[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fVKAmVNX3E7U77DlMTdyJ1o7FmwV4zwMzWEyrWTlD1VI":3,"$fcHPqOHADZjXDmN5ZdfmHIVGphHsIpyVpIEaKr7E3R94":241,"$f0ZBHPqD8gmGy-gYMl2B0v49zW9j2DauOpD4lU39zTXI":246},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":11,"num_ratings":11,"last_updated":13,"tested_up_to":14,"requires_at_least":15,"requires_php":16,"tags":17,"homepage":23,"download_link":24,"security_score":25,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":27,"discovery_status":28,"vulnerabilities":29,"developer":30,"crawl_stats":26,"alternatives":36,"analysis":130,"fingerprints":219},"forma-favicon","Forma Favicon","1.0.3","Justus Deitert","https:\u002F\u002Fprofiles.wordpress.org\u002Fjustusdeitert\u002F","\u003Cp>Forma Favicon is a modern favicon generator built into your WordPress admin. Upload any image — PNG, JPEG, GIF, WebP, or SVG — and the plugin generates every favicon format and size your site needs, all from a single source.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>What it generates:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ccode>favicon.ico\u003C\u002Fcode> with 16×16, 32×32, and 48×48 embedded\u003C\u002Fli>\n\u003Cli>Apple Touch Icon (180×180)\u003C\u002Fli>\n\u003Cli>Android Chrome icons (192×192 and 512×512)\u003C\u002Fli>\n\u003Cli>\u003Ccode>site.webmanifest\u003C\u002Fcode> for PWA support\u003C\u002Fli>\n\u003Cli>\u003Ccode>browserconfig.xml\u003C\u002Fcode> for Windows tiles\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Icon styling controls:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Adjustable padding (0–40%) to give your icon breathing room\u003C\u002Fli>\n\u003Cli>Border radius (0–50%) for rounded or circular icons\u003C\u002Fli>\n\u003Cli>Custom icon background color behind transparent images\u003C\u002Fli>\n\u003Cli>Configurable theme color and background color for manifests\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Live preview:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Browser-tab mockup shows exactly how your favicon will look\u003C\u002Fli>\n\u003Cli>Light and dark mode toggle to preview against both backgrounds\u003C\u002Fli>\n\u003Cli>Changes update in real time via client-side canvas rendering\u003C\u002Fli>\n\u003Cli>“Unsaved” indicator when settings differ from the generated output\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Smart features:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Detects and resolves conflicts with other favicon plugins\u003C\u002Fli>\n\u003Cli>Automatically overrides the WordPress default Site Icon\u003C\u002Fli>\n\u003Cli>SVG source images are rasterized client-side before upload\u003C\u002Fli>\n\u003Cli>Clean admin page under \u003Cstrong>Appearance \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan> Favicon\u003C\u002Fstrong>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Source Code\u003C\u002Fh3>\n\u003Cp>The full uncompressed source code (TypeScript\u002FTSX, SCSS) and build configuration are available on GitHub:\u003Cbr \u002F>\nhttps:\u002F\u002Fgithub.com\u002Fjustusdeitert\u002Fforma-favicon\u003C\u002Fp>\n\u003Cp>The \u003Ccode>build\u002F\u003C\u002Fcode> directory is generated from \u003Ccode>src\u002F\u003C\u002Fcode> using \u003Ccode>@wordpress\u002Fscripts\u003C\u002Fcode> with a custom webpack configuration.