[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fWvSoDuVYT_hNlMJMOT6pEJjiB1uqCSlSr5aXkJPgdI0":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":27,"vuln_count":28,"unpatched_count":29,"last_vuln_date":30,"fetched_at":31,"vulnerabilities":32,"developer":89,"crawl_stats":38,"alternatives":94,"analysis":203,"fingerprints":327},"favicon-by-realfavicongenerator","Favicon by RealFaviconGenerator","1.3.46","phbernard","https:\u002F\u002Fprofiles.wordpress.org\u002Fphbernard\u002F","\u003Cp>Generate and setup a favicon for desktop browsers, iPhone\u002FiPad, Android devices, Windows 8 tablets and more. In a matter of seconds, design an icon that looks great on all major platforms.\u003C\u002Fp>\n\u003Cp>Favicon is not just a single \u003Ccode>favicon.ico\u003C\u002Fcode> file dropped in the middle of your site. Nowadays, with so many different platforms and devices, you need a bunch of pictures to get the job done. With RealFaviconGenerator, generate all the icons you need for desktop browsers, iPhone\u002FiPad, Android devices, Windows 8 devices, and more.\u003C\u002Fp>\n\u003Cp>iOS devices use a high resolution Apple touch icon to illustrate bookmarks and home screen shortcuts. A first generation iPhone needs a 57×57 picture, whereas a brand new iPad with Retina screen looks for a 152×152 picture. Android Chrome also use these pictures if it finds them. Windows 8 takes another route with a dedicated set of icons and HTML declarations.\u003C\u002Fp>\n\u003Cp>Favicon is not only a matter of pictures with different resolutions. The various platforms coms with different UI guidelines. For example, the classic desktop favicons often use transparency. But iOS requires opaque icons. And Windows 8 has its own recommendations.\u003C\u002Fp>\n\u003Cp>Save hours of research and image edition with RealFaviconGenerator and its companion plugin. In a matter of seconds, you setup a favicon compatible with:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Windows (IE, Chrome, Firefox, Opera, Safari)\u003C\u002Fli>\n\u003Cli>Mac (Safari, Chrome, Firefox, Opera, Camino)\u003C\u002Fli>\n\u003Cli>iOS (Safari, Chrome, Coast)\u003C\u002Fli>\n\u003Cli>Android (Chrome, Firefox)\u003C\u002Fli>\n\u003Cli>Surface (IE)\u003C\u002Fli>\n\u003Cli>And more\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>We take compatibility very seriously. See http:\u002F\u002Frealfavicongenerator.net\u002Ffavicon_compatibility for the full list.\u003C\u002Fp>\n\u003Cp>This plugin relies on \u003Ca href=\"http:\u002F\u002Frealfavicongenerator.net\" rel=\"nofollow ugc\">RealFaviconGenerator\u003C\u002Fa> when you create your favicon. Browse its \u003Ca href=\"https:\u002F\u002Frealfavicongenerator.net\u002Fterms_of_service\" rel=\"nofollow ugc\">terms of service\u003C\u002Fa> and \u003Ca href=\"https:\u002F\u002Frealfavicongenerator.net\u002Fprivacy_policy\" rel=\"nofollow ugc\">privacy policy\u003C\u002Fa> for additional information.\u003C\u002Fp>\n\u003Ch3>Localization\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>English (\u003Ccode>en_EN\u003C\u002Fcode>) by \u003Ca href=\"http:\u002F\u002Frealfavicongenerator.net\u002F\" rel=\"nofollow ugc\">Philippe Bernard\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>French (\u003Ccode>fr_FR\u003C\u002Fcode>) by \u003Ca href=\"http:\u002F\u002Frealfavicongenerator.net\u002F\" rel=\"nofollow ugc\">Philippe Bernard\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Swedish (\u003Ccode>sv_SE\u003C\u002Fcode>) by \u003Ca href=\"https:\u002F\u002Ftwitter.com\u002Fwileryd\" rel=\"nofollow ugc\">Linus Wileryd\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Brazilian Portuguese (\u003Ccode>pt_BR\u003C\u002Fcode>) by Marcelo Volgarini, \u003Ca href=\"http:\u002F\u002Fwww.techload.com.br\u002Fcriacao-de-sites-ribeirao-preto\" rel=\"nofollow ugc\">Criação de Sites\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Dutch (\u003Ccode>nl_NL\u003C\u002Fcode>) by \u003Ca