learndash-downloader
Warn
Audited by Snyk on Apr 10, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The extension explicitly inspects the active LearnDash course lesson page (see "How It Will Work" steps 2–6 and "Security & Scope" noting it "operates only on the page the user intentionally opens") to locate and act on embedded video sources on third-party course sites, meaning it fetches and interprets untrusted web content to decide and perform downloads.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata