[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fE9RPpGKT22SXBKoGIo3E9O1WrbHELaxE2aL3ncbEsxs":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":13,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29,"vulnerabilities":30,"developer":31,"crawl_stats":28,"alternatives":39,"analysis":130,"fingerprints":203},"custom-favicon","Custom Favicon – Easily Add a Favicon in WordPress","1.1.0","Harish Chouhan","https:\u002F\u002Fprofiles.wordpress.org\u002Fhchouhan\u002F","\u003Cp>\u003Cstrong>Custom Favicon\u003C\u002Fstrong> lets you upload and manage favicons for your WordPress website, admin area, and login screen using the native media uploader. Unlike the built-in Site Icon feature, this plugin gives you full control — including support for separate frontend and backend icons, Apple touch icons, dark mode icons, and SVG format.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Features include:\u003C\u002Fstrong>\u003Cbr \u002F>\n– Upload custom favicon for frontend (browser tab icon)\u003Cbr \u002F>\n– Upload separate favicon for WordPress Dashboard and login page\u003Cbr \u002F>\n– Upload Apple touch icons for iOS devices\u003Cbr \u002F>\n– Upload dark mode specific favicon\u003Cbr \u002F>\n– SVG favicon support\u003Cbr \u002F>\n– Option to disable default WordPress Site Icon output\u003Cbr \u002F>\n– Clean and simple settings page under \u003Cstrong>Settings \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan> Custom Favicon\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>This plugin is useful for:\u003Cbr \u002F>\n– Replacing the default WordPress favicon\u003Cbr \u002F>\n– Branding the WordPress dashboard for clients\u003Cbr \u002F>\n– Adding modern favicon features with minimal setup\u003C\u002Fp>\n\u003Cp>Official plugin page: \u003Ca href=\"https:\u002F\u002Fthemeist.com\u002Fplugins\u002Fwordpress\u002Fcustom-favicon\u002F\" rel=\"nofollow ugc\">Custom Favicon on Themeist\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>Need help? Ask in the \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Fcustom-favicon\u002F\" rel=\"ugc\">Support Forum on WordPress.org\u003C\u002Fa>\u003C\u002Fp>\n","Easily add a custom favicon and Apple touch icon to your WordPress site, including support for dark mode, SVG icons, and admin dashboard branding.",5000,92569,100,17,"2025-07-25T13:43:00.000Z","6.8.5","6.0","7.4",[20,21,22,23,24],"dark-mode","favicon","icon","site-icon","svg-icon","https:\u002F\u002Fthemeist.com\u002Fplugins\u002Fwordpress\u002Fcustom-favicon\u002F#utm_source=wp-plugin&utm_medium=i-recommend-this&utm_campaign=plugins-page","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcustom-favicon.1.1.0.zip",0,null,"2026-03-15T15:16:48.613Z",[],{"slug":32,"display_name":7,"profile_url":8,"plugin_count":33,"total_installs":34,"avg_security_score":35,"avg_patch_time_days":36,"trust_score":37,"computed_at":38},"hchouhan",7,12630,99,1906,78,"2026-04-04T00:40:40.432Z",[40,55,73,92,110],{"slug":41,"name":42,"version":43,"author":44,"author_profile":45,"description":46,"short_description":47,"active_installs":27,"downloaded":48,"rating":27,"num_ratings":27,"last_updated":49,"tested_up_to":50,"requires_at_least":17,"requires_php":18,"tags":51,"homepage":49,"download_link":53,"security_score":13,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":54},"huntsman-dark-mode-site-icon","Huntsman Dark Mode Site Icon","1.0.0","Josh Hunt","https:\u002F\u002Fprofiles.wordpress.org\u002Fhuntsmanmedia\u002F","\u003Cp>Huntsman Dark Mode Site Icon allows you to set a separate site icon for light and dark mode.\u003C\u002Fp>\n\u003Cp>Upload one icon for light mode using WordPress’s built-in Site Icon, and upload a separate icon for dark mode using this plugin. The appropriate icon is then displayed automatically based on the visitor’s system theme.\u003C\u002Fp>\n\u003Cp>No code or configuration is required. If no dark mode icon is set, WordPress behaves exactly as normal.