Chrome Web Store
29Versions
0Code reviewed

Not reviewed

No code review on record

We have not reviewed this extension’s code, so we cannot vouch for it either way. Check the permissions below to decide whether it asks for more than it needs.

Want us to read this extension's code? Ask for a review and we'll queue it.

14 indicators in this extension

14 indicators
0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

What our analysis found

All You Can Fly Pro (AYCF) is not yet reviewed by Extension Auditor. Its permissions mean it can inject scripts into pages. It was last updated in September 2026.

All You Can Fly Pro (AYCF)

All You Can Fly Pro (AYCF) Chrome extension security report

ID: oimhdkdhblofmdebbpdfabddcnpmlhha

Supported Languages

🇬🇧British English

Extension Info & Metadata

Status
Active
Version
4.1.0
Size
0.37 MB
Rating
5.0/5
Reviews
27
Users
479
Type
Extension
Updated
Sep 4, 2026
Category
Tools
Price
Free
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
Yes
This publisherTrack record
1extension
All still listed

Publisher Contextual Analysis

Author
deniam24@gmail.com
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Extensions
1
Active
1
Obsolete
0
Listed
1
Unlisted
0
Users
479

Screenshots & videos

Screenshot 1
Screenshot 2
Screenshot 3
Screenshot 4
Screenshot 5

Install growth

Item
Type
Severity
Description
scripting
Permission
Critical
This permission allows injection and execution of JavaScript on any webpage. Rated Critical because it can modify page content, steal sensitive data, and inject malicious code into any site the extension has access to.
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk:• 20% increase: Access to sensitive domains increases potential impact• 10% increase: Early script execution enables pre-emptive content manipulation
activeTab
Permission
Medium
This permission grants temporary access to the current tab. Rated Medium because it can access current page content when invoked, though limited to user-initiated actions.
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
https://multipass.wizzair.com/*
Host
Medium
Host permission — access limited to this URL pattern.
https://deniam.github.io/*
Host
Medium
Host permission — access limited to this URL pattern.
Access to Sensitive Domains
Risk Factor
Medium
This extension requests access to sensitive domains: https://deniam.github.io/*, https://deniam.github.io/AllYouCanFlyPro/donation-success.html*
Early Content Script Execution
Risk Factor
Medium
This extension runs content scripts at document_start.

14 indicators in this extension

14 indicators
0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

About this extension

Chrome extension to easily find and book available routes for Wizz Air All-You-Can-Fly (AYCF) multipass subscribers.