href=\"https:\u002F\u002Feco13.eu\" rel=\"nofollow ugc\">Axel Vanderhaeghen\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Danish (\u003Ccode>da_DK\u003C\u002Fcode>) by \u003Ca href=\"http:\u002F\u002Falexanderleohansen.dk\u002F\" rel=\"nofollow ugc\">Alexander Leo-Hansen\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Czech (\u003Ccode>cs_CZ\u003C\u002Fcode>) by an anonymous translator\u003C\u002Fli>\n\u003Cli>Polish (\u003Ccode>pl_PL\u003C\u002Fcode>) by \u003Ca href=\"http:\u002F\u002Fmaciej-gryniuk.tk\u002F\" rel=\"nofollow ugc\">Maciej Gryniuk\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Russian (\u003Ccode>ru_RU\u003C\u002Fcode>) by Natasha Diatko, \u003Ca href=\"https:\u002F\u002Fwww.ustarcash.com\" rel=\"nofollow ugc\">UStarCash\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Indonesian (\u003Ccode>id_ID\u003C\u002Fcode>) by \u003Ca href=\"https:\u002F\u002Fwww.chameleonjohn.com\u002F\" rel=\"nofollow ugc\">Jordan Silaen\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Ca href=\"http:\u002F\u002Fcoderisk.com\u002Fwp\u002Fplugin\u002Ffavicon-by-realfavicongenerator\u002FRIPS-TVYsdQTMAr\" rel=\"nofollow ugc\">\u003C\u002Fa>\u003C\u002Fp>\n","Create and install your favicon for all platforms: PC\u002FMac, iPhone\u002FiPad, Android devices, Windows 8 tablets...",200000,5216829,98,800,"2026-03-02T16:20:00.000Z","7.0","3.5","",[20,21,22,23,24],"apple-touch-icon","favicon","icon","iphone","logo","http:\u002F\u002Frealfavicongenerator.net\u002Fextensions\u002Fwordpress","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ffavicon-by-realfavicongenerator.1.3.46.zip",96,4,0,"2024-04-10 00:00:00","2026-03-15T15:16:48.613Z",[33,49,64,75],{"id":34,"url_slug":35,"title":36,"description":37,"plugin_slug":4,"theme_slug":38,"affected_versions":39,"patched_in_version":40,"severity":41,"cvss_score":42,"cvss_vector":43,"vuln_type":44,"published_date":30,"updated_date":45,"references":46,"days_to_patch":48},"CVE-2024-31422","favicon-cross-site-request-forgery-to-notice-dismissal","Favicon \u003C= 1.3.29 - Cross-Site Request Forgery to Notice Dismissal","The Favicon plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.3.29. This is due to missing or incorrect nonce validation on the process_ignored_notice() function. This makes it possible for unauthenticated attackers to dismiss notices via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.",null,"\u003C=1.3.29","1.3.30","medium",4.3,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:L\u002FA:N","Cross-Site Request Forgery (CSRF)","2024-04-17 12:56:19",[47],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F4a5d59da-dcac-44b4-a697-38eef650c6de?source=api-prod",8,{"id":50,"url_slug":51,"title":52,"description":53,"plugin_slug":4,"theme_slug":38,"affected_versions":54,"patched_in_version":55,"severity":41,"cvss_score":56,"cvss_vector":57,"vuln_type":58,"published_date":59,"updated_date":60,"references":61,"days_to_patch":63},"CVE-2022-0471","favicon-by-realfavicongenerator-reflected-cross-site-scripting","Favicon by RealFaviconGenerator \u003C= 1.3.22 - Reflected Cross-Site Scripting","The Favicon by RealFaviconGenerator WordPress plugin before 1.3.23 does not properly sanitise and escape the json_result_url parameter before outputting it back in the Favicon admin dashboard, leading to a Reflected Cross-Site Scripting issue","\u003C1.3.23","1.3.23",6.1,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N","Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","2022-03-21 00:00:00","2024-01-22 19:56:02",[62],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F0ebc4c47-a286-4135-90ee-eccad8579661?source=api-prod",673,{"id":65,"url_slug":66,"title":67,"description":68,"plugin_slug":4,"theme_slug":38,"affected_versions":69,"patched_in_version":70,"severity":41,"cvss_score":56,"cvss_vector":57,"vuln_type":58,"published_date":71,"updated_date":60,"references":72,"days_to_patch":74},"CVE-2021-24437","favicon-by-realfavicongenerator-reflected-cross-site-scripting-3","Favicon