Elizaibots

Elizaibots has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2025; none of them are fixed as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10. 2025 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Scripting, behind 2 of the records (100%).

None of the 2 issues recorded for Elizaibots have a published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.

All of these findings were reported by Kévin Mosbahi (Mika). Elizaibots is installed on roughly 10 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 4.4.34.

Strategic Overview

Avg CVSSMedium

6.4/ 10

Patch Coverage0%

Open

Fixed

Get automatic notifications for all Elizaibots vulnerabilities before they are exploited.

Most severe open issueCVSS 6.4CVE-2025-49893

Elizaibots <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

2 records


2025-08-16 00:00	Elizaibots <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting Elizaibots <= 1.0.2	`CVE-2025-49893`	6.4 Medium	Kévin Mosbahi (Mika)	No
2025-08-16 00:00	Elizaibots <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting Elizaibots <= 1.0.2	`CVE-2025-15659`	6.4 Medium	Kévin Mosbahi (Mika)	No

Showing 1–2 of 2 reports

Plugin Profile

Latestvv1.0.2

Elizaibots

Author

liseperu

5.0(1)

100/100

Last Updated

2016-02-01 (11y ago)

Active Installs

10+

Downloads

5,721

Requires WP

3.3+

Requires PHP

Tested up to

WP 4.4.34

Created

2013-09-16 (13y ago)

Embed a chatbot on your blog to allow readers to talk to a Program O chatbot. When submitted an ajax request is fired to http://api.program-o.com/v2.3.1 to retrieve a response to display in the chat div. You can talk to 3 chatbots; Shakespearebot Program O Carlos (a very funny comedy bot) All requests are handled via ajax so there is no nasty page reloading. This is a very simple and clean plugin. Get your readers chatting to a chatbot and keep them on your site for hours. If you have your own installation of Program O you can link to your own bot with a very simple URL change in the code so you can talk to your own personal chatbot. Demo If you would like to see a demo of this plugin just click here… Demo Elizaibots Arbitrary section 1 Demo If you would like to see a demo of this plugin just click here… Demo Elizaibots Program O This plugin is uses the Program O API to receive response from a chatbot. Program O is a open source, free to use, PHP, MySQL and AIML chatbot that has been around since 2008. You can download your own chatbot and one click install to add your own input and output responses. There is an active community, amazing support and a wonder git repo for you to follow. Just check out the Program O website for more information or jump straight to the GitHub repository to download.

View on WordPress.org