
ocade-fusion-anythingllm-chatbot.zip +1 asset
2
ocade-fusion-anythingllm-chatbot.zip1
metadata.json1
Feb 23, 2026 8mo ago
ocade-fusion-anythingllm-chatbot.zip +1 asset
2
ocade-fusion-anythingllm-chatbot.zip1
metadata.json1
Feb 2, 2026 9mo ago
ocade-fusion-anythingllm-chatbot.zip +1 asset
2
ocade-fusion-anythingllm-chatbot.zip1
metadata.json1
Jan 27, 2026 9mo ago
ocade-fusion-anythingllm-chatbot.zip +1 asset
3
ocade-fusion-anythingllm-chatbot.zip2
metadata.json1
All releases on GitHub →
A- grade

Security

Ocade Fusion AnythingLLM Chatbot 1.2.1 · audited by WP Registry

Low-severity findings only.

1 low
Audited release
1.2.1
Findings
1
Worst severity
low
Content hash
71865a645fad3d60bbfe8566…

Findings

  • low Conversation export/clear/feedback trust a client-generated session_id without ownership binding

    predictable_token

    export_conversation(), clear_history() and save_conversation_feedback() (registered for nopriv) look up ofac_conversations solely by the POSTed session_id and return the full transcript, delete it, or attach feedback. The session_id is generated client-side with Math.random() (not a CSPRNG) and the conversation row's user_id/ip_hash are never compared to the requester. Anyone who learns or guesses a session_id (shared device, logs, analytics leakage) can read or wipe another visitor's conversation, which may contain personal data. Exploitation requires obtaining the 122-bit-ish random ID, so impact is limited.

    includes/class-ofac-chatbot.php:291-374

    Recommendation

    Generate session IDs server-side with wp_generate_uuid4()/random_bytes and bind conversations to the logged-in user or a signed HttpOnly cookie; verify ownership (user_id or HMAC) before export/delete.

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.