by RealFaviconGenerator \u003C= 1.3.21 - Reflected Cross-Site Scripting","The Favicon by RealFaviconGenerator WordPress plugin through 1.3.20 does not sanitise or escape one of its parameter before outputting it back in the response, leading to a Reflected Cross-Site Scripting (XSS) which is executed in the context of a logged administrator.","\u003C1.3.21","1.3.21","2021-07-27 00:00:00",[73],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002Fb14cada2-5d04-47a1-b648-048fcbabd2b5?source=api-prod",910,{"id":76,"url_slug":77,"title":78,"description":79,"plugin_slug":4,"theme_slug":38,"affected_versions":80,"patched_in_version":81,"severity":82,"cvss_score":83,"cvss_vector":84,"vuln_type":58,"published_date":85,"updated_date":60,"references":86,"days_to_patch":88},"CVE-2015-10116","favicon-by-realfavicongenerator-reflected-cross-site-scripting-2","Favicon by RealFaviconGenerator \u003C= 1.2.12 - Reflected Cross-Site Scripting","The Favicon by RealFaviconGenerator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘json_result_url’ parameter in versions before 1.2.13 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.","\u003C1.2.13","1.2.13","high",7.1,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:L","2015-04-01 00:00:00",[87],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F6b78e1e8-2298-4889-955c-e9b7472ffbff?source=api-prod",3219,{"slug":7,"display_name":7,"profile_url":8,"plugin_count":90,"total_installs":11,"avg_security_score":27,"avg_patch_time_days":91,"trust_score":92,"computed_at":93},1,1203,76,"2026-04-04T03:58:08.084Z",[95,115,135,160,182],{"slug":96,"name":97,"version":98,"author":99,"author_profile":100,"description":101,"short_description":102,"active_installs":103,"downloaded":104,"rating":105,"num_ratings":28,"last_updated":106,"tested_up_to":107,"requires_at_least":108,"requires_php":18,"tags":109,"homepage":112,"download_link":113,"security_score":105,"vuln_count":90,"unpatched_count":29,"last_vuln_date":114,"fetched_at":31},"multicons","Multicons","6.0","doc4","https:\u002F\u002Fprofiles.wordpress.org\u002Fdoc4\u002F","\u003Cp>Now includes favicons for Android devices. Completely re-written in version 4.2 Multicons is a multi-favicon code generator which automatically inserts the necessary meta tags for both favicons (site-wide and\u002For dashboard) and Apple Touch \u002F iPhone icons. Please note that it will be necessary to update your icon link locations.\u003C\u002Fp>\n\u003Cp>Not sure what a favicon is? “A favicon (short for favorites icon), also known as a shortcut icon, website icon, URL icon, or bookmark icon is a 16×16 or 32×32 pixel square icon associated with a particular website or webpage. A web designer can create such an icon and install it into a website (or webpage) by several means, and most graphical web browsers will then make use of it. Browsers that provide favicon support typically display a page’s favicon in the browser’s address bar and next to the page’s name in a list of bookmarks. Browsers that support a tabbed document interface  typically show a page’s favicon next to the page’s title on the tab. Some programs allow the user to select an icon of their own from the hard drive and associate it with a website.” – Wikipedia\u003C\u002Fp>\n\u003Cp>Favicons have a subtle, if small, role in building the branding of a website. When a user takes notice of a favicon it can often be a good indication they have come to the right place serving as visual representation of a website not only in the browser address bar but also when sifting through bookmarks. It is no secret that our eyes gravitate towards images before text and not just on the web but iPhones and iPads as well.