Is Wistia Video Downloader safe?
Wistia Video Downloader sends download telemetry, including page URLs and video IDs, to caverdant.online.
When you download Wistia videos, captions, or bulk video selections, the extension records telemetry that can include the active page URL and Wistia video identifiers. It stores a persistent user ID and queues those events locally before posting them with extension metadata to caverdant.online.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Findings
Download telemetry sends page URLs and Wistia video IDs.
Using Wistia Video Downloader to download videos or captions queues telemetry: active page URL, Wistia video ID(s), a persistent user value, extension version, and source, then POSTs the JSON to https://caverdant.online/events/events.php.
- Severity
- Medium unwanted
- Type
- Unexpected
- CWE
- CWE-359
- Source
- Dynamic sandbox
You start a Wistia video or caption download.
The extension queues telemetry that can include the active page URL, Wistia video IDs, and a persistent user value.
- Active page URLhttps://example.com/course/video (illustrative)
Shows the page where the Wistia download action happened.
- Tab contextoriginURL=https://example.com (illustrative)
Connects the telemetry event to the active tab or origin URL used by the downloader workflow.
- Persistent extension user valueuser=d7f3a1b2-... (illustrative)
Links multiple telemetry events from the same extension install over time.
Where it sends data
Destinations our analysis observed Wistia Video Downloader contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- caverdant.online
Wistia Video Downloader sends data to caverdant.online. No other extension we have analysed sends data here.