\u003C\u002Fp>\n\u003Ch3>Key Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Separate site icons for light mode and dark mode\u003C\u002Fli>\n\u003Cli>Simple upload interface in the WordPress admin\u003C\u002Fli>\n\u003Cli>Works on the frontend, admin area, and login screen\u003C\u002Fli>\n\u003Cli>Optional enable\u002Fdisable toggle\u003C\u002Fli>\n\u003Cli>Does not replace or override the core WordPress Site Icon\u003C\u002Fli>\n\u003Cli>Accessable via the WP API\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Usage\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\n\u003Cp>\u003Cstrong>Site Icon (WordPress)\u003C\u002Fstrong>\u003Cbr \u002F>\nThis is the default WordPress Site Icon and is still managed by WordPress.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Dark Mode Site Icon\u003C\u002Fstrong>\u003Cbr \u002F>\nThis icon is only used when the user’s system is in dark mode and the browser supports \u003Ccode>prefers-color-scheme\u003C\u002Fcode>.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>If the Dark Mode Site Icon is not set, the plugin does nothing and WordPress behaves normally.\u003C\u002Fp>\n\u003Ch3>REST API\u003C\u002Fh3>\n\u003Cp>The plugin exposes a public REST endpoint for accessing the Dark Mode Site Icon:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>\u002Fwp-json\u002Fhdmsi\u002Fv1\u002Ficons\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>Example response:\u003Cbr \u002F>\n{\u003Cbr \u002F>\n“enabled”: true,\u003Cbr \u002F>\n“dark”: {\u003Cbr \u002F>\n“id”: 123,\u003Cbr \u002F>\n“url”: “https:\u002F\u002Fexample.com\u002Ficon-dark.png”\u003Cbr \u002F>\n}\u003Cbr \u002F>\n}\u003Cbr \u002F>\nA dark-mode Web App Manifest is also available at:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>\u002Fwp-json\u002Fhdmsi\u002Fv1\u002Fmanifest?mode=dark\n\u003C\u002Fcode>\u003C\u002Fpre>\n","Set separate site icons for light and dark mode based on the visitor’s system theme.",101,"","6.9.4",[20,21,52,23],"prefers-color-scheme","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fhuntsman-dark-mode-site-icon.zip","2026-03-15T10:48:56.248Z",{"slug":56,"name":57,"version":58,"author":59,"author_profile":60,"description":61,"short_description":62,"active_installs":11,"downloaded":63,"rating":64,"num_ratings":65,"last_updated":66,"tested_up_to":16,"requires_at_least":67,"requires_php":49,"tags":68,"homepage":49,"download_link":70,"security_score":35,"vuln_count":71,"unpatched_count":27,"last_vuln_date":72,"fetched_at":29},"site-favicon","Site Favicon","1.0","Web Guy","https:\u002F\u002Fprofiles.wordpress.org\u002Fwebguyio\u002F","\u003Cp>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fwebguyio\u002Fsupport\" rel=\"nofollow ugc\">💬 Ask Question\u003C\u002Fa> | \u003Ca href=\"mailto:webguywork@gmail.com\" rel=\"nofollow ugc\">📧 Email Me\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>Add a favicon.\u003C\u002Fp>\n\u003Cp>Set the favicon URL under \u003Cem>Appearance > Customize > Site Identity > Site Favicon\u003C\u002Fem>.\u003C\u002Fp>\n\u003Cp>\u003Cem>This plugin is especially useful if you’d like to set a Site Icon, but also need to set a unique favicon separate from it.\u003C\u002Fem>\u003C\u002Fp>\n","Add a favicon.",29658,76,4,"2026-01-21T13:43:00.000Z","5.0",[21,69,22,23],"favorites-icon","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsite-favicon.zip",1,"2024-05-30 00:00:00",{"slug":74,"name":75,"version":76,"author":77,"author_profile":78,"description":79,"short_description":80,"active_installs":81,"downloaded":82,"rating":13,"num_ratings":83,"last_updated":84,"tested_up_to":85,"requires_at_least":86,"requires_php":49,"tags":87,"homepage":89,"download_link":90,"security_score":91,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29},"remove-site-icon","Remove Site Icon","1","amit5204","https:\u002F\u002Fprofiles.wordpress.org\u002Famit5204\u002F","\u003Cp>This plugin will remove site icon\u002Ffavicon from frontend and admin.