\u003C\u002Fp>\n\u003Cp>To build from source:\u003C\u002Fp>\n\u003Col>\n\u003Cli>Clone the repository: \u003Ccode>git clone https:\u002F\u002Fgithub.com\u002Fjustusdeitert\u002Fforma-favicon.git\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>Install dependencies: \u003Ccode>npm install\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>Run the build: \u003Ccode>npm run build\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Fol>\n","Favicon generator — upload a source, customize styling, and generate all required favicon sizes including ICO, Apple Touch, and Android Chrome.",0,190,"2026-04-13T20:39:00.000Z","6.9.4","6.2","7.4",[18,19,20,21,22],"browser-icon","favicon","generator","icon","site-icon","https:\u002F\u002Fgithub.com\u002Fjustusdeitert\u002Fforma-favicon","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fforma-favicon.1.0.3.zip",100,null,"2026-04-16T10:56:18.058Z","no_bundle",[],{"slug":31,"display_name":7,"profile_url":8,"plugin_count":32,"total_installs":11,"avg_security_score":25,"avg_patch_time_days":33,"trust_score":34,"computed_at":35},"justusdeitert",1,30,94,"2026-05-20T02:11:39.304Z",[37,57,75,93,111],{"slug":38,"name":39,"version":40,"author":41,"author_profile":42,"description":43,"short_description":44,"active_installs":45,"downloaded":46,"rating":25,"num_ratings":47,"last_updated":48,"tested_up_to":49,"requires_at_least":50,"requires_php":51,"tags":52,"homepage":54,"download_link":55,"security_score":56,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":27},"favhero-favicon-generator","Heroic Favicon Generator","1.7.1","HeroThemes","https:\u002F\u002Fprofiles.wordpress.org\u002Fherothemes\u002F","\u003Cp>“The best Favicon plugin” ★★★★★ – WordPress.org user review.\u003C\u002Fp>\n\u003Cp>Simplified and powerful favicons for WordPress.\u003C\u002Fp>\n\u003Cp>Add favicons in a flash with Heroic Favicon Generator. This plugin automatically generates favicons using images you upload or select from the media gallery. Support is provided for all modern favicons and automatic generation of the cross-compatible .ico with multiple embedded sizes. Supports different icons for various devices.\u003C\u002Fp>\n\u003Cp>Be sure to check the installation and FAQ section to get started and if you have any issues.\u003C\u002Fp>\n\u003Cblockquote>\n\u003Cp>\u003Cstrong>About HeroThemes\u003C\u002Fstrong>\u003Cbr \u002F>\n  \u003Ca href=\"https:\u002F\u002Fherothemes.com\u002F\" rel=\"nofollow ugc\">HeroThemes\u003C\u002Fa> develop some of the best WordPress plugins, tools and themes, with over 26,000 customers and counting. If you like this plugin and want more news, themes and plugins, you can do the following:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Get the \u003Ca href=\"https:\u002F\u002Fherothemes.com\u002Fthemes\u002Fknowall-wordpress-knowledge-base\u002F?utm_source=wprepo&utm_medium=link&utm_campaign=heroic-favicon\" rel=\"nofollow ugc\">KnowAll Knowledge Base theme for WordPress\u003C\u002Fa>, create a WordPress powered knowledge base site in minutes.\u003C\u002Fli>\n\u003Cli>Check out the \u003Ca href=\"https:\u002F\u002Fherothemes.com\u002Fplugins\u002Fheroic-wordpress-knowledge-base\u002F?utm_source=wprepo&utm_medium=link&utm_campaign=heroic-favicon\" rel=\"nofollow ugc\">best WordPress Knowledge Base plugin\u003C\u002Fa>.\u003C\u002Fli>\n\u003Cli>Answer Frequently Asked Questions with \u003Ca href=\"https:\u002F\u002Fherothemes.com\u002Fplugins\u002Fwordpress-faq-plugin\u002F?utm_source=wprepo&utm_medium=link&utm_campaign=heroic-favicon\" rel=\"nofollow ugc\">Heroic FAQs plugin for WordPress\u003C\u002Fa>.\u003C\u002Fli>\n\u003Cli>Follow HeroThemes on \u003Ca href=\"https:\u002F\u002Ftwitter.com\u002Fherothemes\" rel=\"nofollow ugc\">Twitter\u003C\u002Fa> & \u003Ca href=\"https:\u002F\u002Fwww.facebook.com\u002Fherothemes\" rel=\"nofollow ugc\">Facebook\u003C\u002Fa>.