[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fjxnPCql2a0Q7K6WeHpsmlBZmrMLqgmEjGGE3NIubGdw":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":11,"num_ratings":11,"last_updated":13,"tested_up_to":14,"requires_at_least":15,"requires_php":16,"tags":17,"homepage":13,"download_link":22,"security_score":23,"vuln_count":11,"unpatched_count":11,"last_vuln_date":24,"fetched_at":25,"vulnerabilities":26,"developer":27,"crawl_stats":24,"alternatives":33,"analysis":124,"fingerprints":233},"huntsman-dark-mode-site-icon","Huntsman Dark Mode Site Icon","1.0.0","Josh Hunt","https:\u002F\u002Fprofiles.wordpress.org\u002Fhuntsmanmedia\u002F","\u003Cp>Huntsman Dark Mode Site Icon allows you to set a separate site icon for light and dark mode.\u003C\u002Fp>\n\u003Cp>Upload one icon for light mode using WordPress’s built-in Site Icon, and upload a separate icon for dark mode using this plugin. The appropriate icon is then displayed automatically based on the visitor’s system theme.\u003C\u002Fp>\n\u003Cp>No code or configuration is required. If no dark mode icon is set, WordPress behaves exactly as normal.\u003C\u002Fp>\n\u003Ch3>Key Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Separate site icons for light mode and dark mode\u003C\u002Fli>\n\u003Cli>Simple upload interface in the WordPress admin\u003C\u002Fli>\n\u003Cli>Works on the frontend, admin area, and login screen\u003C\u002Fli>\n\u003Cli>Optional enable\u002Fdisable toggle\u003C\u002Fli>\n\u003Cli>Does not replace or override the core WordPress Site Icon\u003C\u002Fli>\n\u003Cli>Accessable via the WP API\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Usage\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\n\u003Cp>\u003Cstrong>Site Icon (WordPress)\u003C\u002Fstrong>\u003Cbr \u002F>\nThis is the default WordPress Site Icon and is still managed by WordPress.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Dark Mode Site Icon\u003C\u002Fstrong>\u003Cbr \u002F>\nThis icon is only used when the user’s system is in dark mode and the browser supports \u003Ccode>prefers-color-scheme\u003C\u002Fcode>.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>If the Dark Mode Site Icon is not set, the plugin does nothing and WordPress behaves normally.\u003C\u002Fp>\n\u003Ch3>REST API\u003C\u002Fh3>\n\u003Cp>The plugin exposes a public REST endpoint for accessing the Dark Mode Site Icon:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>\u002Fwp-json\u002Fhdmsi\u002Fv1\u002Ficons\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>Example response:\u003Cbr \u002F>\n{\u003Cbr \u002F>\n“enabled”: true,\u003Cbr \u002F>\n“dark”: {\u003Cbr \u002F>\n“id”: 123,\u003Cbr \u002F>\n“url”: “https:\u002F\u002Fexample.com\u002Ficon-dark.png”\u003Cbr \u002F>\n}\u003Cbr \u002F>\n}\u003Cbr \u002F>\nA dark-mode Web App Manifest is also available at:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>\u002Fwp-json\u002Fhdmsi\u002Fv1\u002Fmanifest?mode=dark\n\u003C\u002Fcode>\u003C\u002Fpre>\n","Set separate site icons for light and dark mode based on the visitor’s system theme.",0,101,"","6.9.4","6.0","7.4",[18,19,20,21],"dark-mode","favicon","prefers-color-scheme","site-icon","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fhuntsman-dark-mode-site-icon.zip",100,null,"2026-03-15T10:48:56.248Z",[],{"slug":28,"display_name":7,"profile_url":8,"plugin_count":29,"total_installs":11,"avg_security_score":23,"avg_patch_time_days":30,"trust_score":31,"computed_at":32},"huntsmanmedia",1,30,94,"2026-04-04T02:29:52.762Z",[34,53,71,90,108],{"slug":35,"name":36,"version":37,"author":38,"author_profile":39,"description":40,"short_description":41,"active_installs":42,"downloaded":43,"rating":23,"num_ratings":44,"last_updated":45,"tested_up_to":46,"requires_at_least":15,"requires_php":16,"tags":47,"homepage":50,"download_link":51,"security_score":23,"vuln_count":11,"unpatched_count":11,"last_vuln_date":24,"fetched_at":52},"custom-favicon","Custom