Is Meta Explorer - SEO Meta and On-Page SEO tools safe?

Medium risk

Meta Explorer is medium risk. When you open the Meta Explorer sidebar or run its CrUX refresh, the extension POSTs the current page URL, in the JSON body, to the Google Chrome UX Report API using a hardcoded API key to fetch CrUX metrics for that page.

Dinesh.Sv3.4.8Chrome Web Store
45Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

Current page URL sent to Google CrUX API during page analysis.

When you open the Meta Explorer sidebar or run its CrUX refresh, the extension POSTs the current page URL, in the JSON body, to the Google Chrome UX Report API using a hardcoded API key to fetch CrUX metrics for that page.

Severity
Medium unwanted
Type
Unexpected
CWE
CWE-200
Source
Dynamic sandbox
What actually happens
You did this

The user opens the sidebar or refreshes the CrUX analysis.

The extension did this

The extension sends the current page URL to the Google Chrome UX Report API.

Captured request
POSThttps://chromeuxreport.googleapis.com/v1/records:queryRecord
Fields in the request
  • Current page URL
    https://example.com/article

    Identifies the exact page being analyzed and can reveal browsing context.

Updated 30 September 2026dggmapjanngfjjakfgeoegfmgpmcamfh