Browser extensions starting with W
411 browser extension security reviews, listed by name.
Weflow
Weflow
LowWeflow ships production bundles with a hardcoded Sentry auth token embedded in its JavaScript.
WhaZiper - Bulk WA Message Sender Software
Wapitalia
LowWhaZiper sends your Google profile email and WhatsApp number to whaziper.com during first-run setup.
WhackyBeanz Extension
Vexilar
CleanWhackyBeanz Extension copies calculator-page localStorage into local extension storage for character profiles.
Whale - Product Importer
WeSales
MediumWhale - Product Importer sends AliExpress product-page URLs to dsreviews.net and injects the returned affiliate iframe.
What's The Sound
imai
CleanWhat's The Sound records detected audio URLs and tab titles while monitoring is enabled.
WhatSender PRO - WhatsApp Bulk Sender
emailsoft
MediumWhatSender PRO sends URLs from outgoing WhatsApp messages to third-party link-preview servers.
Whatnot Spy | Resellbot
Resellbot
LowWhatnot Spy | Resellbot sends Whatnot page URLs and page metadata to Google Analytics.
WhatsApp Direct Message
Giuliano Marinelli · Social & Communication
CleanWhatsApp Direct Message sends selected or entered phone numbers to WhatsApp and saves them in Chrome sync storage.
WhatsApp Status Downloader
rahul
CleanWhatsApp Status Downloader sends your Chrome profile email and WhatsApp account number to its backend.
WhatsApp Translator
CodeCode.Me
CleanWhatsApp Translator sends WhatsApp message text to the selected translation provider when translation features run.
WhatsApp Web Side Panel - Tabbee
Tabbee SidePanel Extensions
LowWhatsApp Web Side Panel - Tabbee removes WhatsApp frame protections when loading web.whatsapp.com.
WhatsApp to PDF Exporter
OnlineGratis.net
CleanWhatsApp to PDF Exporter captures the visible WhatsApp Web chat area and stores a screenshot locally for PDF export.
WhatsApp 当地时间显示器
CleanWhatsApp 当地时间显示器 reads WhatsApp Web chat names and phone-like identifiers to show local time zones.
WhatsBooster
Vitor Henckel · Social & Communication
CleanWhatsBooster reads WhatsApp group member phone numbers and saves them for local CSV, XLS, or TXT export.
Whisk 자동화 도구 by 엔라이트랩
semypak
LowWhisk 자동화 도구 by 엔라이트랩 includes a recoverable monthly popup password in its shipped JavaScript.
Whiteboard
Sunny Guan
MediumWhiteboard inserts Heroku-hosted story media and link fields into UTD Blackboard pages without sanitizing them.
Who Wrote That?
Wikimedia Foundation, Community Tech Team
CleanWho Wrote That? sends the current Wikipedia page name, language, and revision ID to wikiwho.wmcloud.org after activation.
Wibki / Your key to the Web
All My Faves
CleanWibki / Your key to the Web sends saved bookmark URLs and page titles to api.allmyfaves.com.
WikiTree BEE
shogen.apps
CleanWikiTree BEE sends scraped genealogy record fields and citation text from supported pages to WikiTree endpoints.
Wikipedia Add A Fact
Wikimedia Foundation · Education
CleanWikipedia Add A Fact sends selected page text, page context, and a hashed user ID to Toolforge when users verify a fact.
Wild Life
S o r t i g a
LowWild Life sends new-tab searches to a remotely configured search destination.
Windows Update
Tyndale Hannan · Fun
CleanWindows Update opens a local fake update page and makes the active browser window fullscreen.
Wise Agent Add Contacts
Wise Agent · Communication
CleanWise Agent Add Contacts sends selected Gmail contact details to Wise Agent when the user adds a contact.
WiseReviews ‑ Shopify Reviews Importer
The Better Apps
CleanWiseReviews imports ecommerce reviews and sends the page URL and scraped review details to WiseReviews.
Wonder AI - Your GPT writing assistant
Wonder AI
MediumWoningstats
Woningstats.nl
LowWoningstats sends viewed Funda listing addresses to api.pdok.nl to resolve property location data.
WordPress Plugin & Theme Detector
ArrayStory Limited
CleanWordPress Plugin & Theme Detector sends the active WordPress site's hostname to ip-api.com over HTTP.
WordPress Theme Detector
idevext
MediumWordPress Theme Detector sends the active site's hostname and IP address to ip-api.com over HTTP.
WriteMe.ai - AI powered writing assistant
turboanchor
MediumWriteMe.ai reads REACT_TOKEN_AUTH tokens from pages and sends them to apiv2.writeme.ai.
Writely
anchao951220
CleanWritely sends selected page text to its Writely/OpenAI chat endpoint for AI responses.
Writeseed - Smart AI Assistant
Writeseed
LowWriteseed - Smart AI Assistant writes the same extension user ID into page storage on every HTTP(S) site.
Writetone: AI Writing Assistant & Grammar Fix
Writetone · Communication
CleanWritetone sends text you enter in its popup to Writetone LLM endpoints when you request writing help.
weReaDou
sorosliu
CleanweReaDou sends Douban book titles to WeRead search when you view Douban book pages.