\u003C\u002Fp>\n","This plugin will remove site icon\u002Ffavicon from frontend and admin.",80,2412,2,"2022-12-13T16:12:00.000Z","6.1.10","4.9.6",[88,74],"remove-favicon","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fremove-site-icon\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fremove-site-icon.zip",85,{"slug":93,"name":94,"version":95,"author":96,"author_profile":97,"description":98,"short_description":99,"active_installs":100,"downloaded":101,"rating":13,"num_ratings":83,"last_updated":102,"tested_up_to":103,"requires_at_least":104,"requires_php":49,"tags":105,"homepage":108,"download_link":109,"security_score":91,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29},"vanilla-bean-icon-setter","Vanilla Bean – Icon Setter","2.81","vsmash","https:\u002F\u002Fprofiles.wordpress.org\u002Fvsmash\u002F","\u003Cp>Icon Setter (Iconifier) is a simple set-site-icon plugin for all devices.\u003C\u002Fp>\n\u003Cp>Simply visit settings in admin, upload or choose your logo from the media\u003Cbr \u002F>\nlibrary and it will set:\u003Cbr \u002F>\n*   All Apple device icons and tiles\u003Cbr \u002F>\n*   All windows device icons and tiles\u003Cbr \u002F>\n*   All Android and smartphone device icons and tiles\u003Cbr \u002F>\n*   ALl desktop website icons\u003C\u002Fp>\n\u003Cp>Designed to solve your wordpress website branding setup in moments without\u003Cbr \u002F>\ndependency on themes or jetpack.\u003C\u002Fp>\n\u003Cp>Vanilla Beans are published separately so that you can choose your beans to suit\u003Cbr \u002F>\nyour needs.\u003C\u002Fp>\n\u003Cp>See your Vanilla Bean page in admin for other beans available.\u003C\u002Fp>\n\u003Cp>Tested with php v5.4 to v7.4\u003Cbr \u002F>\nPHP v5.5+ supports cropping of Microsoft wide tile image version.\u003C\u002Fp>\n","Icon Setter (Iconifier) is a simple set-site-icon plugin for all devices.",20,3935,"2020-07-21T03:25:00.000Z","5.4.19","4.0",[106,21,22,107,23],"branding","iconify","http:\u002F\u002Fwww.velvary.com.au\u002Fvanilla-beans\u002Fwordpress\u002FIconifier\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fvanilla-bean-icon-setter.2.81.zip",{"slug":111,"name":112,"version":113,"author":114,"author_profile":115,"description":116,"short_description":117,"active_installs":118,"downloaded":119,"rating":120,"num_ratings":121,"last_updated":122,"tested_up_to":50,"requires_at_least":123,"requires_php":18,"tags":124,"homepage":127,"download_link":128,"security_score":35,"vuln_count":83,"unpatched_count":27,"last_vuln_date":129,"fetched_at":29},"font-awesome","Font Awesome","5.1.3","fontawesome","https:\u002F\u002Fprofiles.wordpress.org\u002Ffontawesome\u002F","\u003Cp>The official way to use Font Awesome Free or Pro icons on your WordPress site, brought to you by the Font Awesome team.\u003C\u002Fp>\n\u003Ch4>Features\u003C\u002Fh4>\n\u003Cp>Our official plugin makes it easy to add Font Awesome icons to your pages, posts, and templates and includes the following features:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Use \u003Cstrong>Pro or Free icons\u003C\u002Fstrong>, from the latest release or a specific release.\u003C\u002Fli>\n\u003Cli>Use \u003Cstrong>custom icons\u003C\u002Fstrong> from your Pro Kits.\u003C\u002Fli>\n\u003Cli>Use a \u003Cstrong>Font Awesome Kit\u003C\u002Fstrong> to add any of our icons (including the latest Duotone styles and custom icons!), or select the Font Awesome \u003Cstrong>CDN for Version 5 icons only\u003C\u002Fstrong>.\u003C\u002Fli>\n\u003Cli>Turn on automatic \u003Cstrong>compatibility for Font Awesome Version 4\u003C\u002Fstrong> if you – or your plugins – are still using Version 4 syntax.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Troubleshoot and resolve issues\u003C\u002Fstrong> when multiple versions of Font Awesome are loading on your site from other plugins\u002Fthemes, which can cause unexpected icon display or technical issues.