Browser extensions starting with C
907 browser extension security reviews, listed by name.
Checker Plus for Google Drive™
JasonSavard.com · Workflow & Planning
CleanAccess and manage Google Drive files from a browser button without opening the full Drive page.
ChemDraw Web Clipboard
Revvity Signals Software, Inc.
MediumChemDraw Web Clipboard bridges clipboard requests from any webpage to a local native messaging host on the user's machine.
Chrometana Pro
Marc Guiselin · Tools
CleanThis extension redirects Cortana and Bing searches in Chrome to a user-selected search engine.
Chromium browser automation
saroyanm · Developer Tools
LowChromium browser automation records user interactions including password field values and replays them by executing caller-supplied scripts in page context.
Cloaq - Location Guard & Locale Switcher
www1z4rd · Privacy & Security
LowCloaq requests IP geolocation from ip-api.com over HTTP whenever its popup opens.
Clutter Free
Aditya Bhaskar · Functionality
LowClutter Free prevents duplicate tabs and transmits user IP addresses to geoplugin.net over unencrypted HTTP when the premium page is opened.
Comic Book Reader for Google Chrome™
Useful Software Apps
CleanThis extension opens comic book files such as CBR, CBZ, and PDF in Chrome.
Companion Window
Robert Golderbine · Tools
MediumCompanion Window sends the full URL of pages you visit plus a persistent user ID to GiveFreely's analytics server when its review prompt fires.
Complexity | Perplexity AI Supercharged
pnd280 · Tools
CleanAdds model switching, conversation export, customization, and interface enhancements to Perplexity AI.
Compress PDF
Zonepdf Inc.
CleanCompresses PDF files online to reduce their file size for uploads, email attachments, or archiving.
Connecteur de sécurité banque à distance
Turbo S.A - Groupe BPCE
LowConnecteur de sécurité banque à distance bridges BPCE-group banking pages to a local certificate-signing application via native messaging.
Copy As Plain Text
Yubi
CleanCopies selected web text to the clipboard without formatting.
Copycat Ads - AdSpy for Ad Library
copycat.apps
CleanCopycat Ads sends Facebook Ads Library search, ad, and advertiser data to its backend during tool use.
Counting Characters - #1 Letter & Word Count
Mohit Harjai · Accessibility
CleanCounting Characters sends the active tab URL to countingcharacters.com when users click its webpage word-count link.
Create Link
ku · Social & Communication
MediumCreate Link executes user-defined JavaScript in the content script context on every page visited when a custom format filter is set.
Cross-border Product Collection
BigSeller
CleanCross-border Product Collection scrapes Shopee product listings and forwards product data and page URLs to BigSeller's servers.
Crunchyroll Speeder: adjust playback speed [QVI]
Awesome Extensions · Entertainment
MediumCrunchyroll Speeder exchanges your Crunchyroll session cookies for an OAuth token and reads your account, history, and subscription data.
Cursorland - Custom Cursor for Chrome
Oleksii Semeniuk · Fun
LowCursorland applies user-selected custom cursors across all visited pages using SVG images fetched from cursor-land.com.
Theme & Color Changer for YouTube - Colorize YouTube
Intergalactic.Space.Star · Fun
LowTheme & Color Changer for YouTube opens promotional tabs on install and every update without user interaction.

Custom Search Tool
Custom Search Tool
CleanCustom Search Tool overrides the default search engine and sends all user searches to Yahoo with hardcoded affiliate tracking parameters.

City Scapes
Syndic8
LowCity Scapes sends every new-tab search query to a third-party monetized search proxy instead of your browser's default search engine.