Read the publisher’s full description

All You Can Fly Pro ✈️ 😎 All You Can Fly Pro is a free Chrome extension designed specifically for Wizz Air All You Can Fly (AYCF) subscribers, enhancing your Wizzair AYCF experience by automating flight searches. Easily find direct flights and optimal connecting routes with this user-friendly Chrome extension, optimized specifically for Wizz Air AYCF subscribers. 🔥 What's New? Version 3.3.5 Changelog - Fixed the issue while DST bookable dates were calculated incorrect - Added missing emoji reflecting on Windows / Android in the toolbar Version 3.3.4 Changelog - Updated routesData with schedule till 2025-11-30 Version 3.3.3 Changelog - Added missing emoji for about menu (for Windows/Android devices) - Fixed error when multiple dates selected and the first date of array is < operationStartDate all of dates marked as invalid - Updated routesData with schedule from 2025-09-01 till 2025-10-31 Version 3.3.2 Changelog - Added debug logger to Expert Settings - Updated routes schedule for AUG-SEP 2025 - Changed toolbar (replaced donation link and added AYCF website) - Version number and changelog now under About menu - Bugfixes Version 3.3.1 Changelog: - Added new islands and nearby airports to the multi-airport list: "CAN": "Canary Islands (Any)", "VAL": "Valencia (Any)", "BAR": "Barcelona (Any)", "SAR": "Sardinia (Any)", "BLS": "Black Sea (Any)", "CRE": "Crete (Any)", "GRI": "Greek Islands (Any)" - Introduced an array for -stan countries for improved region-specific handling: "CNA": "Central Asia (Stan Countries)" - Updated routes.js with new timetables and additional routes. - Fixed issue where the Multipass tab wouldn't refresh due to an expired dynamicUrl in Orion browser. - Corrected the total duration time calculation for multistop search results. - Replaced pipe character | with ⇄ in the progress bar for better readability. - Fixed sorting bug for roundtrip search results. Version 3.2.0 Change log: - Airports changing now supports for searches of flights with two connections. - Fix for processOneStopWithAirportChange function to render results instantly. - Fixed naming issue of the button that shows/hides inbound flight results. - (fix) Implemented booking horizon filtering for flight search with overnight connections and changing airports optioned enabled - Removed save settings button, all settings and dependencies now updating instantly to localStorage while editing - Fixed the bug with text overlaying in changing connecting airport settings (km over setting name) - Fixed incorrect dates in 3-leg flight searches. - Improved error handling to reduce unexpected issues in Orion Browser - Better display of airport change options in search settings. - The "Nearby Airports" radius selector now only appears when needed (if the option is enabled). Version 3.0.0 Change log: 1. One-stop route flexibility You can now change your connecting airport on one-stop (including overnight) itineraries. Just open the "Options" toolbar, enable "Allow changing connecting airport" checkbox, and specify the maximum transfer distance (in km) between airports. 2. Cleaner round-trip view In round-trip searches, inbound flights are now hidden by default. Click the "Show inbound flights" button to expand and view them. Version 2.5.7 Change log: 1. Added airport codes to the results grid. 2. Added tooltip to display country name when user taps on the country flag. Version 2.5.6 Change log: 1. fixed offset glitch that reflected on excluding some routes with connections from results 2. updated summer routes and timetable for 2025-06-31 - 2025-09-01 3. cleaned unused and repeated data from routes.js, added coordinates for each airport 4. Removed duplicated direct inbound flights for roundtrips searches with stops 5. fixed few bugs Version 2.5.3 Change log: 1. Added active class to buttons. 2. Fixed "flights.map undifened" error. Version 2.5.2. Change log: 1. Added extra check for the flight availability before "Continue to customize" script proceeds. It also fixes the bug with displaying empty field in Booking-customCartContainer (Multipass website) while batch search completed and then user clicks on "Continue to customize" button and don't see flight details in the Booking-customCartContainer. 2. Optimised multi-stop routes search, now it considers if any of segments that are not available on offset dates 3. Added extra attempt if Dynamic URL returned HTML error occurred 4. Replaced repeated filter / find calls with O(1) map lookups fixed Search error: TypeError: nextChains is not iterable for connection flights check. Version 2.5.1. Change log: 1) Updated routeData with flightDates schedule until 2025-10-31 2) Changed UI of addReturnDate button 3) Fixed progressUpdate counter for inbound flights and flights with Departure defined as ANY 4) UI adjustements to improve usabilty on mobile screens 5) Deleted recent entries from airport suggestions 6) Added animation of dropdown airport suggestions, Options panel, Stops dropdown and Sorting dropdown 7) Fixed sorting and initialisation of airport list for suggestions function 8) Adjusted airport suggestions for direct routes, now it considers multiAirports, selected date and flightDates availability, showing the user only available direct routes on the selected date (or today + 3 next days, if the departure date hasn't defined) 9) Adjusted search logic with ANY as origin or destination. While stops = 1, it will search all possible destinations with one stop 10) Updated the message in Progress bar for 426/429 errors 11) Updated throttle settings 12) Replaced "Continue to payment" button with "Continue to customize" button 13) Fixed totalCandidates counter, now it considers candidateHasValidFlight 14) Fixed progress for displaying outbound and inbound flights 15) Changed progress text color for rate limited error to red 16) Adjusted fetchDestinations to use data from window.ROUTES instead of repeatedly request DexieDb 17) Cleaned invalid and discontined routes. 18) Manifest updated to version 2.5.1 19) Added missing schedule for Kaunas Airport 20) Fixed bug with fetchDestination overwriting while searching routes 🚀 Key Features: 🔍 Automated Flight Search (including Hidden Routes): Quickly find all available AYCF routes. 🔄 Swap Airports: Instantly switch departure and arrival airports. 🌍 Multi-Airport and Country Selection: Select single or multiple airports, entire cities, or even countries. 📅 Multi-Date Support: Easily search single or multiple dates for departures and returns. 🛫 One-Way & Round-Trip: Comprehensive support for both trip types. 🗂️ CSV Export: Export your flight search results to CSV files for further analysis and comparison. 📍 Updated & Comprehensive Route List: Now includes all new destinations available in the Multipass PDF, even those missing from the official AYCF website dropdown ​routes. ⚡ Optimized & Faster Search Algorithm: Searches only for flights available on selected dates. Excludes unavailable routes from search results, ensuring accurate availability​. 💳 Direct Booking Integration: Instantly proceed to payment for selected flights directly from the search results. No more manual searching on the airline’s website—book your flights with a single click​. ⚙️ Advanced Customization Options: 🏡 Preferred Airport: Set your default departure location for faster searches. ⏱️ Connection Time Management: Customize minimum and maximum connection durations. 🎛️ UI Scale Adjustment: Adjust interface size to suit your viewing preference. 🔋 Cache Control: Manage data caching to optimize search performance. 🔧 Expert Settings: Tailor API request frequency, pauses, and cache lifetimes for advanced users. 🎯 Easy Installation & Usage: 📱 Now available for using on mobile platforms (iOS, iPadOS, Android) How to use: 1. Install Orion browser by Kagi from AppStore on iOS (or any Chromium based browser with extensions support for Android on Google Play). 2. Go to Chrome Web Store and install the extension. 3. Open Wizz Air Multipass tab and log in to your account. 4. Launch All You Can Fly Pro extension from browser's extensions list. 5. Search the route of your next journey! 💡 Adjustable design for laptops, tablets and mobile phones - Now All You Can Fly Pro opens in a new tab. - Redesigned adjustable user interface for big screens (desktops, laptops and tablets). - Easily zoom UI of extension with pinch-to-zoom or your trackpad. - Adapted UI to use on mobile screens. ----- Install the extension from the Chrome Web Store: https://chromewebstore.google.com/detail/all-you-can-fly-pro/oimhdkdhblofmdebbpdfabddcnpmlhha Pin the extension for quick access. Start searching for flights by entering airports, cities, or countries. Select your dates and configure search preferences. Click "SEARCH" and explore AYCF travel possibilities effortlessly. ✅ Privacy Assured: No personal data is collected or stored. All interactions remain private and local. ⚠️ Disclaimer: This extension is not affiliated with Wizz Air. It provides additional functionality to assist AYCF subscribers.