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>How to Use\u003C\u002Fh3>\n\u003Cp>\u003Cstrong>Install And Enable The Plugin\u003C\u002Fstrong>\u003Cbr \u002F>\n(See the Installation tab for details)\u003C\u002Fp>\n\u003Cp>\u003Cstrong>How to Add and Style Icons\u003C\u002Fstrong>\u003Cbr \u002F>\nFull docs on how to use the plugin and add icons are available on the \u003Ca href=\"https:\u002F\u002Fdocs.fontawesome.com\u002Fweb\u002Fuse-with\u002Fwordpress\u002Fadd-icons\" rel=\"nofollow ugc\">Font Awesome Docs site\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Add Icons in the Block Editor\u003C\u002Fstrong>\u003Cbr \u002F>\nOnce you’ve set up your plugin, you can add icons as blocks or inline with text.\u003C\u002Fp>\n\u003Cp>To add icons as blocks, select the “Font Awesome Icon” block, and then click the “Choose Icon button” to open the Icon Chooser.\u003C\u002Fp>\n\u003Cp>To add icons inline, select the Font Awesome option in the format toolbar to open the Icon Chooser. (Note: Inline icons require at least WP 6.3.)\u003C\u002Fp>\n\u003Cp>Once you open the Icon Chooser, add icons by:\u003C\u002Fp>\n\u003Col>\n\u003Cli>Searching for the icon you want – you can \u003Cstrong>search by icon name, category, or keyword\u003C\u002Fstrong>.\u003C\u002Fli>\n\u003Cli>Changing the Family and Style using the drop downs if you want an icon in a different style.\u003C\u002Fli>\n\u003Cli>When you see the icon you want, clicking it to enter it into the content of your page or post.\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>\u003Cem>Note: If you want to search and add Pro icons in the Icon Chooser, make sure you set your plugin to use a Pro Kit.\u003C\u002Fem>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Add Icons in The Classic Editor\u003C\u002Fstrong>\u003Cbr \u002F>\nIf you need to add icons in the classic editor, you can \u003Ca href=\"https:\u002F\u002Ffontawesome.com\u002Ficons?d=gallery\" rel=\"nofollow ugc\">use the icon names in shortcodes or HTML\u003C\u002Fa>. Add an icon using shortcodes to any text area – just add the name of the icon and a style prefix, where \u003Ca href=\"https:\u002F\u002Ffontawesome.com\u002Fhow-to-use\u002Fon-the-web\u002Freferencing-icons\u002Fbasic-use\" rel=\"nofollow ugc\">the prefix is the style of icon\u003C\u002Fa> you want to use. Note that you don’t need to include the \u003Ccode>fa-\u003C\u002Fcode> part of the icon name. And if you don’t include any style prefix, the icon will default to the Classic Solid style.\u003C\u002Fp>\n\u003Cp>The shortcode for an icon looks like this:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[icon name=\"stroopwafel\"]\n\n[icon name=\"stroopwafel\" prefix=\"fa-sharp fa-light\"]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>You can also use basic HTML with \u003Ca href=\"https:\u002F\u002Ffontawesome.com\u002Fhow-to-use\u002Fon-the-web\u002Freferencing-icons\u002Fbasic-use\" rel=\"nofollow ugc\">standard Font Awesome syntax\u003C\u002Fa>, like this:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>\u003Ci class=\"fa-solid fa-stroopwafel\">\u003C\u002Fi>\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>\u003Cstrong>Using Pro Icons and Features\u003C\u002Fstrong>\u003Cbr \u002F>\nTo use a Kit to power your icons, \u003Ca href=\"https:\u002F\u002Ffontawesome.com\u002Fkits\" rel=\"nofollow ugc\">create a Kit on FontAwesome.com\u003C\u002Fa> and select “Pro icons” in the Kit Settings tab. Then grab your \u003Ca href=\"https:\u002F\u002Ffontawesome.com\u002Faccount#api-tokens\" rel=\"nofollow ugc\">API Token from your Font Awesome Account page\u003C\u002Fa> and add it to your WordPress plugin settings.\u003C\u002Fp>\n\u003Cp>To use the CDN to power your icons, know that you will \u003Cstrong>only be able to use icons from Version 5\u003C\u002Fstrong>. To enable Pro icons, add your site’s domain to the list allowed domains on your \u003Ca href=\"https:\u002F\u002Ffontawesome.com\u002Faccount\u002Fcdn\" rel=\"nofollow ugc\">Font Awesome CDN Settings page\u003C\u002Fa> and then use shortcodes or HTML to add the icons into your content.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Troubleshooting with the Plugin\u003C\u002Fstrong>\u003Cbr \u002F>\nFont Awesome icons are popular, so lots of themes and plugins also load Font Awesome, and sometimes their version can conflict with yours. So we created a way to help you find and prevent those conflicting versions from affecting your icons: \u003Cstrong>The Conflict Detection Scanner\u003C\u002Fstrong>.