Title: wabbiyo Author: softurious Published: November 2, 2026 Last modified: November 2, 2026 --- Search plugins ![](https://ps.w.org/wabbiyo/assets/banner-772x250.png?rev=3779067) ![](https://ps.w.org/wabbiyo/assets/icon-256x256.png?rev=3779067) # wabbiyo By [softurious](https://profiles.wordpress.org/ananduse2000/) [Download](https://downloads.wordpress.org/plugin/wabbiyo.1.2.124.zip) * [Details](https://wordpress.org/plugins/wabbiyo/#description) * [Reviews](https://wordpress.org/plugins/wabbiyo/#reviews) * [Installation](https://wordpress.org/plugins/wabbiyo/#installation) * [Development](https://wordpress.org/plugins/wabbiyo/#developers) [Support](https://wordpress.org/support/plugin/wabbiyo/) ## Description wabbiyo is a free WhatsApp inbox plugin. Everything in it works fully, for as long as you use it, with no payment, no time limit and no cap on WhatsApp numbers: * **Team Inbox** – WhatsApp conversations land in a two-pane inbox for the site’s administrators. Reply with text, images, video, audio and documents, add internal notes, set a status (open, pending, snoozed or resolved) and see unread counts. * **Chat widget** – a WhatsApp chat button for your website; visitors’ chats arrive in the Team Inbox. * **Contacts** – everyone who messages you, with their conversation history, tags and opt-out status, and a per-contact data export. * **Settings it needs** – your WhatsApp Cloud API connection (the access token is stored encrypted), the webhook URL and verify token to paste into Meta, email, regional and data-retention settings. * **Overview and Setup Guide** – today’s conversations at a glance, and a step- by-step guide to connecting your number. * **Connection check** – twice a day the plugin asks Meta whether your access token still works, and emails the site’s admin address if it has stopped. **Replies within 24 hours.** WhatsApp allows replies for 24 hours after a customer’s last message. After that, the customer has to write again before you can reply. This plugin does not send message templates. **No account and no licence key.** Nothing asks you to register: the plugin opens straight into the app. wabbiyo Pro is a separate plugin that adds WhatsApp automation with the Flow Builder, message templates, broadcasts, WooCommerce notifications and cart recovery, an AI chatbot and more. The “Upgrade to Pro” page lists what it adds and links to wabbiyo. com. **Source code.** The JavaScript and CSS source is included; see the FAQ “Where is the source code of the JavaScript and CSS?” for how to build it. WhatsApp is a trademark of WhatsApp LLC. wabbiyo is not affiliated with or endorsed by WhatsApp or Meta. ### External services These are the outside services this plugin contacts, what it sends, and when. The chat widget talks to your own site, apart from Gravatar pictures (item 4) and WhatsApp links (item 5). Links to wabbiyo.com, such as those on the Upgrade to Pro page, open in your browser; the plugin itself sends nothing there. **1. WhatsApp Cloud API (Meta)** – `graph.facebook.com`. This is the plugin’s core function and cannot be turned off. Sent: your access token and WhatsApp account IDs; the recipient’s phone number and the content of every message and media file you send; and your Meta App ID and secret. When: on connecting or testing the connection, twice a day to check the token still works, each time you send a message or open received media, and when you run the webhook check. Meta delivers incoming messages to your site, and received media is downloaded from the address Meta gives for it, on Meta’s media hosts (`lookaside.fbsbx.com`, `fbcdn.net`, `whatsapp.net`). When you send media by link (a web address instead of an upload), your site downloads images from that public address and uploads them to Meta; for other files Meta fetches the address itself. [Terms](https://www.whatsapp.com/legal/business-terms) – [Privacy](https://www.whatsapp.com/legal/privacy-policy) **2. Facebook JavaScript SDK (Meta)** – `connect.facebook.net`. Loaded in your browser only when you start “Sign up with Meta” in Settings > WhatsApp, after saving your own Meta App ID and Config ID; never otherwise. Your App ID and Config ID are passed to Meta, which may set cookies. [Terms](https://developers.facebook.com/terms/)– [Privacy](https://www.facebook.com/privacy/policy/) **3. Your SMTP relay (optional)** – off until you switch it on under Settings > Email, and never used while another mail plugin sends your email. Then all email this site sends goes through the relay host you enter, with the username and password you give it, under your email provider’s terms. **4. Gravatar (Automattic)** – `gravatar.com`. When an agent has no profile photo uploaded in wabbiyo, the Inbox and the chat widget show their Gravatar. The picture loads in the viewer’s browser, chat widget visitors included, which sends Gravatar their IP address and a hash of the agent’s email. Not shown when Settings > Discussion > Show Avatars is off, nor in the widget before a visitor gives any consent you require. [Terms](https://gravatar.com/tos) – [Privacy](https://automattic.com/privacy/) **5. WhatsApp click-to-chat** – `wa.me`. Only when a visitor clicks the chat widget’s WhatsApp button: their browser opens wa.me with your number and any message they typed. [Terms](https://www.whatsapp.com/legal/terms-of-service) – [Privacy](https://www.whatsapp.com/legal/privacy-policy) ### Privacy * **No AI or CRM data sharing** – this plugin sends no contact or message data to an AI provider or to any lead-integration service. * **Configurable data retention** – `compliance.retention_months` (24 by default) purges contacts and their data after that much inactivity. Set it to `0` to keep data indefinitely. * **Export and erase** – the plugin registers with WordPress’s Tools > Export Personal Data and Erase Personal Data, matched by email. Erasing a contact also erases its internal notes and saved media files. * **Encrypted media** – media files are stored encrypted. Back up the key: wp wabbiyo media_key show. * **Chat widget** – keeps a visitor’s chat and a random visitor ID in their browser. Button views and clicks are logged on your site with that visitor ID (only after any consent you require), the agent clicked, the page address, referrer, UTM tags, device type, language and country (from Cloudflare’s header, if present), and deleted after 90 days. * **Privacy policy text** – suggested text for your policy is in WordPress’s privacy policy guide (Settings > Privacy). ## Installation 1. Install from **Plugins > Add New**, or upload the plugin zip there. 