\u003C\u002Fp>\n\u003Ch4>The meta data output by Multicons:\u003C\u002Fh4>\n\u003Ch4>Website Favicon:\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Location: Website [and Dashboard if no Dashboard Favicon is specified]\u003C\u002Fli>\n\u003Cli>Meta tags generated:\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>link rel=”shortcut icon” href=”http:\u002F\u002Fwww.yoursite.com\u002Ffavicon.ico”\u003Cbr \u002F>\nlink rel=”icon” type=”image\u002Fpng” href=”http:\u002F\u002Fwww.yoursite.com\u002Ffavicon.ico” \u002F\u003C\u002Fp>\n\u003Ch4>Dashboard Favicon:\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Location: Dashboard Only\u003C\u002Fli>\n\u003Cli>Meta tag generated:\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>link rel=”shortcut icon” href=”http:\u002F\u002Fwww.yoursite.com\u002Fwp-content\u002Ffavicon.ico”\u003C\u002Fp>\n\u003Ch4>Apple Touch Original \u002F iPhone Icon\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Location: Website Only\u003C\u002Fli>\n\u003Cli>iDevice Effects Added such as Gloss and Rounded Corners\u003C\u002Fli>\n\u003Cli>Meta tag generated:\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>link rel=”apple-touch-icon” href=”http:\u002F\u002Fwww.yoursite.com\u002Fapple-touch-icon.png”\u003C\u002Fp>\n\u003Ch4>Apple Touch Precomposed \u002F iPhone Icon\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Location: Website Only\u003C\u002Fli>\n\u003Cli>No iDevice Effects Added\u003C\u002Fli>\n\u003Cli>Meta tag generated:\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>link rel=”apple-touch-icon” href=”http:\u002F\u002Fwww.yoursite.com\u002Fapple-touch-icon.png”\u003C\u002Fp>\n\u003Ch4>Android High Resolution Icon\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Location: Website Only\u003C\u002Fli>\n\u003Cli>Meta tag generated:\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>link rel=”icon” href=”http:\u002F\u002Fwww.yoursite.com\u002Ficon-hires.png”\u003C\u002Fp>\n\u003Ch4>Android Regular Icon\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Location: Website Only\u003C\u002Fli>\n\u003Cli>Meta tag generated:\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>link rel=”icon” href=”http:\u002F\u002Fwww.yoursite.com\u002Ficon-reg.png”\u003C\u002Fp>\n\u003Cp>If no image links are provided then no code is output thus, leaving a settings field blank will not bloat the site down with empty meta tags. If an Admin image is not provided this option will default to the Site-Wide Favicon.\u003C\u002Fp>\n\u003Cp>This plugin includes sample files to assist in building the required images. We have included templates for the following: App Touch icons, Regular Favicons, and Android Favicons. These sample images are pre-sized and ready for a creative mind. Open these files in a graphics editor of your choice, make the necessary changes, save them in their appropriate file format and upload them.\u003C\u002Fp>\n\u003Ch4>Plugin URL\u003C\u002Fh4>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fdoc4design.com\u002Fmulticons\u002F\" rel=\"nofollow ugc\">Multicons\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch4>Screenshots\u003C\u002Fh4>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fdoc4design.com\u002Fmulticons\u002F\" rel=\"nofollow ugc\">View Screenshots\u003C\u002Fa>\u003C\u002Fp>\n","Multicons is a multi-favicon code generator which automatically inserts the necessary meta tags for favicons.",2000,120150,100,"2025-12-05T19:30:00.000Z","6.9.4","2.7",[110,111,20,21,22],"apple-favicon","apple-icon","https:\u002F\u002Fdoc4design.com\u002Fmulticons\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmulticons.6.0.zip","2015-08-25 00:00:00",{"slug":116,"name":117,"version":118,"author":119,"author_profile":120,"description":121,"short_description":122,"active_installs":123,"downloaded":124,"rating":105,"num_ratings":90,"last_updated":125,"tested_up_to":126,"requires_at_least":127,"requires_php":18,"tags":128,"homepage":132,"download_link":133,"security_score":134,"vuln_count":29,"unpatched_count":29,"last_vuln_date":38,"fetched_at":31},"change-logo-login","wp-logo-login | تغییر لوگو ورود و سربرگ","2.0.1","Amirreza Heydari","https:\u002F\u002Fprofiles.wordpress.org\u002Fclarotm\u002F","\u003Cp>With the help of this plugin, you can change the logo of the WordPress admin section, this plugin makes your work very easy and you can do it with a few clicks.