Chatbot for WordPress by Collect.chat ⚡️ · Security record
Is Chatbot for WordPress by Collect.chat ⚡️ safe?
No known vulnerability affects the current version (2.5.1). 5 issues were found in earlier versions and fixed, the latest disclosed on Apr 21, 2026.
Checked 4 days ago against the WPVulnerability database, for version 2.5.1.
How it’s looked after
- Last release
- May 17, 2026 (5 months ago)
- Releases in the last year
- 4
- Tested up to
- WordPress 7.0.8
- Active installs
- 6K+
5 known vulnerabilities
- 1 high
- 3 medium
- 1 not rated
None affects the current version.
Disclosed each year
- 20231
- 20242
- 20262
Every known vulnerability in Chatbot for WordPress by Collect.chat ⚡️
Newest first, with any that affect the current version at the top.
Fixed in 2.5.0 · CVE-2026-40765 · Apr 21, 2026 · Wordfence
Fixed in 2.4.9 · CVE-2026-0736 · Feb 13, 2026 · Wordfence
Fixed in 2.4.4 · CVE-2024-6498 · Jul 15, 2024 · Wordfence
Fixed in 2.4.2 · CVE-2024-30436 · Mar 28, 2024 · Wordfence
Fixed in 2.4.0 · CVE-2023-5691 · Nov 24, 2023 · Wordfence
Questions about Chatbot for WordPress by Collect.chat ⚡️’s security
Is Chatbot for WordPress by Collect.chat ⚡️ safe to use?
No known vulnerability affects its current version. Earlier versions had issues that are now fixed, so keep Chatbot for WordPress by Collect.chat ⚡️ updated: most attacks target sites that haven’t updated.
Does Chatbot for WordPress by Collect.chat ⚡️ have known security vulnerabilities?
None that affect the current version. WPVulnerability’s database lists 5 older issues, fixed in earlier versions, so keep Chatbot for WordPress by Collect.chat ⚡️ up to date.
Is Chatbot for WordPress by Collect.chat ⚡️ still maintained?
Yes. Its last release was 5 months ago. No support threads were opened in the last two months.
Is Chatbot for WordPress by Collect.chat ⚡️ compatible with the latest WordPress?
It’s tested up to WordPress 7.0.8, one version behind the current 7.1. Authors often update this line a few weeks after a release.
Hear about the next one first
Track your plugin on TrackWP and get an alert when a new vulnerability affecting it is published. Every plan has it, the free Starter too; Boost and FullCharge email it at once.
Start freeVulnerability data from WPVulnerability (CC0), which gathers records from CVE, Wordfence, Patchstack and WPScan. A clean record isn’t a guarantee: keep every plugin updated.