2. Activate the plugin through the “Plugins” menu. 3. Open **wabbiyo > Setup Guide** and follow its steps: save your Meta App ID and App Secret, connect your number (Meta’s guided sign-up, or a permanent access token and phone number ID), and save a verify token. 4. In your Meta app, under WhatsApp > Configuration, paste the Callback URL and verify token, and subscribe to the “messages” field. ## FAQ ### Do I need to pay or buy a licence? No. Every feature in this plugin is free, with no time limit and no trial period, and it takes no licence key. A licence is only for wabbiyo Pro, a separate plugin, and is entered there. ### Do I need an account? No. For help, use this plugin’s support forum on wordpress.org; Settings > Support links to it. ### Why was my reply not sent? WhatsApp allows replies for 24 hours after a customer’s last message. If the customer last wrote earlier than that, the Inbox says so and sends nothing; you can reply again once they write to you. ### Will the plugin show me ads? On its own screens, all for wabbiyo Pro: the Upgrade to Pro menu item and page; and the Setup Guide’s “More in wabbiyo Pro” row, which opens the Upgrade to Pro page. After your first 100 messages, one notice (also on the Plugins screen) lists what wabbiyo Pro adds and links to its prices on wabbiyo.com; dismissed, it does not come back. ### What happens to my data when I delete the plugin? It is kept, unless you switch on Settings > Compliance > “Delete all wabbiyo data when the plugin is deleted”. Deactivating never deletes anything. ### Is my access token safe? Yes – it is encrypted at rest with AES-256-GCM and is never displayed back. ### Where is the source code of the JavaScript and CSS? In the plugin, and `dist/` is built from it without minifying. `admin/src/` is the admin app (React 18) and its CSS; `widget/src/` is the chat widget and its CSS. The build setup is `package.json`, `package-lock.json`, vite.admin.config.js and` vite.widget.config.js`: with Node.js 18, 20 or later, run `npm ci` and then `npm run build` in the plugin folder to rebuild dist/. `dist/admin/chunks/vendor-react-*. js` is React and React DOM 18.3.1 as published on npm (source: https://github.com/ facebook/react); the fonts come from the `@fontsource-variable` npm packages. PHP dependencies (`vendor/`) come from `composer.json`: `composer install --no-dev`. ### Why do some internal names say “trial”? The plugin’s tables, options, REST routes and admin page addresses start with watsapex_trial or `watsapex-trial`, names kept from its first version so existing sites keep their data and webhook URL. Nothing in it is a trial or expires. ## Reviews There are no reviews for this plugin. ## Contributors & Developers “wabbiyo” is open source software. The following people have contributed to this plugin. Contributors * [ softurious ](https://profiles.wordpress.org/ananduse2000/) [Translate “wabbiyo” into your language.](https://translate.wordpress.org/projects/wp-plugins/wabbiyo) ### Interested in development? [Browse the code](https://plugins.trac.wordpress.org/browser/wabbiyo/), check out the [SVN repository](https://plugins.svn.wordpress.org/wabbiyo/), or subscribe to the [development log](https://plugins.trac.wordpress.org/log/wabbiyo/) by [RSS](https://plugins.trac.wordpress.org/log/wabbiyo/?limit=100&mode=stop_on_copy&format=rss). ## Changelog #### 1.2.124 * Chat Widget works before WhatsApp is connected; its chats can be read and answered in the Inbox. Wider Overview heatmap. #### 1.2.123 * **New: the chat widget** (wabbiyo > Chat Widget). * Replies are sent only within WhatsApp’s 24-hour window; outside it the Inbox says why and sends nothing. * New: delete all wabbiyo data with the plugin (Settings > Compliance, off by default), and suggested privacy-policy text. * Erasing a contact or conversation also erases its notes and media. * Secrets are stored encrypted; input is checked before it is saved, and responses carry no secrets, paths or database errors. * Language packs translate most of Settings, Contacts, the widget builder and the chat widget; the Inbox and the help pages are mostly in English. * Removed: AI controls, Security settings, team roles and invitations, and buttons that only pointed to wabbiyo Pro. * No licence key or account; Settings > Support links to the wordpress.org forum. The Upgrade page sends no request. Earlier versions were distributed from wabbiyo.com. ## Meta * Version **1.2.124** * Last updated **3 hours ago** * Active installations **Fewer than 10** * WordPress version ** 6.4 or higher ** * Tested up to **7.1.4** * PHP version ** 8.1 or higher ** * Tags * [chatbot](https://wordpress.org/plugins/tags/chatbot/)[whatsapp](https://wordpress.org/plugins/tags/whatsapp/) [whatsapp automation](https://wordpress.org/plugins/tags/whatsapp-automation/) [woocommerce](https://wordpress.org/plugins/tags/woocommerce/) * [Advanced View](https://wordpress.org/plugins/wabbiyo/advanced/) ## Ratings No reviews have been submitted yet. [Your review](https://wordpress.org/support/plugin/wabbiyo/reviews/#new-post) [See all reviews](https://wordpress.org/support/plugin/wabbiyo/reviews/) ## Contributors * [ softurious ](https://profiles.wordpress.org/ananduse2000/) ## Support Got something to say? Need help? [View support forum](https://wordpress.org/support/plugin/wabbiyo/)