Browser extensions starting with W
441 browser extension security reviews, listed by name.
Wazo extension
Wazo Dev Team
MediumWazo extension sends debug logs with account and server metadata to a remotely configured logging host.
Wazzup for HubSpot
wazzup-developers
CleanWazzup for HubSpot sends HubSpot portal, user ID, and email values to Wazzup access and counter services.
Wealthbox CRM for Chrome
wealthbox
LowWealthbox CRM for Chrome includes hardcoded BrowserStack credentials in its production bundles.
Weather & Time (multi-city)
AlexKataev · News & Weather
LowWeather & Time (multi-city) sends city searches to HERE and saved city coordinates to OpenWeather for forecasts.
Weather Page
weather page
CleanWeather Page sends new-tab search queries to weather-page.xyz.
Web Adblock - Ad Blocker
AdShield
LowWeb Adblock - Ad Blocker sends the active tab URL, browser, and OS to a Google Apps Script support endpoint.
Web ChatGPT.ai
ycfelix1
CleanWeb ChatGPT.ai sends selected page or input text to an AWS API when you use its ChatGPT context-menu overlay.
Web Scrapbook: Text & Image Saver
cho719449
CleanWeb Scrapbook stores saved page titles, URLs, and selected page content in local browser storage.
Web2Markdown - Markdown Web Clipper
刘润泽
CleanWeb2Markdown sends user-selected page content and URL metadata to Notion when saving a clip.
Web2PDF - HTML to PDF Converter
CleanWeb2PDF captures the active tab's page content into local PDF, image, text, or Word downloads.
WebControl
Diego Teuchmann
LowWebControl fetches its tab-blocking policy over plaintext HTTP and applies it to redirect or close matching tabs.
WebCopilot.ai - Use GPT on any input box
webcopilot.ai
CleanWebCopilot.ai sends text marked with ai:...; in editable fields to OpenAI for completion.
WebP and AVIF Highlighter
webp-highlighter
LowWebP and AVIF Highlighter refetches page image URLs with extension permissions to classify their codecs.
WebP to JPG
kanban.my
MediumWebP to JPG sends selected image files and image URLs to a conversion server over cleartext HTTP.
WebP to PNG & JPG Converter - AVIF, GIF
gif.converter.ext
CleanWebP to PNG & JPG Converter sends conversion usage telemetry with a persistent ID to PostHog.
WebStickies
Lawrence Hook
LowWebStickies sends aggregate note-storage counts and login status from its list view to Mixpanel.
WebSync: Generate & Validate Selectors
wsbaser
CleanWebSync: Generate & Validate Selectors forwards the active tab URL to a local WebSync service.
Webpage to PDF by cloudHQ
cloudHQ
CleanWebpage to PDF by cloudHQ sends the active page HTML, URL, title, and metadata to cloudHQ when converting to PDF.
Webpage to Video
GrabzIt Limited
CleanWebpage to Video sends the active tab URL, or local and loopback page HTML, to GrabzIt's conversion API.
Website ranking Traffic & Competitors
ASOTools
CleanWebsite ranking Traffic & Competitors sends the active tab's site to adtargeting.io and aranking.io when its popup opens.
Weflow
Weflow
LowWeflow ships production bundles with a hardcoded Sentry auth token embedded in its JavaScript.
WhaZiper - Bulk WA Message Sender Software
Wapitalia
LowWhaZiper sends your Google profile email and WhatsApp number to whaziper.com during first-run setup.
WhackyBeanz Extension
Vexilar
CleanWhackyBeanz Extension copies calculator-page localStorage into local extension storage for character profiles.
Whale - Product Importer
WeSales
MediumWhale - Product Importer sends AliExpress product-page URLs to dsreviews.net and injects the returned affiliate iframe.
What's The Sound
imai
CleanWhat's The Sound records detected audio URLs and tab titles while monitoring is enabled.
WhatSender PRO - WhatsApp Bulk Sender
emailsoft
MediumWhatSender PRO sends URLs from outgoing WhatsApp messages to third-party link-preview servers.
Whatnot Spy | Resellbot
Resellbot
LowWhatnot Spy | Resellbot sends Whatnot page URLs and page metadata to Google Analytics.
WhatsApp Direct Message
Giuliano Marinelli · Social & Communication
CleanWhatsApp Direct Message sends selected or entered phone numbers to WhatsApp and saves them in Chrome sync storage.
WhatsApp Status Downloader
rahul
CleanWhatsApp Status Downloader sends your Chrome profile email and WhatsApp account number to its backend.
WhatsApp Translator
CodeCode.Me
CleanWhatsApp Translator sends WhatsApp message text to the selected translation provider when translation features run.
