CRX aminer
Extension icon

Scan WP - WordPress Theme and Plugin Detector

Version 2.0 View in Chrome Web Store

Last scanned: about 3 hours ago

Extension Details

Developer: OK Digital LTD.
Rating: 3.9 ★ (55 ratings)
Users: 30,000

Context-Aware Verdict

HIGH
Overall Risk
Trust Factors: The extension has a moderate user base of 30,000 users and a decent rating of 3.9/5, suggesting some level of community acceptance. The developer OK Digital LTD appears to be a legitimate company. The extension's stated purpose of detecting WordPress themes and plugins is a legitimate use case for web developers and security professionals.
Concerns: The extension exhibits concerning permission patterns that exceed what would typically be necessary for WordPress detection. The tabs permission combined with content script injection across all URLs creates a powerful surveillance capability. While WordPress detection could theoretically require accessing website source code, the broad scope of permissions suggests the extension could monitor all browsing activity, not just WordPress sites. The ability to inject scripts into any website poses significant privacy and security risks, as it could potentially capture sensitive information like login credentials, personal data, or financial information from any site visited.
Recommendations: Given the high-risk permission combination, consider running this extension in a separate Chrome profile dedicated solely to WordPress development work. Only enable the extension when actively analyzing WordPress sites, and disable it during regular browsing. Alternatively, consider using online WordPress detection tools or browser developer tools for occasional use instead of installing this extension. If you must use it, regularly review your browsing data and consider using it only on test sites rather than production environments.

Findings

HIGH
Broad Content Script Injection
This extension can inject scripts into any website. This means it could potentially read sensitive data, modify website content, or steal credentials.
HIGH
High-Risk Permission: tabs
This extension has the tabs permission. Can access browser tab information and manipulate tabs. This could potentially be used maliciously to compromise security or privacy.