\u003C\u002Fp>\n","With the help of this plugin, you can change the logo of the WordPress admin section.",10,1694,"2022-10-15T11:29:00.000Z","5.7.15","3.0.1",[21,129,24,130,131],"login","replace","replacelogo","http:\u002F\u002Fclarotm.ir","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fchange-logo-login.zip",85,{"slug":136,"name":137,"version":138,"author":139,"author_profile":140,"description":141,"short_description":142,"active_installs":143,"downloaded":144,"rating":145,"num_ratings":146,"last_updated":147,"tested_up_to":148,"requires_at_least":149,"requires_php":18,"tags":150,"homepage":155,"download_link":156,"security_score":157,"vuln_count":158,"unpatched_count":29,"last_vuln_date":159,"fetched_at":31},"all-in-one-favicon","All In One Favicon","4.8","Garrett Grimm","https:\u002F\u002Fprofiles.wordpress.org\u002Fgrimmdude\u002F","\u003Cp>\u003Ca href=\"https:\u002F\u002Fappsumo.com\u002Fsearch?tags=wordpress&utm_source=sumo&utm_medium=wp-widget&utm_campaign=all-in-one-favicon\" rel=\"nofollow ugc\">Check out the latest WordPress deals for your site.\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>All In One Favicon adds favicons to your site and your admin pages.\u003Cbr \u002F>\nYou can either use favicons you already uploaded or use the builtin upload mechanism to upload a favicon to your WordPress installation.\u003C\u002Fp>\n\u003Cp>All three favicon types are supported – .ico, .png and .gif (may be animated)\u003Cbr \u002F>\nAlso, Apple Touch Icons are supported.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Localization\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Bahasa Indonesia (\u003Ccode>id_ID\u003C\u002Fcode>) by \u003Ca href=\"http:\u002F\u002Fmovableid.com\u002F\" rel=\"nofollow ugc\">EKO\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Czech (\u003Ccode>cs_CZ\u003C\u002Fcode>) by \u003Ca href=\"http:\u002F\u002Fwww.neteyes.cz\" rel=\"nofollow ugc\">Neteyes\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Danish (\u003Ccode>da_DK\u003C\u002Fcode>) by \u003Ca href=\"http:\u002F\u002Fwordpress.blogos.dk\u002F\" rel=\"nofollow ugc\">GeorgWP\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Dutch (\u003Ccode>nl_NL\u003C\u002Fcode>) by Pieter Carette\u003C\u002Fli>\n\u003Cli>English (\u003Ccode>en_EN\u003C\u002Fcode>) by \u003Ca href=\"http:\u002F\u002Fwww.techotronic.de\u002F\" rel=\"nofollow ugc\">Arne Franken\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>French (\u003Ccode>fr_FR\u003C\u002Fcode>) by Christophe Guilloux\u003C\u002Fli>\n\u003Cli>German (\u003Ccode>de_DE\u003C\u002Fcode>) by \u003Ca href=\"http:\u002F\u002Fwww.techotronic.de\u002F\" rel=\"nofollow ugc\">Arne Franken\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Hebrew (\u003Ccode>he_IL\u003C\u002Fcode>) by \u003Ca href=\"http:\u002F\u002Fwww.atar4u.com\" rel=\"nofollow ugc\">Ahrale\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Italian (\u003Ccode>it_IT\u003C\u002Fcode>) by \u003Ca href=\"http:\u002F\u002Fwww.valeriovendrame.it\u002F\" rel=\"nofollow ugc\">Valerio Vendrame\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Polish (\u003Ccode>pl_PL\u003C\u002Fcode>) by \u003Ca href=\"http:\u002F\u002Fwww.facebook.com\u002Fpiniu69\u002F\" rel=\"nofollow ugc\">Piotr Czarnecki\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Portuguese (\u003Ccode>pt_PT\u003C\u002Fcode>) by \u003Ca href=\"http:\u002F\u002Fwww.miguelpatricio.com\u002F\" rel=\"nofollow ugc\">Miguel Ângelo Patricio\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Serbian (\u003Ccode>sr_RS\u003C\u002Fcode>) by \u003Ca href=\"http:\u002F\u002Fdralvaro.com\u002F\" rel=\"nofollow ugc\">Balkanboy Media team\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Simplified Chinese (\u003Ccode>zh_CN\u003C\u002Fcode>) by \u003Ca