WordReference
Firefox user 13527658
CleanWordReference sends selected text to www.wordreference.com when you use its context-menu translation shortcut.
Wall Smash Game
Game Anything · Games
LowWall Smash Game sends popup page-view details and a persistent client ID to Google Analytics when the popup loads.
Whatfix for Compass
Whatfix Inc
CleanWhatfix for Compass captures page DOM content and cookie-accessible assets and uploads them to Whatfix's own servers during Studio authoring sessions.
Word Search Game
Game Anything
LowWord Search Game sends popup page titles, popup URLs, and persistent session identifiers to Google Analytics.

Web for Telegram
OinkAndStuff
LowWeb for Telegram renders a remote message from its developer's server into the page without sanitizing it on first display.
Workstation for Discord
Winfy
MediumWorkstation for Discord has no local Discord client; every button loads a third-party site, winfy.net, to handle the Discord session.
WhatsApp AI
DevFortress Inc · Communication
CleanChatGPT AI for WhatsApp sends your chat text and the other person's name to MailMagic's servers to draft an AI reply.
WATransChat:不懂外语,做外贸必备WhatsApp翻译工具
zla5201314
CleanWATransChat sends WhatsApp message text to translation providers for inline and send-time translation.

Web for Google Messages
OinkAndStuff
LowWeb for Google Messages polls the developer's own server on startup and can show OS-level notifications with a developer-controlled link.

windmill
windmillvpn
LowWindmill base64-encodes the user's proxy account password into a request header sent to a remote-configured server every 5 minutes.
WA Privacy
So Lets Talk Digital
MediumWA Privacy reads your WhatsApp number and sends it with a persistent device ID to a third-party analytics endpoint on every logged event.
Web to AI Agent
Markus Pullmann
CleanWeb to AI Agent captures selected page DOM and metadata and delivers it to the clipboard or local AI-agent targets.
World to PDF Conversion
admin
HighWorld to PDF Conversion injects code into every page you visit and runs JavaScript sent back by a lookalike domain.
WealthPipe
ryanwfiorini · News & Weather
MediumWealthPipe sends the full URL of every site you visit or switch to to its own server, with no opt-in.
WeVideo
WeVideo
CleanThis app lets users edit and publish videos from a Chromebook or other supported devices.

WireGuard
WireGuard Development Team
CleanThis extension manages and uses WireGuard VPN tunnels.
Wixie
CleanStudents create digital storybooks and slideshows with drawing, text, clip art, and voice recording tools.
Wolfram|Alpha (Official)
web@wolframalpha.com
CleanAccess Wolfram|Alpha queries from Chrome with a toolbar button, omnibox shortcut, or right-click menu.