Chatbot with IBM watsonx Assistant
Chatbot with IBM watsonx Assistant has one disclosed vulnerability in the WordSec catalog, all reported in 2020; it is fixed as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for Chatbot with IBM watsonx Assistant has a vendor fix available, so running the current release closes it.
All of these findings were reported by Cary Hooper. Chatbot with IBM watsonx Assistant is installed on roughly 400 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.7.7.
CVE-2020-7239Chatbot with IBM Watson < 0.8.21 - Cross-Site Scripting
Read the full analysisVulnerability Records

Chatbot with IBM watsonx Assistant
Author
IBM Skills Network
Add this plugin to your site and let IBM watsonx Assistant help you better support your customers. In a few minutes, you can train watsonx Assistant to answer frequently asked questions, provide useful information and help them navigate your website. And if they want to talk to a human, the plugin can connect them to a real operator via telephone. This plugin uses IBM watsonx Assistant (formerly Watson Conversation) on the IBM Cloud. You can use it with an IBM Cloud Lite account free of charge and without a need to provide a credit card. Currently supported features: Take advantage of Rich responses to add images, pauses, and clickable responses to your chatbot Use user’s account data such as name in chatbot dialog Easy VOIP calling powered by Twilio for users to contact a real person if they wish Simple plugin setup to get your watsonx Assistant chatbot available to users as soon as possible Control usage of the watsonx Assistant service directly from the plugin settings page Choose the pages and posts you want the visitors to see the chat bot on Customize the appearance of the chat box to your preference
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C