href=\"http:\u002F\u002Fsparanoid.com\u002F\" rel=\"nofollow ugc\">Tunghsiao Liu\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Spanish (\u003Ccode>es_ES\u003C\u002Fcode>) by Eddy Ernesto Ríos\u003C\u002Fli>\n\u003Cli>Slovak (\u003Ccode>sk_SK\u003C\u002Fcode>) by \u003Ca href=\"http:\u002F\u002Fwww.brozman.sk\u002Fblog\" rel=\"nofollow ugc\">Viliam Brozman\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Swedish (\u003Ccode>sv_SE\u003C\u002Fcode>) by \u003Ca href=\"http:\u002F\u002Fwww.theindiaexperience.se\u002F\" rel=\"nofollow ugc\">Christian Nilsson\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Turkish (\u003Ccode>tr_TR\u003C\u002Fcode>) by \u003Ca href=\"http:\u002F\u002Framerta.com\" rel=\"nofollow ugc\">Ömer Faruk Karabulut\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Is your native language missing?\u003Cbr \u002F>\nTranslating the plugin is easy if you understand english and are fluent in another language.\u003Cbr \u002F>\nI described in the \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fall-in-one-favicon\u002Ffaq\u002F\" rel=\"ugc\">FAQ\u003C\u002Fa> how the translation works.\u003C\u002Fp>\n","Easily add a Favicon to your site and the WordPress admin pages. Complete with upload functionality. Supports all three Favicon types (ico,png,gif).",70000,1495524,90,82,"2023-08-08T02:27:00.000Z","6.2.9","2.8",[151,152,21,153,154],"admin","blog","image","theme","http:\u002F\u002Fwww.techotronic.de\u002Fplugins\u002Fall-in-one-favicon\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fall-in-one-favicon.4.8.zip",84,2,"2023-02-23 00:00:00",{"slug":161,"name":162,"version":163,"author":164,"author_profile":165,"description":166,"short_description":167,"active_installs":168,"downloaded":169,"rating":170,"num_ratings":171,"last_updated":172,"tested_up_to":173,"requires_at_least":174,"requires_php":18,"tags":175,"homepage":178,"download_link":179,"security_score":180,"vuln_count":90,"unpatched_count":29,"last_vuln_date":181,"fetched_at":31},"favicon-rotator","Favicon Rotator","1.2.11","Archetyped","https:\u002F\u002Fprofiles.wordpress.org\u002Farchetyped\u002F","\u003Cp>Favicon Rotator makes it easy to customize the favicon for your site.  Just add a favicon via the administration page and it will be displayed whenever someone visits your site.\u003C\u002Fp>\n\u003Ch4>Highlights\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>New: Set icon for Touch devices (Android, iPhone, iPad, iPod Touch, etc.)\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>Simply point and click to add a favicon to your site\u003C\u002Fli>\n\u003Cli>Supports adding \u003Cstrong>multiple icons\u003C\u002Fstrong>, from which a \u003Cstrong>randomly selected\u003C\u002Fstrong> favicon will be displayed.\u003C\u002Fli>\n\u003Cli>Automatic icon conversion for large images (smaller files and faster loading)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Usage\u003C\u002Fh4>\n\u003Col>\n\u003Cli>Go to \u003Cstrong>Theme > Favicon\u003C\u002Fstrong> admin page to add\u002Fupload image(s) to use for the favicon\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>\u003Cstrong>That’s it! The favicon will be displayed in visitors’ browsers when they visit your site\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Notes\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Verify that your theme uses the \u003Ccode>wp_head()\u003C\u002Fcode> template tag\u003C\u002Fli>\n\u003Cli>If you add multiple icons, then a randomly selected icon will be displayed each time the site is loaded\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Ca href=\"http:\u002F\u002Farchetyped.com\u002Ftools\u002Ffavicon-rotator\u002F\" rel=\"nofollow ugc\">More Information on Favicon Rotator’s Official Page\u003C\u002Fa>\u003C\u002Fp>\n","Easily set site favicon and even rotate through multiple