Is CiteMaker CiteWeb | APA 6th Edn. safe?

Medium risk

CiteMaker CiteWeb sends login credentials to citemaker.com using GET requests.

When you sign in through the extension, it submits your username and password to CiteMaker's login endpoint with GET requests. In one login path the credentials are placed directly in the request URL, and in another they are serialized as GET parameters by jQuery.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

CiteMakerv2.1.2.5Chrome Web Store
40Risk
Who publishes it

MasterGraphics Pty Ltd - 3 other listings from the same operator, none carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
CiteMaker
Declared legal entity
MasterGraphics Pty Ltd
Registered address
71 Gatling Road, Gatling Rd, CANNON HILL, QLD 4170, AU
Registered contact
MasterGraphics Pty Ltd

Same store account

3 other listings published from this account, 15k+ users between them, none of them carrying a finding.

CiteMaker CiteWeb | APA 7th Edn.10k+MediumCiteMaker CiteWeb | MLA 8th Edition3k+MediumCiteMaker CiteWeb | Harvard Australian2k+Low

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 2.1.2.5. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on www.paypal.com

    https://www.paypal.com/cgi-bin/webscr

  • Read and change your data on www.citemaker.com

    https://www.citemaker.com/*

  • Read and change your data on citemaker.com

    https://citemaker.com/*

  • See the address and title of every tab you have open

    tabs

  • Act on the current tab, but only after you click the extension

    activeTab

  • Store data in your browser

    storage

  • Run its own code inside the pages you visit

    scripting

Where it sends data

Destinations our analysis observed CiteMaker CiteWeb | APA 6th Edn. contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • www.citemaker.com

    CiteMaker CiteWeb | APA 6th Edn. sends data to www.citemaker.com. 3 other extensions we have analysed send data here.

Updated 30 September 2026akjejjpinngeemgaddjbhbiddpoppnem