User reviews

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

URLs
14

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found
No IP addresses found

14 indicators in this extension

14 indicators
0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe
Version
Size
Verdict
Findings
Permhash
4.1.0
Latest
0.37 MBNot scanned—
d18bf2acdb07b06b29e3480593a9fdcc5187ce0e789897f4a95733aea5c84a6f
4.0.0
0.41 MBNot scanned—
d18bf2acdb07b06b29e3480593a9fdcc5187ce0e789897f4a95733aea5c84a6f
3.6.0
0.49 MBNot scanned—
d18bf2acdb07b06b29e3480593a9fdcc5187ce0e789897f4a95733aea5c84a6f
3.5.0
0.49 MBNot scanned—
d18bf2acdb07b06b29e3480593a9fdcc5187ce0e789897f4a95733aea5c84a6f
3.4.4
0.49 MBNot scanned—
d18bf2acdb07b06b29e3480593a9fdcc5187ce0e789897f4a95733aea5c84a6f
3.4.3
0.49 MBNot scanned—
d18bf2acdb07b06b29e3480593a9fdcc5187ce0e789897f4a95733aea5c84a6f
3.4.2
0.48 MBNot scanned—
d18bf2acdb07b06b29e3480593a9fdcc5187ce0e789897f4a95733aea5c84a6f
3.4.1
0.48 MBNot scanned—
d18bf2acdb07b06b29e3480593a9fdcc5187ce0e789897f4a95733aea5c84a6f
3.4.0
0.46 MBNot scanned—
d18bf2acdb07b06b29e3480593a9fdcc5187ce0e789897f4a95733aea5c84a6f
3.3.6
0.45 MBNot scanned—
d18bf2acdb07b06b29e3480593a9fdcc5187ce0e789897f4a95733aea5c84a6f
Showing 1 to 10 of 30 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

Gain full insight into all external connections.

Upgrade for full visibility.