icons",20000,289358,86,12,"2024-07-15T22:20:00.000Z","6.6.5","5.4",[176,21,22,153,177],"customization","mobile","http:\u002F\u002Farchetyped.com\u002Ftools\u002Ffavicon-rotator\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ffavicon-rotator.1.2.11.zip",92,"2024-03-26 00:00:00",{"slug":183,"name":184,"version":185,"author":186,"author_profile":187,"description":188,"short_description":189,"active_installs":190,"downloaded":191,"rating":105,"num_ratings":158,"last_updated":192,"tested_up_to":193,"requires_at_least":194,"requires_php":195,"tags":196,"homepage":201,"download_link":202,"security_score":105,"vuln_count":29,"unpatched_count":29,"last_vuln_date":38,"fetched_at":31},"wp-favicon-remover","WP Favicon Remover","1.0.3","Hiroaki Miyashita","https:\u002F\u002Fprofiles.wordpress.org\u002Fhiroaki-miyashita\u002F","\u003Cp>The WP Favicon Remover plugin adds the functionality to remove the WordPress default favicon since WordPress 5.4. If the favicon does not change after the plugin install, you have to clear the browser cache. If you use Site Icon via Theme Customizer, just uninstall this plugin.\u003C\u002Fp>\n\u003Ch4>Documentation in Japanese\u003C\u002Fh4>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwpgogo.com\u002Fplugin\u002Fwp_favicon_remover.html\" rel=\"nofollow ugc\">WP Favicon Remover\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Known Issues \u002F Bugs\u003C\u002Fh3>\n\u003Cp>Nothing.\u003C\u002Fp>\n\u003Ch3>Uninstall\u003C\u002Fh3>\n\u003Col>\n\u003Cli>Deactivate the plugin\u003C\u002Fli>\n\u003Cli>That’s it! 🙂\u003C\u002Fli>\n\u003C\u002Fol>\n","This plugin adds the functionality to remove the WordPress default favicon since WordPress 5.4.",10000,29675,"2025-11-22T04:22:00.000Z","6.8.5","5.3","5.2.4",[197,198,21,199,200],"5-4","delete","ico","wordpress","https:\u002F\u002Fwpgogo.com\u002Fplugin\u002Fwp_favicon_remover.html","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-favicon-remover.1.0.3.zip",{"attackSurface":204,"codeSignals":255,"taintFlows":277,"riskAssessment":311,"analyzedAt":326},{"hooks":205,"ajaxHandlers":251,"restRoutes":252,"shortcodes":253,"cronEvents":254,"entryPointCount":29,"unprotectedCount":29},[206,212,216,221,224,228,232,236,241,243,246,249],{"type":207,"name":208,"callback":209,"file":210,"line":211},"action","init","load_plugin_textdomain","admin\\class-favicon-by-realfavicongenerator-admin.php",22,{"type":207,"name":213,"callback":214,"file":210,"line":215},"admin_head","add_favicon_markups",24,{"type":217,"name":218,"callback":219,"file":210,"line":220},"filter","genesis_pre_load_favicon","return_empty_favicon_for_genesis",27,{"type":207,"name":208,"callback":222,"file":210,"line":223},"register_admin_actions",33,{"type":207,"name":225,"callback":226,"file":210,"line":227},"admin_menu","create_favicon_settings_menu",62,{"type":207,"name":229,"callback":230,"file":210,"line":231},"admin_notices","display_update_notice",77,{"type":207,"name":233,"callback":234,"file":210,"line":235},"admin_init","process_ignored_notice",78,{"type":207,"name":237,"callback":238,"file":239,"line":240},"plugins_loaded","get_instance","favicon-by-realfavicongenerator.php",40,{"type":207,"name":237,"callback":238,"file":239,"line":242},51,{"type":207,"name":244,"callback":214,"file":245,"line":171},"wp_head","public\\class-favicon-by-realfavicongenerator.php",{"type":207,"name":247,"callback":214,"file":245,"line":248},"login_head",13,{"type":217,"name":218,"callback":219,"file":245,"line":250},16,[],[],[],[],{"dangerousFunctions":256,"sqlUsage":257,"outputEscaping":262,"fileOperations":275,"externalRequests":28,"nonceChecks":158,"capabilityChecks":29,"bundledLibraries":276},[],{"prepared":29,"raw":90,"locations":258},[259],{"file":260,"line":220,"context":261},"uninstall.php","$wpdb->get_results() with variable interpolation",{"escaped":263,"rawEcho":28,"locations":264},46,[265,268,270,272],{"file":210,"line":266,"context":267},229,"raw output",{"file":210,"line":269,"context":267},230,{"file":210,"line":271,"context":267},238,{"file":273,"line":274,"context":267},"admin\\views\\appearance.php",271,9,[],[278,301],{"entryPoint":279,"graph":280,"unsanitizedCount":90,"severity":41},"install_new_favicon (admin\\class-favicon-by-realfavicongenerator-admin.php:186)",{"nodes":281,"edges":297},[282,287,291],{"id":283,"type":284,"label":285,"file":210,"line":286},"n0","source","$_REQUEST",196,{"id":288,"type":289,"label":290,"file":210,"line":286},"n1","transform","→ download_result_json()",{"id":292,"type":293,"label":294,"file":210,"line":295,"wp_function":296},"n2","sink","wp_remote_get() [SSRF]",173,"wp_remote_get",[298,300],{"from":283,"to":288,"sanitized":299},false,{"from":288,"to":292,"sanitized":299},{"entryPoint":302,"graph":303,"unsanitizedCount":90,"severity":41},"\u003Cclass-favicon-by-realfavicongenerator-admin> (admin\\class-favicon-by-realfavicongenerator-admin.php:0)",{"nodes":304,"edges":308},[305,306,307],{"id":283,"type":284,"label":285,"file":210,"line":286},{"id":288,"type":289,"label":290,"file":210,"line":286},{"id":292,"type":293,"label":294,"file":210,"line":295,"wp_function":296},[309,310],{"from":283,"to":288,"sanitized":299},{"from":288,"to":292,"sanitized":299},{"summary":312,"deductions":313},"The plugin 'favicon-by-realfavicongenerator' v1.3.46 exhibits a mixed security posture.  While the static analysis shows a remarkably small attack surface with no exposed AJAX handlers, REST API routes, shortcodes, or cron events, and the taint analysis found no critical or high-severity issues, there are significant concerns related to its past vulnerability history and code signals.  The plugin has a history of 4 known CVEs, including one high-severity and three medium-severity vulnerabilities, primarily related to Cross-Site Request Forgery and Cross-Site Scripting.  The most recent vulnerability was patched in April 2024, suggesting active patching, but the recurring nature of these vulnerability types is a concern.  Furthermore, the presence of SQL queries not using prepared statements and a lack of capability checks on any entry points (though the entry point count is zero) are weaknesses that, if an attack vector were to emerge, could be exploited.  The high percentage of properly escaped output is a strength, but it does not entirely mitigate the risks posed by the historical vulnerabilities and the raw SQL query.",[314,317,319,322,324],{"reason":315,"points":316},"1 High severity CVE (unpatched)",15,{"reason":318,"points":316},"3 Medium severity CVEs (unpatched)",{"reason":320,"points":321},"SQL queries without prepared statements",5,{"reason":323,"points":321},"0 Capability checks on entry points",{"reason":325,"points":321},"Flows with unsanitized paths","2026-03-16T17:03:10.904Z",{"wat":328,"direct":339},{"assetPaths":329,"generatorPatterns":333,"scriptPaths":334,"versionParams":335},[330,331,332],"\u002Fwp-content\u002Fplugins\u002Ffavicon-by-realfavicongenerator\u002Fpublic\u002Fcss\u002Fsite.css","\u002Fwp-content\u002Fplugins\u002Ffavicon-by-realfavicongenerator\u002Fpublic\u002Fjs\u002Fsite.js","\u002Fwp-content\u002Fplugins\u002Ffavicon-by-realfavicongenerator\u002Fadmin\u002Fassets\u002Fcss\u002Fadmin.css",[5],[],[336,337,338],"favicon-by-realfavicongenerator\u002Fpublic\u002Fcss\u002Fsite.css?ver=","favicon-by-realfavicongenerator\u002Fpublic\u002Fjs\u002Fsite.js?ver=","favicon-by-realfavicongenerator\u002Fadmin\u002Fassets\u002Fcss\u002Fadmin.css?ver=",{"cssClasses":340,"htmlComments":345,"htmlAttributes":349,"restEndpoints":352,"jsGlobals":354,"shortcodeOutput":356},[341,342,343,344],"favicon_settings_page","fbrfg-settings-wrap","favicon_appearance_page","fbrfg-appearance-wrap",[346,347,348],"\u003C!-- Favicon by RealFaviconGenerator -->","\u003C!-- Favicon settings -->","\u003C!-- Favicon Appearance settings -->",[350,351],"data-plugin-slug=\"favicon-by-realfavicongenerator\"","data-realfavicongenerator-ajax-url",[353],"\u002Fwp-json\u002Ffavicon-by-realfavicongenerator\u002Fv1\u002Fsettings",[355],"window.FaviconByRealFaviconGeneratorAdmin",[]]