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fblockquote>\n","Heroic Favicon Generator is your one-click favicon generator for WordPress.",7000,90796,17,"2022-05-16T13:07:00.000Z","6.0.11","5.5","",[19,53,20,21],"favourites","https:\u002F\u002Fwordpress.org\u002Fextend\u002Fplugins\u002Fht-ultimate-favicon\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ffavhero-favicon-generator.1.7.1.zip",85,{"slug":58,"name":59,"version":60,"author":61,"author_profile":62,"description":63,"short_description":64,"active_installs":65,"downloaded":66,"rating":25,"num_ratings":47,"last_updated":67,"tested_up_to":68,"requires_at_least":69,"requires_php":16,"tags":70,"homepage":73,"download_link":74,"security_score":25,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":27},"custom-favicon","Custom Favicon – Easily Add a Favicon in WordPress","1.1.0","Harish Chouhan","https:\u002F\u002Fprofiles.wordpress.org\u002Fhchouhan\u002F","\u003Cp>\u003Cstrong>Custom Favicon\u003C\u002Fstrong> lets you upload and manage favicons for your WordPress website, admin area, and login screen using the native media uploader. Unlike the built-in Site Icon feature, this plugin gives you full control — including support for separate frontend and backend icons, Apple touch icons, dark mode icons, and SVG format.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Features include:\u003C\u002Fstrong>\u003Cbr \u002F>\n– Upload custom favicon for frontend (browser tab icon)\u003Cbr \u002F>\n– Upload separate favicon for WordPress Dashboard and login page\u003Cbr \u002F>\n– Upload Apple touch icons for iOS devices\u003Cbr \u002F>\n– Upload dark mode specific favicon\u003Cbr \u002F>\n– SVG favicon support\u003Cbr \u002F>\n– Option to disable default WordPress Site Icon output\u003Cbr \u002F>\n– Clean and simple settings page under \u003Cstrong>Settings \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan> Custom Favicon\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>This plugin is useful for:\u003Cbr \u002F>\n– Replacing the default WordPress favicon\u003Cbr \u002F>\n– Branding the WordPress dashboard for clients\u003Cbr \u002F>\n– Adding modern favicon features with minimal setup\u003C\u002Fp>\n\u003Cp>Official plugin page: \u003Ca href=\"https:\u002F\u002Fthemeist.com\u002Fplugins\u002Fwordpress\u002Fcustom-favicon\u002F\" rel=\"nofollow ugc\">Custom Favicon on Themeist\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>Need help? Ask in the \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Fcustom-favicon\u002F\" rel=\"ugc\">Support Forum on WordPress.org\u003C\u002Fa>\u003C\u002Fp>\n","Easily add a custom favicon and Apple touch icon to your WordPress site, including support for dark mode, SVG icons, and admin dashboard branding.",5000,93059,"2025-07-25T13:43:00.000Z","6.8.5","6.0",[71,19,21,22,72],"dark-mode","svg-icon","https:\u002F\u002Fthemeist.com\u002Fplugins\u002Fwordpress\u002Fcustom-favicon\u002F#utm_source=wp-plugin&utm_medium=i-recommend-this&utm_campaign=plugins-page","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcustom-favicon.1.1.0.zip",{"slug":76,"name":77,"version":78,"author":79,"author_profile":80,"description":81,"short_description":82,"active_installs":65,"downloaded":83,"rating":84,"num_ratings":85,"last_updated":86,"tested_up_to":68,"requires_at_least":87,"requires_php":51,"tags":88,"homepage":51,"download_link":90,"security_score":91,"vuln_count":32,"unpatched_count":11,"last_vuln_date":92,"fetched_at":27},"site-favicon","Site Favicon","1.0","Web Guy","https:\u002F\u002Fprofiles.wordpress.org\u002Fwebguyio\u002F","\u003Cp>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fwebguyio\u002Fsupport\" rel=\"nofollow ugc\">💬 Ask Question\u003C\u002Fa> | \u003Ca href=\"mailto:webguywork@gmail.com\" rel=\"nofollow ugc\">📧 Email Me\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>Add a favicon.\u003C\u002Fp>\n\u003Cp>Set the favicon URL under \u003Cem>Appearance > Customize > Site Identity > Site Favicon\u003C\u002Fem>.\u003C\u002Fp>\n\u003Cp>\u003Cem>This plugin is especially useful if you’d like to set a Site Icon, but also need to set a unique favicon separate from it.