WhatsApp Web Side Panel - Tabbee
Tabbee SidePanel Extensions
LowWhatsApp Web Side Panel - Tabbee removes WhatsApp frame protections when loading web.whatsapp.com.
WhatsApp to PDF Exporter
OnlineGratis.net
CleanWhatsApp to PDF Exporter captures the visible WhatsApp Web chat area and stores a screenshot locally for PDF export.
WhatsApp 当地时间显示器
CleanWhatsApp 当地时间显示器 reads WhatsApp Web chat names and phone-like identifiers to show local time zones.
WhatsBooster
Vitor Henckel · Social & Communication
CleanWhatsBooster reads WhatsApp group member phone numbers and saves them for local CSV, XLS, or TXT export.
Whisk 자동화 도구 by 엔라이트랩
semypak
LowWhisk 자동화 도구 by 엔라이트랩 includes a recoverable monthly popup password in its shipped JavaScript.
Whiteboard
Sunny Guan
MediumWhiteboard inserts Heroku-hosted story media and link fields into UTD Blackboard pages without sanitizing them.
Who Wrote That?
Wikimedia Foundation, Community Tech Team
CleanWho Wrote That? sends the current Wikipedia page name, language, and revision ID to wikiwho.wmcloud.org after activation.
Wibki / Your key to the Web
All My Faves
CleanWibki / Your key to the Web sends saved bookmark URLs and page titles to api.allmyfaves.com.
WikiTree BEE
shogen.apps
CleanWikiTree BEE sends scraped genealogy record fields and citation text from supported pages to WikiTree endpoints.
Wikipedia Add A Fact
Wikimedia Foundation · Education
CleanWikipedia Add A Fact sends selected page text, page context, and a hashed user ID to Toolforge when users verify a fact.
Wild Life
S o r t i g a
LowWild Life sends new-tab searches to a remotely configured search destination.
Windows Update
Tyndale Hannan · Fun
CleanWindows Update opens a local fake update page and makes the active browser window fullscreen.
Wise Agent Add Contacts
Wise Agent · Communication
CleanWise Agent Add Contacts sends selected Gmail contact details to Wise Agent when the user adds a contact.
WiseReviews ‑ Shopify Reviews Importer
The Better Apps
CleanWiseReviews imports ecommerce reviews and sends the page URL and scraped review details to WiseReviews.
Wonder AI - Your GPT writing assistant
Wonder AI
MediumWoningstats
Woningstats.nl
LowWoningstats sends viewed Funda listing addresses to api.pdok.nl to resolve property location data.
WordPress Plugin & Theme Detector
ArrayStory Limited
CleanWordPress Plugin & Theme Detector sends the active WordPress site's hostname to ip-api.com over HTTP.
WordPress Theme Detector
idevext
MediumWordPress Theme Detector sends the active site's hostname and IP address to ip-api.com over HTTP.
WriteMe.ai - AI powered writing assistant
turboanchor
MediumWriteMe.ai reads REACT_TOKEN_AUTH tokens from pages and sends them to apiv2.writeme.ai.
Writely
anchao951220
CleanWritely sends selected page text to its Writely/OpenAI chat endpoint for AI responses.
Writeseed - Smart AI Assistant
Writeseed
LowWriteseed - Smart AI Assistant writes the same extension user ID into page storage on every HTTP(S) site.
Writetone: AI Writing Assistant & Grammar Fix
Writetone · Communication
CleanWritetone sends text you enter in its popup to Writetone LLM endpoints when you request writing help.
weReaDou
sorosliu
CleanweReaDou sends Douban book titles to WeRead search when you view Douban book pages.
Wall Smash Game
Game Anything · Games
LowWall Smash Game sends popup page-view details and a persistent client ID to Google Analytics when the popup loads.
Whatfix for Compass
Whatfix Inc
CleanWhatfix for Compass captures page DOM content and cookie-accessible assets and uploads them to Whatfix's own servers during Studio authoring sessions.
Web Signer for UTSP
Gemalto
CleanWeb Signer for UTSP sends the user's signing PIN and the document to be signed to a local Thales application when signing UK BACS and Direct Debit payment transactions.
Word Search Game
Game Anything
LowWord Search Game sends popup page titles, popup URLs, and persistent session identifiers to Google Analytics.

Web for Telegram
OinkAndStuff
LowWeb for Telegram renders a remote message from its developer's server into the page without sanitizing it on first display.

Web for Google Messages
OinkAndStuff
LowWeb for Google Messages polls the developer's own server on startup and can show OS-level notifications with a developer-controlled link.
Workstation for Discord
Winfy
MediumWorkstation for Discord has no local Discord client; every button loads a third-party site, winfy.net, to handle the Discord session.