\u003C\u002Fp>\n\u003Cp>If the plugin seems to be set up correctly and your icons still aren’t loading and you’re not sure why, head over to the Troubleshoot tab, which has two parts:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cem>Detect Conflicts with Other Versions of Font Awesome\u003C\u002Fem> – which lets you start the conflict detection scanner to find versions of Font Awesome loading on your site.\u003C\u002Fli>\n\u003Cli>\u003Cem>Versions of Font Awesome Active on Your Site\u003C\u002Fem> – which shows the results of the scanner and lets  you prevent any conflicting versions from loading other versions of Font Awesome on your site.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Get more information about using the scanner for troubleshooting on the \u003Ca href=\"https:\u002F\u002Fdocs.fontawesome.com\u002Fweb\u002Fuse-with\u002Fwordpress\u002Ftroubleshoot\" rel=\"nofollow ugc\">Font Awesome WordPress docs\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>Configuring\u003C\u002Fh3>\n\u003Cp>The plugin is set to serve Font Awesome Free icons as a Web Font via the Font Awesome CDN by default. You can change the CDN settings right in the plugin. If you want just the basic Free icons, you probably don’t need to make any changes to the default configuration.\u003C\u002Fp>\n\u003Cp>You can get more information about all the available settings and troubleshooting on the \u003Ca href=\"https:\u002F\u002Fdocs.fontawesome.com\u002Fweb\u002Fuse-with\u002Fwordpress\" rel=\"nofollow ugc\">Font Awesome WordPress docs\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>Upgrading from Plugin Version 4\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Ccode>[icon]\u003C\u002Fcode> shortcodes found in Block Editor content and elsewehre will continue to work as before,\u003Cbr \u002F>\nthough new icons added with the Icon Chooser in the Block Editor will be inline SVGs.\u003Cbr \u002F>\nPreviously added \u003Ccode>[icon]\u003C\u002Fcode> shortcodes will not be automatically be converted into the new inline SVG\u003Cbr \u002F>\nformat. If you want to convert an \u003Ccode>[icon]\u003C\u002Fcode> shortcode, delete it and re-add the icon using the Icon Chooser in the Block Editor.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>See Also\u003C\u002Fh3>\n\u003Cp>The \u003Ca href=\"https:\u002F\u002Fgithub.com\u002FFortAwesome\u002Fwordpress-fontawesome\u002Fblob\u002Fmaster\u002FREADME.md\" rel=\"nofollow ugc\">README\u003C\u002Fa> on GitHub has details for WordPress site owners and developers.\u003C\u002Fp>\n\u003Cp>You can get more information about all the available settings and troubleshooting on the \u003Ca href=\"https:\u002F\u002Fdocs.fontawesome.com\u002Fweb\u002Fuse-with\u002Fwordpress\" rel=\"nofollow ugc\">Font Awesome WordPress docs\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>And there are \u003Ca href=\"https:\u002F\u002Ffortawesome.github.io\u002Fwordpress-fontawesome\u002F\" rel=\"nofollow ugc\">API docs\u003C\u002Fa> for developers.\u003C\u002Fp>\n","The official way to use Font Awesome Free or Pro icons on your WordPress site, brought to you by the Font Awesome team.",400000,5666760,72,61,"2025-12-17T22:34:00.000Z","5.8",[114,22,125,24,126],"iconfont","webfont","https:\u002F\u002Ffontawesome.com\u002Fhow-to-use\u002Fon-the-web\u002Fusing-with\u002Fwordpress","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ffont-awesome.5.1.3.zip","2022-12-22 