\u003C\u002Fem>\u003C\u002Fp>\n","Add a favicon.",30277,76,4,"2026-01-21T13:43:00.000Z","5.0",[19,89,21,22],"favorites-icon","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsite-favicon.zip",99,"2024-05-30 00:00:00",{"slug":94,"name":95,"version":96,"author":97,"author_profile":98,"description":99,"short_description":100,"active_installs":101,"downloaded":102,"rating":25,"num_ratings":103,"last_updated":104,"tested_up_to":105,"requires_at_least":106,"requires_php":51,"tags":107,"homepage":109,"download_link":110,"security_score":56,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":27},"remove-site-icon","Remove Site Icon","1","amit5204","https:\u002F\u002Fprofiles.wordpress.org\u002Famit5204\u002F","\u003Cp>This plugin will remove site icon\u002Ffavicon from frontend and admin.\u003C\u002Fp>\n","This plugin will remove site icon\u002Ffavicon from frontend and admin.",90,2478,2,"2022-12-13T16:12:00.000Z","6.1.10","4.9.6",[108,94],"remove-favicon","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fremove-site-icon\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fremove-site-icon.zip",{"slug":112,"name":113,"version":114,"author":115,"author_profile":116,"description":117,"short_description":118,"active_installs":33,"downloaded":119,"rating":120,"num_ratings":103,"last_updated":121,"tested_up_to":122,"requires_at_least":123,"requires_php":51,"tags":124,"homepage":128,"download_link":129,"security_score":56,"vuln_count":11,"unpatched_count":11,"last_vuln_date":26,"fetched_at":27},"set-favicon","Alex Set Favicon","8.0","Anthony","https:\u002F\u002Fprofiles.wordpress.org\u002Fadzbierajewski\u002F","\u003Cp>Alex Set Favicon allows any user to easily set and update their favicon.\u003Cbr \u002F>\nSee http:\u002F\u002Fanthony.strangebutfunny.net\u002Fmy-plugins\u002Falex-set-favicon\u002F for help\u003C\u002Fp>\n","Alex Set Favicon allows any user to easily set and update their favicon. See http:\u002F\u002Fanthony.strangebutfunny.net\u002Fmy-plugins\u002Falex-set-favicon\u002F for help",7056,50,"2013-05-07T03:21:00.000Z","3.5.2","3.5.1",[19,20,125,126,127],"hello","multi-site","set","http:\u002F\u002Fanthony.strangebutfunny.net\u002Fmy-plugins\u002Falex-set-favicon\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fset-favicon.8.0.zip",{"attackSurface":131,"codeSignals":202,"taintFlows":211,"riskAssessment":212,"analyzedAt":218},{"hooks":132,"ajaxHandlers":180,"restRoutes":181,"shortcodes":199,"cronEvents":200,"entryPointCount":201,"unprotectedCount":11},[133,139,143,148,151,154,157,159,161,165,170,175],{"type":134,"name":135,"callback":136,"file":137,"line":138},"action","admin_enqueue_scripts","closure","inc\u002Fadmin.php",25,{"type":134,"name":140,"callback":141,"file":137,"line":142},"admin_menu","forma_favicon_admin_menu",34,{"type":134,"name":144,"callback":145,"priority":32,"file":146,"line":147},"wp_head","forma_favicon_output_tags","inc\u002Ffrontend.php",57,{"type":134,"name":149,"callback":145,"priority":32,"file":146,"line":150},"admin_head",58,{"type":134,"name":152,"callback":145,"priority":32,"file":146,"line":153},"login_head",59,{"type":134,"name":144,"callback":155,"priority":11,"file":146,"line":156},"forma_favicon_disable_default_site_icon",73,{"type":134,"name":149,"callback":155,"priority":11,"file":146,"line":158},74,{"type":134,"name":152,"callback":155,"priority":11,"file":146,"line":160},75,{"type":134,"name":162,"callback":163,"file":146,"line":164},"admin_notices","forma_favicon_general_settings_notice",102,{"type":134,"name":166,"callback":167,"file":168,"line":169},"admin_init","forma_favicon_maybe_migrate","inc\u002Fmigration.php",28,{"type":134,"name":171,"callback":172,"file":173,"line":174},"rest_api_init","forma_favicon_register_rest_routes","inc\u002Frest-api.php",77,{"type":134,"name":176,"callback":177,"file":178,"line":179},"init","forma_favicon_register_setting","inc\u002Fsettings.php",36,[],[182,189,194],{"namespace":183,"route":184,"methods":185,"callback":187,"permissionCallback":136,"file":173,"line":188},"forma-favicon\u002Fv1","\u002Fgenerate",[186],"POST","forma_favicon_generate",16,{"namespace":183,"route":190,"methods":191,"callback":192,"