Is WTM TikTok Method safe?

Medium risk

WTM TikTok Method is medium risk. On TikTok upload or creator pages, WTM TikTok Method edits publish requests before sending, appending a promotional mention/hashtag and changing metadata on TikTok's post, publish, upload, aweme, item, and project endpoints.

Wizardftblv2.0Chrome Web Store
45Risk
Who publishes it

Wizardftbl - no other listings under this identity

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
Wizardftbl

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

TikTok uploads get a promotional mention and metadata changes.

On TikTok upload or creator pages, WTM TikTok Method edits publish requests before sending, appending a promotional mention/hashtag and changing metadata on TikTok's post, publish, upload, aweme, item, and project endpoints.

Severity
Medium unwanted
Type
Unexpected
CWE
CWE-506
Source
Dynamic sandbox
What actually happens
You did this

The user performs an upload or publish action on TikTok.

The extension did this

The extension modifies the upload request to append a promotional mention and hashtag and change selected upload metadata.

Captured request
POST*.tiktok.com/*post*|*publish*|*upload*|*aweme*|*item*|*project*
Fields in the request
  • Your upload form input
    My upload caption (illustrative)

    Caption, description, title, or text entered for the TikTok upload can be modified before submission.

  • TikTok page content
    creator upload page data (illustrative)

    Page-derived upload data can be parsed to decide whether the request matches TikTok publish-related endpoints.

Observation

Observed during dynamic analysis: the extension hooks JSON.stringify, fetch, and XMLHttpRequest sending, then targets TikTok publish-related URLs to append promotional text and alter metadata before requests are sent.

Updated 30 September 2026bfheeapgnbphifakecnklmdampcppffh