Typebot

Typebot has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2021 and 2024; all 2 are fixed as of September 2026. Their average CVSS score is 6.0, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 2 of the records (100%).

Every one of the 2 issues recorded for Typebot has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each. Typebot is installed on roughly 3,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.8.8.

Strategic Overview

Avg CVSSMedium

6.0/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Typebot vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2024-38757

Typebot <= 3.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

2 records


2024-07-11 00:00	Typebot <= 3.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting Typebot <= 3.6.0	`CVE-2024-38757`	6.4 Medium	LVT-tholv2k	Yes
2021-11-29 00:00	Typebot \| Build beautiful conversational forms < 1.4.3 - Authenticated (Admin+) Cross-Site Scripting Typebot < 1.4.3	`CVE-2021-24902`	5.5 Medium	Mansi Singh	Yes

Showing 1–2 of 2 reports

Plugin Profile

Latestv4.4.0

Typebot

Author

Baptiste

5.0(6)

100/100

Last Updated

2026-04-08 (5mo ago)

Active Installs

3,000+

Downloads

46,275

Requires WP

5.0+

Requires PHP

Tested up to

WP 6.8.8

Created

2021-02-22 (6y ago)

Collect 4x more responses with conversational apps using Typebot. 👉 Build beautiful conversational apps and easily embed them in your WordPress site. 👉 Typebot helps you publish chat apps that feel native to your product and it provides the best experience for your users. 👉 With Typebot, you collect the answer as soon as the user answers the first question. You get to know exactly when the user tends to drop your form. This plugin relies on Typebot which is a tool that allows you to create conversational forms and directly integrate them on your WordPress site. 💁‍♂️ More information about Typebot: https://www.typebot.io/ 👨🏼‍💻 How Typebot handles collected data: https://www.typebot.io/privacy-policy Short Description Create advanced chat experiences without coding

View on WordPress.org