CS2 Trader - Steam Trading Enhancer
Gergely Szabo
LowCS2 Trader scrapes Steam API keys and access tokens from Steam pages on install and sends item inspection data to its developer backend.
C2 Password
Synology.com · Privacy & Security
CleanC2 Password reads form credentials on all sites, auto-fills stored logins, and disables Chrome's built-in password saving.
CFCA CertEnrollment.SRCB Extension
developer.srcb
MediumCFCA CertEnrollment.SRCB Extension bridges SRCB bank pages to locally installed native messaging hosts without validating the host name.
CFCA CryptoKit.BOB Extension
lingshouyingyong
CleanEnables CFCA U-key certificate authentication for Bank of Beijing personal online banking.
CFCA CryptoKit.SRCBSCF Extension
developer.srcb
LowCFCA CryptoKit.SRCBSCF Extension bridges CFCA-affiliated banking pages to a local native messaging host for cryptographic operations.
CFCA WebSeal.SRCB Extension
developer.srcb
LowCFCA WebSeal.SRCB Extension bridges bank web pages to local native security software via native messaging, accepting the target host name from the calling page without validation.
CORS Unblock
Jamsheer · Developer Tools
CleanCORS Unblock rewrites CORS response headers across all sites when its unblock mode is enabled.
CSP Evaluator
CleanThis extension helps developers evaluate the strength of Content Security Policy settings.
Cambridge Dictionary Lookup
Nam Nguyen Hoai · Education
CleanCambridge Dictionary Lookup sends selected text to Cambridge Dictionary when you choose its lookup menu item.
Cats Fan
contact@softzpub.com
MediumCats Fan sends new-tab search queries to cats.catsfanext.com with an affiliate tracking ID.
Change Timezone (Time Shift)
Yubi · Tools
MediumChange Timezone (Time Shift) accepts timezone-override commands from any page, with no check on who sent them.
ChatGPT For Chrome - ChatGPT assistant
hamingoearnest
CleanChatGPT For Chrome sends search-result queries to OpenAI to generate its sidebar answers.
ChatGPT Optimizer - Boost Your AI Workflow
Vásconez Gerlach · Workflow & Planning
LowChatGPT Optimizer sends user-selected page text to ChatGPT and user-entered URLs to productivity.rocks.
ChatGPT4Gmail
Developer · Workflow & Planning
LowChatGPT for Gmail sends your Gmail account email, timezone, and selected draft text to Salesgear AI endpoints.
Chatslator: Livestream Chat Translator
0xHPZ
CleanChatslator sends Kick, Twitch, and YouTube live chat text to Google Translate for real-time translation.
CW_QuickInfoInput
asano
LowChatwork Quick Info Input injects Google Fonts into ChatWork pages, sending referrer and IP metadata to Google.
CheaperThere | Cheap Flight & Hotel Deals
CheaperThere · Travel
CleanCheaperThere sends selected flight and hotel itinerary details from supported booking sites to its pricing API.
Chrome Audio Capture
PreppHint · Accessibility
CleanChrome Audio Capture records the active tab's audio after a popup request and saves the recording locally.
City Bus Driver Car Game
https://gamebol.com · Games
LowCity Bus Driver Car Game opens a promotional publisher webpage on install and redirects to it on uninstall.
City Scapes
Syndic8
HighCity Scapes sets your browser's default search engine to landscape-extensions.com, an unbranded third-party search proxy.
ClassroomGo - AI無邊際 (老師)
雲動教育科技
MediumClassroomGo embeds a hardcoded YOURLS API signature in its bundle, allowing any party with source access to create short URLs on gtogo.to.
Classwork Zoom for Google Classroom
Eric Burton
MediumClasswork Zoom can upload Google Classroom and Drive API responses when server-controlled logging is enabled.
Claude Limit & Usage Tracker + Fable 5 - ClaudeKarma
Jean-Rémi Larcelet-Prost
LowClaude Fable 5 Limit & Usage Tracker - ClaudeKarma sends daily health counters, version, OS, and language to TokenKarma.
Claude QoL - Export, Fork, Search, and more
lugia19
LowClaude QoL lets scripts on Claude pages read its stored text-to-speech provider API key through a postMessage settings bridge.
Claude Tuner - Claude·ChatGPT·Gemini Tracker
Chaehyun
MediumClaude Tuner sends snapshot submissions to its backend using a shared fallback API key.
Cloud VPN
s-cloud-team
CleanCloud VPN sends the first page URL visited on each host to vpnincloud.com before the VPN connects.
Colorway: Eyedropper & Color Picker Tool
Colorway
LowColorway is a color-picker that, once opened on a tab, accepts page messages with no origin check to capture a screenshot or write its storage.
Compras online Travel Club
Travel Club
CleanCompras online Travel Club sends your saved Travel Club card number to Travel Club when you save it.
Conductor for Chrome - SEO Extension
chromeextension · Tools
LowConductor for Chrome reports every page URL you visit to its background worker and sends on-page SEO scrapes to Conductor for signed-in users.
Contact Saver for WhatsApp - Export & Backup
lazytechofficial · Tools
CleanContact Saver for WhatsApp reads every contact, group member, and label from WhatsApp Web and exports the dataset to a local CSV/XLSX file.
Convert HEIC to JPG
convertheic2jpg
LowConvert HEIC to JPG injects a hidden onlineapp.pro paywall iframe into every page and runs a leftover dev hot-reload client on localhost.
Country Flags & IP Whois
yokris.dev
LowCountry Flags & IP Whois loads a GeoLite2 database from a CDN without integrity checks to resolve page IP addresses to countries.
Crunchbase - B2B Company & Contact Info
Crunchbase · Tools
LowCrunchbase sends LinkedIn parser errors, including page DOM snippets and URL context, to Sentry.
CM Cursor
Cute Cursors · Entertainment
CleanMouse Cursor - Custom Cursor injects cursor-image URLs from cutecursors.com into every matched page.
CxAppChrome
SAP SE
CleanSAP Build Process Automation extension captures page content, cookies, and screenshots and sends them to the local SAP desktop agent.
Cashback.co.il - cashback & coupons
www.cashback.co.il
Highcat-catch
Gundy
Lowcat-catch lets any HTTP(S) page send background commands that can turn on auto-download and queue media URLs.
color picker for website - monster pick
andrewlevin144 · Art & Design
Lowcolor picker for website - monster pick contacts colorpicker.monster on install/update and can open a server-provided tab.

Eno® from Capital One®
Capital One
LowEno from Capital One scans page structure on all sites and sends URL, referrer, and session identifiers to Capital One analytics.