Browser extensions starting with C
972 browser extension security reviews, listed by name.

CPH Submit
Divyanshu Agrawal
CleanCPH Submit polls a local companion app and submits saved source code to programming contest sites.

Content Farm Terminator
Danny Lin
LowContent Farm Terminator exposes a web-accessible sandbox that makes credentialed fetches to caller-supplied URLs.

CouponCabin Sidekick - Coupons & Promo Codes
CouponCabin.com
CleanCouponCabin Sidekick sends merchant page URLs, coupon codes, and order totals to CouponCabin when applying coupons.

Cross Domain - CORS
Mai Tan
CleanCross Domain - CORS rewrites response headers so non-credentialed cross-origin reads are broadly allowed.

CF-Predictor
Wsl_F
CleanCF-Predictor sends Codeforces contest IDs and contestant handles to cf-predictor.wasylf.xyz.
C2PA Content Credentials
Digimarc Labs
CleanC2PA Content Credentials sends resized page images to Digimarc SBR when watermark checking is enabled.
C3C FBState Utility
hoangquangtuong
CleanC3C FBState Utility reads Facebook authentication cookies into fbstate JSON and can replace them from imported files.
CANVO - Advanced Image Editor
CA · Household
LowCANVO - Advanced Image Editor opens an install page that embeds a remote HTTP iframe from canv3app.chrome-app-ext.online.
CCBrowser by Noves
LowCCBrowser by Noves sends a bundled Noves API auth secret with Canton API requests.
CF FetchCodes
sayanpauldeveloper
CleanCF FetchCodes imports Google Fonts when it injects its Codeforces problem-page stylesheet.
CFCA CertEnrollment SMB Extension
smb
CleanCFCA CertEnrollment SMB Extension lets approved Suning Bank pages relay requests to a local native messaging host.
CFCA CertEnrollment.ESUNBank Extension
esunbankiosdeveloper
CleanCFCA CertEnrollment.ESUNBank Extension lets approved ESUN Bank pages connect to and message local native apps.
CFCA CertEnrollment.Hebgyl Extension
Hebgyl
LowCFCA CertEnrollment.Hebgyl Extension lets allowed websites choose a native messaging host and send arbitrary JSON to it.
CFCA CryptoKit.CFAE Extension
北京金融资产交易所
CleanCFCA CryptoKit.CFAE Extension lets allowlisted external sites invoke its native messaging bridge.
CFCA CryptoKit.ESUNBank Extension
esunbankiosdeveloper
CleanCFCA CryptoKit.ESUNBank Extension relays messages from ESUN Bank pages to a local native messaging host.
CFCA CryptoKit.HANABANK Extension
hanacnchannel
LowCFCA CryptoKit.HANABANK Extension lets allowed Hana Bank pages send payloads to a selected native messaging host.
CFCA CryptoKit.SSIB Extension
spd-svbank
CleanCFCA CryptoKit.SSIB Extension lets approved SSIB and localhost pages connect to a native messaging host.
CFCA CryptoKit.sge Extension
SGE
LowCFCA CryptoKit.sge Extension lets allowed SGE sites choose a native messaging host and send it funcInfo messages.
CFCA MessageEncryption.SGE Extension
SGE
CleanCFCA MessageEncryption.SGE Extension lets allowed SGE and CFCA sites relay selected messages to a native app.
CFCA SecEditCtl.HANA Extension
hanacnchannel
LowCFCA SecEditCtl.HANA Extension lets HanaBank pages relay messages to a native messaging host.
CFCA SecEditCtl.SSIB Extension
spd-svbank
CleanCFCA SecEditCtl.SSIB Extension lets approved bank and localhost pages relay messages to a native CFCA host.
CFCA SecEditCtlAdv.ICBC Extension
icbcmobilebanking
LowCFCA SecEditCtlAdv.ICBC Extension lets ICBC web pages send caller-controlled messages to its native bridge.
CG - Claude™ on google™
Singularity Labs
CleanThe extension sends Google search queries to Claude to generate an answer card on results pages.
CMDK - Read Receipts, Split Inbox, Hotkeys & Reminders for Gmail
simplehuman.email
CleanCMDK adds Gmail read receipts by inserting a tracking pixel and saving sent-message metadata.
CNFans helper - RepCartel
LowCNFans helper - RepCartel rewrites CNFans product URLs to use its referral ID.
CNfans Modal Remover
ebhoerger
MediumCNfans Modal Remover rewrites CNFans product and account URLs to 2024 subdomains and adds affiliate ref=56000.
COOKmate
Maadinfo Services · Household
HighCOOKmate sends the active tab's URL and full cookie string to www.cookmate.online when its popup imports a site.
CPI Lens: SAP Integration Suite Inspector
riteekk1997
CleanCPI Lens sends SAP CPI simulator payloads and Groovy scripts to groovyide.com for execution.
CRX Downloader & Reviews Exporter
Reforgeextensions Team
LowCRX Downloader & Reviews Exporter sends download and review-export telemetry with a persistent extension UUID to Alibaba Log Service.
