Extension Auditor
Extension Auditor
Sign Up
WAXP - Contacts Exporter for WhatsApp

WAXP - Contacts Exporter for WhatsApp

ID: jpkhnmgaiachojobpgbfilkkjecgldle

Supported Languages

🇺🇸English

Extension Info & Metadata

Status
Active
Version
1.68
Size
0.54 MB
Rating
1.0/5
Reviews
1
Users
159
Type
Extension
Updated
Mar 25, 2023
Category
Workflow & planning
Price
Free
Featured
No
Visibility
Unlisted
Mature
No
By Google
No
Trusted
Yes
Download CRX
Chrome Web Store
Report Issue

Publisher Contextual Analysis

Trusted
Author
So Lets Talk DigitalView Profile
Privacy
Privacy Policy
Help
Help Center
Country
IN
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Address
C-25, C Block, Sector - 58 Noida, Uttar Pradesh 201301 IN
Website
Visit
Total Extensions
31
Active
23
Obsolete
8
Listed
27
Unlisted
4
Total Users
5,005
Screenshot 1
Screenshot 2
Screenshot 3

Export all or unsaved contacts from WhatsApp™ groups, chatlist and labels to CSV file.

WA Bulk Contracts Extractor Extension by SoLetsTalkDigital (also known as “SO”) lets you extract contacts from your WhatsApp easily and makes them available for download in a csv file. This is not a Free Extension and offers Yearly and Lifetime subscription options at affordable prices for unlimited use. The subscription plans require payment that is processed by Razorpay. If you like this chrome extension, consider sharing your review with us. Your support will help us make this extension more robust. For any issues related to the WA Contacts Extractor Extension, then feel free to reach out to us on [email protected]. DISCLAIMER: This Chrome plugin is not endorsed or certified by WhatsApp Inc and is merely an unofficial enhancement and automation tool that works with WhatsApp for Web. The privacy of the users is important to us. We don’t broadcast, sell, share or distribute any user collected data. The extension was designed to keep privacy of our users in mind. For more information, read: SoLetsTalkDigital privacy policy: https://soletstalkapp.com/privacy Razorpay privacy policy: https://razorpay.com/privacy/

Item
Type
Severity
Description
identity
Permission
High
This permission accesses Chrome identity service and user information. Rated High because it can obtain OAuth tokens, access connected accounts, and impersonate the user in authenticated service.
identity.email
Permission
High
This permission directly accesses the user's email address. Rated High because it reveals personally identifiable information and can be used for tracking or targeting.
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk:• 15% increase: Older manifest version lacks modern security controls
activeTab
Permission
Medium
This permission grants temporary access to the current tab. Rated Medium because it can access current page content when invoked, though limited to user-initiated actions.
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
Older Manifest Version
Risk Factor
Medium
This extension uses Manifest Version 2
*://api.gumroad.com/*
Permission
Unknown
No classification available for this permission.

By severity

Critical0
High2
Medium1
Low0

Versions scanned

Showing 1 of 2 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension VersionCode Review Findings
1.0.93

Files with findings

2 distinct paths — top paths by unique finding count:

  • js/commonFind.js2
  • manifest.json1
S.No.
Category
Severity
File
Summary
Found in Version
1Other
high
manifest.json (line 1)The bundled manifest declares MV3 with only the activeTab permission, no host_permissions, no externally_connectable, and no web_accessible_resources. The published CWS listing reports MV2 with storage, identity, iden…
1.0.9
2Other
high
js/commonFind.js (line 84)This routine reads a stored list of email addresses from localStorage.allEmails, then programmatically fills Gmail's compose form (To, Subject, Body) and clicks the Send button to deliver promotional spam advertising …
1.0.9
3Other
medium
js/commonFind.js (line 67)This function injects promotional text ('head over to https://soletstalkdigital.com') into a message compose field and clicks Send, automating outbound messaging on behalf of the publisher. While no auto-trigger for t…
1.0.9
URLs
95
IPv4
2
IPv6
0

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In
chrome.google.com/webstore/detail/waxp-crm-for-whatsapp/egjijglfkbikhmofhphailpolcjaalcbhttps://chrome.google.com/webstore/detail/waxp-crm-for-whatsapp/egjijglfkbikhmofhphailpolcjaalcb
gumroad.com/products/NrWaW/https://gumroad.com/products/NrWaW/
codegena.com/go/WAXP-video-tutorialhttps://codegena.com/go/WAXP-video-tutorial
superuser.com/a/989946/486675https://superuser.com/a/989946/486675
codegena.com/how-to-export-whatsapp-group-contacts-to-csvhttps://codegena.com/how-to-export-whatsapp-group-contacts-to-csv#Contacts
forms.gle/8TninyyC3vEcMrkr9https://forms.gle/8TninyyC3vEcMrkr9
paypal.me/shaneapenhttp://paypal.me/shaneapen
soletstalkapp.com-https://soletstalkapp.com/
clients2.google.com/service/update2/crxhttps://clients2.google.com/service/update2/crx
codegena.com/WhatsApp-Contacts-Exporter/https://codegena.com/WhatsApp-Contacts-Exporter/
Showing 1 to 10 of 100 rows
Rows per page:

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In
1.3.132.0
IPv4
-
1.101.3.4
IPv4
-
Version
Size
Is Malicious
Findings
Permhash
1.0.9
Latest
0.18 MB
Malicious
3
12ffb95c4cd43ce36a3fddc39ab28b4418d9d59ea54107620c996086f11310db
1.68
0.54 MB
Benign
—
10b7ec3632b609bec320913c19270416e1404078bfb354839a91f42d9cfa9c4e
Showing 1 to 2 of 10 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files (scanned top 25 shared text files)

No comparable text files found between these versions.

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In