Is Walmart Only No Third Party Seller safe?

Medium risk

Walmart Only No Third Party Seller sends Walmart list URLs through a Walmart affiliate redirect when clicked.

When you click the extension on a Walmart search, category, or browse page, it adds the Walmart-seller filter to the current URL. It then opens that filtered URL through a fixed Walmart affiliate redirect, sending the page URL to Walmart's affiliate redirect host.

46Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

Extension click redirects Walmart list URL through affiliate link

Clicking Walmart Only No Third Party Seller on a Walmart list page adds the seller filter and routes the current page URL through a Walmart affiliate redirect, encoding the active URL into the goto.walmart.com redirect.

Severity
Medium unwanted
Type
Unexpected
CWE
CWE-359
Source
Dynamic sandbox
What actually happens
You did this

The user clicks the extension on a Walmart list page.

The extension did this

The extension adds the Walmart seller filter and navigates through the Walmart affiliate redirect with the active page URL encoded in the redirect parameter.

Captured request
GEThttp://goto.walmart.com/c/2006399/565706/9383
Data sent in the redirect request
  • Your Walmart page URL
    https://www.walmart.com/search?q=coffee&facet=retailer_type:Walmart (illustrative)

    Shows the Walmart list page you were viewing and any search or category context included in that URL.

What it can do

Permissions this extension asks for, as declared in version 5. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on walmart.com

    http://*.walmart.com/* and 1 more

  • Watch every request your browser makes

    webRequest

Where it sends data

Destinations our analysis observed Walmart Only No Third Party Seller contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • goto.walmart.com

    Walmart Only No Third Party Seller sends data to goto.walmart.com. No other extension we have analysed sends data here.

Updated 30 September 2026jeoigkpfpgffhdiceflednochpdciahj