Is WordPress Theme Detector safe?
WordPress Theme Detector sends the active site's hostname and IP address to ip-api.com over HTTP.
When you open the extension popup, it reads the active tab's site origin and sends the hostname to ip-api.com using an unencrypted HTTP request. If ip-api.com returns a query IP, the extension sends that IP address to the same service for a second geolocation lookup.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
What it can do
Permissions this extension asks for, as declared in version 1.6.0. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Read and change your data on every site you visit
http://*/*
Read and change your data on every secure site you visit
https://*/*
Act on the current tab, but only after you click the extension
activeTab
Run its own code inside the pages you visit
scripting
Store data in your browser
storage
Where it sends data
Destinations our analysis observed WordPress Theme Detector contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- ip-api.comwidely used
WordPress Theme Detector sends data to ip-api.com. A widely used service: 62 other extensions we have analysed send data here.