00:00:00",{"attackSurface":131,"codeSignals":174,"taintFlows":191,"riskAssessment":192,"analyzedAt":202},{"hooks":132,"ajaxHandlers":170,"restRoutes":171,"shortcodes":172,"cronEvents":173,"entryPointCount":27,"unprotectedCount":27},[133,139,143,147,151,154,158,162,165],{"type":134,"name":135,"callback":136,"priority":27,"file":137,"line":138},"action","init","load_localisation","custom-favicon.php",47,{"type":134,"name":140,"callback":141,"file":137,"line":142},"admin_menu","add_settings_menu",48,{"type":134,"name":144,"callback":145,"file":137,"line":146},"admin_enqueue_scripts","enqueue_assets",49,{"type":134,"name":148,"callback":149,"file":137,"line":150},"admin_init","register_settings",50,{"type":134,"name":148,"callback":152,"file":137,"line":153},"migrate_settings",51,{"type":134,"name":155,"callback":156,"priority":71,"file":137,"line":157},"wp_head","output_frontend_favicons",52,{"type":134,"name":159,"callback":160,"file":137,"line":161},"admin_head","output_admin_favicons",53,{"type":134,"name":163,"callback":160,"file":137,"line":164},"login_head",54,{"type":166,"name":167,"callback":168,"file":137,"line":169},"filter","site_icon_meta_tags","maybe_remove_site_icon",55,[],[],[],[],{"dangerousFunctions":175,"sqlUsage":176,"outputEscaping":178,"fileOperations":27,"externalRequests":27,"nonceChecks":27,"capabilityChecks":27,"bundledLibraries":190},[],{"prepared":27,"raw":27,"locations":177},[],{"escaped":179,"rawEcho":65,"locations":180},16,[181,184,186,188],{"file":137,"line":182,"context":183},173,"raw output",{"file":137,"line":185,"context":183},174,{"file":137,"line":187,"context":183},181,{"file":137,"line":189,"context":183},182,[],[],{"summary":193,"deductions":194},"The \"custom-favicon\" plugin version 1.1.0 exhibits a generally strong security posture based on the provided static analysis and vulnerability history. The absence of any identified attack surface vectors like AJAX handlers, REST API routes, shortcodes, or cron events is a significant positive indicator. Furthermore, the plugin demonstrates good coding practices by utilizing prepared statements for all SQL queries and a high percentage of properly escaped output. The lack of dangerous functions, file operations, external HTTP requests, and a clean taint analysis further reinforce this positive assessment.  The plugin's vulnerability history is also pristine, with no recorded CVEs, suggesting a history of secure development or prompt patching.\n\nHowever, the complete absence of nonce checks and capability checks across all potential (though currently non-existent) entry points is a notable area for improvement. While the current attack surface is zero, if future development introduces any interaction points, the lack of these fundamental security mechanisms could become a critical vulnerability. The fact that 20% of output is not properly escaped, while not ideal, might be acceptable depending on the nature of those outputs and the sensitivity of the data involved.  Overall, this plugin appears to be securely developed for its current functionality, but a proactive approach to implementing authentication and authorization checks would enhance its resilience against future threats.",[195,198,200],{"reason":196,"points":197},"Missing nonce checks",5,{"reason":199,"points":197},"Missing capability checks",{"reason":201,"points":65},"Unescaped output (20% of total)","2026-03-16T18:08:07.926Z",{"wat":204,"direct":211},{"assetPaths":205,"generatorPatterns":207,"scriptPaths":208,"versionParams":209},[206],"\u002Fwp-content\u002Fplugins\u002Fcustom-favicon\u002Fjs\u002Fcustom-favicon-admin.js",[],[206],[210],"custom-favicon\u002Fjs\u002Fcustom-favicon-admin.js?ver=",{"cssClasses":212,"htmlComments":214,"htmlAttributes":215,"restEndpoints":227,"jsGlobals":228,"shortcodeOutput":229},[213],"button-upload",[],[216,217,218,219,220,221,222,223,224,225,226],"id=\"custom_favicon_settings[favicon_default_url]\"","name=\"custom_favicon_settings[favicon_default_url]\"","id=\"custom_favicon_settings[favicon_dark_url]\"","name=\"custom_favicon_settings[favicon_dark_url]\"","id=\"custom_favicon_settings[favicon_admin_url]\"","name=\"custom_favicon_settings[favicon_admin_url]\"","name=\"custom_favicon_settings[disable_site_icon]\"","id=\"custom_favicon_settings[apple_icon_frontend_url]\"","name=\"custom_favicon_settings[apple_icon_frontend_url]\"","id=\"custom_favicon_settings[apple_icon_backend_url]\"","name=\"custom_favicon_settings[apple_icon_backend_url]\"",[],[],[]]