Is CiteMaker CiteWeb | APA 7th Edn. safe?

Medium risk

CiteMaker CiteWeb sends login passwords in GET requests to citemaker.com during popup sign-in.

When you sign in from the extension popup, CiteMaker CiteWeb sends the username and password as query parameters to www.citemaker.com. When you use the popup to cite the current page, it reads the active tab URL and sends it to CiteMaker's citeweb API to generate the citation.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

CiteMakerv2.2.0.6Chrome Web Store
40Risk
Who publishes it

MasterGraphics Pty Ltd - 3 other listings from the same operator, none carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
CiteMaker
Declared legal entity
MasterGraphics Pty Ltd
Registered address
71 Gatling Road, Gatling Rd, CANNON HILL, QLD 4170, AU
Registered contact
MasterGraphics Pty Ltd

Same store account

3 other listings published from this account, 10k+ users between them, none of them carrying a finding.

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 2.2.0.6. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on www.paypal.com

    https://www.paypal.com/cgi-bin/webscr

  • Read and change your data on www.citemaker.com

    https://www.citemaker.com/*

  • Read and change your data on citemaker.com

    https://citemaker.com/*

  • See the address and title of every tab you have open

    tabs

  • Act on the current tab, but only after you click the extension

    activeTab

  • Store data in your browser

    storage

  • Run its own code inside the pages you visit

    scripting

Where it sends data

Destinations our analysis observed CiteMaker CiteWeb | APA 7th Edn. contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • www.citemaker.com

    CiteMaker CiteWeb | APA 7th Edn. sends data to www.citemaker.com. 3 other extensions we have analysed send data here.

Updated 30 September 2026naankklphfojljboaokgfbheobbgenka