CSDN-猿了个源
CleanCSDN-猿了个源 sends CSDN page and download URLs with your extension token to chatgpt.byabstudio.com.
CSFloat price to Buff price
thebycop
CleanCSFloat price to Buff price sends CSFloat item names and paint details to tradelounge.gg for price lookup.
CSR vs SSR Detector
Kamil Dzieniszewski
MediumCSR vs SSR Detector has no confirmed data-sharing findings in this scanner.
CSS Pully – Font & Color & Style Inspector
bikishovd
CleanCSS Pully collects page image URLs, inline SVG markup, and CSS style metadata on every site.
CST - Coursera Subtitle Translation
lexxai
CleanCST - Coursera Subtitle Translation sends Coursera subtitle text to Google Translate when you translate a video.
CSV Editor
AppsHub.space
LowCSV Editor lets any web page make it open and fetch a page-controlled CSV URL with extension permissions.
CSVifier
aberigle
CleanCSVifier captures active-tab XHR and fetch responses so they can be exported to CSV.
CU Internet Auto Login
Aditya Prabhakar
LowCU Internet Auto Login saves CU portal credentials locally to automate sign-ins.
Cache Cleaner
Evagoon Inc.
MediumCache Cleaner redirects visits to supported shopping sites through embedded affiliate URLs once per day.
Cacher
Cacher
CleanCacher sends saved page selections and code blocks with their page URLs to api.cacher.io.
Calculator
AppGeek · Education
MediumCalculator sends the selected image URL to calculatornow.info when its image context-menu action is used.
Calibre Search
kiwidude.calibre
CleanCalibre Search sends selected page text to a local Calibre native messaging host when you start a search.
Call of Duty Black Ops 6 Live Wallpaper
ovkas · Art & Design
LowCall of Duty Black Ops 6 Live Wallpaper sends shortcut domains to Google's favicon service on the new-tab page.
Call of Duty Ghost Live Wallpaper
Gameograf.com
LowCall of Duty Ghost Live Wallpaper sends user-added new tab shortcut URLs to Google for favicon images.
CallCloud - For Salesloft, Outreach & Hubspot
CallCloud
LowCallCloud sends user/event telemetry to Discord webhooks and identifies HubSpot callers in LogRocket.
Canva Automate
LowCanva Automate copies your Genby token into Canva page localStorage where Canva scripts can read it.
Canvas Final Grade Calculator
Michael Leong · Education
CleanCanvas Final Grade Calculator reads your final grade from SJUSD Canvas when its popup opens.
Canvas GPA Calculator
gavintyho · Education
CleanCanvas GPA Calculator reads Canvas course and grade details and stores calculated GPA data in Chrome sync storage.
CanvasCape
Gabe Abrams
LowCanvasCape loads FontAwesome resources from ka-f.fontawesome.com when launched on the active page.
Canvasgotchi
Zack Wilkinson
CleanCanvasgotchi sends the user-entered Canvas API token to the configured Canvas site while checking assignments.
capcut-template-%E2%96%B7-new-tre
SainiTij · Communication
LowCapCut Template opens the publisher site on install and again after monthly background checks.
Captcha Recognizer
Holey
CleanCaptcha Recognizer sends CAPTCHA images from supported sites to ocr.holey.cc for recognition.
CaptchaAI - Captcha Solver
captchaai.com
LowCaptchaAI - Captcha Solver sends page URLs and captcha challenge details to CaptchaAI for solving.
CarGurus Dealer
CarGurus, Inc.
CleanCarGurus Dealer scans webpages for VINs and sends detected vehicle identifiers to CarGurus pricing APIs.
Cashback Easy: Coupons, Promo Codes & Rewards
cashbackeasy.com · Shopping
MediumCashback Easy reports active tab origins for store matching and sends overlay telemetry to Google Analytics.
CasperDash
CasperDash
LowCasperDash lets any site request the wallet public key and connected-site map through its injected page bridge.
Cassidy
Cassidy
MediumCassidy can send webpage text and selected screenshots to app.cassidyai.com when page messages trigger its bridge.
Catholic Central GPA Calculator
BD
MediumCatholic Central GPA Calculator injects a remote GitHub Pages module into MySchoolApp pages.
Caucasus Auto Tool — Car Calculator for Copart & IAAI
Caucasus Auto
CleanCaucasus Auto Tool sends Copart and IAAI lot identifiers from auction pages to api.apicar.store.
Cede.store
Cede Labs
LowCede.store lets connected web pages ask the extension to open a tab and inject its helper script.
ChadGuard
La Guerre Pièce
LowChadGuard sends blocked or AI-flagged page URLs and a Discord username to chadguard.pythonanywhere.com.