permissionCallback":136,"file":173,"line":193},"\u002Fdelete",[186],"forma_favicon_delete",61,{"namespace":183,"route":195,"methods":196,"callback":197,"permissionCallback":136,"file":173,"line":198},"\u002Fclear-site-icon",[186],"forma_favicon_clear_site_icon",69,[],[],3,{"dangerousFunctions":203,"sqlUsage":204,"outputEscaping":206,"fileOperations":209,"externalRequests":11,"nonceChecks":11,"capabilityChecks":201,"bundledLibraries":210},[],{"prepared":11,"raw":11,"locations":205},[],{"escaped":207,"rawEcho":11,"locations":208},18,[],6,[],[],{"summary":213,"deductions":214},"The \"forma-favicon\" plugin version 1.0.3 exhibits a generally strong security posture based on the provided static analysis.  It demonstrates excellent adherence to secure coding practices by utilizing prepared statements for all SQL queries and properly escaping all identified output. The plugin also implements capability checks on its entry points, and the absence of dangerous functions and external HTTP requests further contributes to its security. The total attack surface is minimal, with no unprotected entry points identified.\n\nThe plugin's vulnerability history is also a significant strength, with zero known CVEs recorded. This indicates a consistent track record of security and a lack of historically exploitable flaws. The absence of any taint flows with unsanitized paths further reinforces the perception of a secure codebase.\n\nHowever, a notable concern is the complete lack of nonce checks. While the plugin has capability checks and a small, protected attack surface, the absence of nonces leaves it potentially vulnerable to Cross-Site Request Forgery (CSRF) attacks. This is a common security oversight that, while not critical in this specific instance due to other protective measures, represents a potential avenue for exploitation if an attacker can trick a logged-in user into triggering an action without their knowledge. Therefore, while the plugin is fundamentally secure, the lack of nonce checks is a point of weakness.",[215],{"reason":216,"points":217},"Missing nonce checks on entry points",5,"2026-04-16T13:49:12.695Z",{"wat":220,"direct":229},{"assetPaths":221,"generatorPatterns":224,"scriptPaths":225,"versionParams":226},[222,223],"\u002Fwp-content\u002Fplugins\u002Fforma-favicon\u002Fbuild\u002Fadmin-favicon.js","\u002Fwp-content\u002Fplugins\u002Fforma-favicon\u002Fbuild\u002Fadmin-favicon.css",[],[222],[227,228],"forma-favicon\u002Fbuild\u002Fadmin-favicon.js?ver=","forma-favicon\u002Fbuild\u002Fadmin-favicon.css?ver=",{"cssClasses":230,"htmlComments":232,"htmlAttributes":233,"restEndpoints":236,"jsGlobals":238,"shortcodeOutput":240},[231],"forma-favicon-app",[],[234,235],"data-rest-url","data-nonce",[237],"\u002Fwp-json\u002Fforma-favicon\u002Fv1\u002Fgenerate",[239],"window.formaFaviconAdmin",[],{"error":242,"url":243,"statusCode":244,"statusMessage":245,"message":245},true,"http:\u002F\u002Flocalhost\u002Fapi\u002Fplugins\u002Fforma-favicon\u002Fbundle",404,"no bundle for this plugin yet",{"slug":4,"current_version":6,"total_versions":103,"versions":247},[248,254],{"version":6,"download_url":24,"svn_tag_url":249,"released_at":26,"has_diff":250,"diff_files_changed":251,"diff_lines":26,"trac_diff_url":252,"vulnerabilities":253,"is_current":242},"https:\u002F\u002Fplugins.svn.wordpress.org\u002Fforma-favicon\u002Ftags\u002F1.0.3\u002F",false,[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fforma-favicon%2Ftags%2F1.0.2&new_path=%2Fforma-favicon%2Ftags%2F1.0.3",[],{"version":255,"download_url":256,"svn_tag_url":257,"released_at":26,"has_diff":250,"diff_files_changed":258,"diff_lines":26,"trac_diff_url":26,"vulnerabilities":259,"is_current":250},"1.0.2","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fforma-favicon.1.0.2.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fforma-favicon\u002Ftags\u002F1.0.2\u002F",[],[]]