Is RG Blooket Hacks safe?

Medium risk

RG Blooket Hacks is medium risk. When you use this extension on Blooket, it can read a selected player's game password from the live game database and show it in an alert. The confirmed data type is credentials; it requires the user to choose the password-viewing option.

RupertG Interactivev1.0.0Chrome Web Store
45Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

Blooket game passwords exposed through a player lookup tool

When you use this extension on Blooket, it can read a selected player's game password from the live game database and show it in an alert.

The confirmed data type is credentials; it requires the user to choose the password-viewing option.

Severity
Medium unwanted
Type
Unexpected
CWE
CWE-200
Source
Dynamic sandbox
What actually happens
You did this

The user chooses the password-viewing option for a selected Blooket player.

The extension did this

The extension reads that player's game password from the live game database and displays it in an alert.

Fields read from the live game database
  • Player game password
    blue-falcon-42 (illustrative)

    This credential can let someone view or use another player's Blooket game access value.

Updated 21 September 2026pcofblikilnhoconbbappbalpgaejkja