Favicon – Easily Add a Favicon in WordPress","1.1.0","Harish Chouhan","https:\u002F\u002Fprofiles.wordpress.org\u002Fhchouhan\u002F","\u003Cp>\u003Cstrong>Custom Favicon\u003C\u002Fstrong> lets you upload and manage favicons for your WordPress website, admin area, and login screen using the native media uploader. Unlike the built-in Site Icon feature, this plugin gives you full control — including support for separate frontend and backend icons, Apple touch icons, dark mode icons, and SVG format.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Features include:\u003C\u002Fstrong>\u003Cbr \u002F>\n– Upload custom favicon for frontend (browser tab icon)\u003Cbr \u002F>\n– Upload separate favicon for WordPress Dashboard and login page\u003Cbr \u002F>\n– Upload Apple touch icons for iOS devices\u003Cbr \u002F>\n– Upload dark mode specific favicon\u003Cbr \u002F>\n– SVG favicon support\u003Cbr \u002F>\n– Option to disable default WordPress Site Icon output\u003Cbr \u002F>\n– Clean and simple settings page under \u003Cstrong>Settings \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan> Custom Favicon\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>This plugin is useful for:\u003Cbr \u002F>\n– Replacing the default WordPress favicon\u003Cbr \u002F>\n– Branding the WordPress dashboard for clients\u003Cbr \u002F>\n– Adding modern favicon features with minimal setup\u003C\u002Fp>\n\u003Cp>Official plugin page: \u003Ca href=\"https:\u002F\u002Fthemeist.com\u002Fplugins\u002Fwordpress\u002Fcustom-favicon\u002F\" rel=\"nofollow ugc\">Custom Favicon on Themeist\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>Need help? Ask in the \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Fcustom-favicon\u002F\" rel=\"ugc\">Support Forum on WordPress.org\u003C\u002Fa>\u003C\u002Fp>\n","Easily add a custom favicon and Apple touch icon to your WordPress site, including support for dark mode, SVG icons, and admin dashboard branding.",5000,92569,17,"2025-07-25T13:43:00.000Z","6.8.5",[18,19,48,21,49],"icon","svg-icon","https:\u002F\u002Fthemeist.com\u002Fplugins\u002Fwordpress\u002Fcustom-favicon\u002F#utm_source=wp-plugin&utm_medium=i-recommend-this&utm_campaign=plugins-page","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcustom-favicon.1.1.0.zip","2026-03-15T15:16:48.613Z",{"slug":54,"name":55,"version":56,"author":57,"author_profile":58,"description":59,"short_description":60,"active_installs":42,"downloaded":61,"rating":62,"num_ratings":63,"last_updated":64,"tested_up_to":46,"requires_at_least":65,"requires_php":13,"tags":66,"homepage":13,"download_link":68,"security_score":69,"vuln_count":29,"unpatched_count":11,"last_vuln_date":70,"fetched_at":52},"site-favicon","Site Favicon","1.0","Web Guy","https:\u002F\u002Fprofiles.wordpress.org\u002Fwebguyio\u002F","\u003Cp>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fwebguyio\u002Fsupport\" rel=\"nofollow ugc\">💬 Ask Question\u003C\u002Fa> | \u003Ca href=\"mailto:webguywork@gmail.com\" rel=\"nofollow ugc\">📧 Email Me\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>Add a favicon.\u003C\u002Fp>\n\u003Cp>Set the favicon URL under \u003Cem>Appearance > Customize > Site Identity > Site Favicon\u003C\u002Fem>.\u003C\u002Fp>\n\u003Cp>\u003Cem>This plugin is especially useful if you’d like to set a Site Icon, but also need to set a unique favicon separate from it.\u003C\u002Fem>\u003C\u002Fp>\n","Add a favicon.",29658,76,4,"2026-01-21T13:43:00.000Z","5.0",[19,67,48,21],"favorites-icon","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsite-favicon.zip",99,"2024-05-30 00:00:00",{"slug":72,"name":73,"version":74,"author":75,"author_profile":76,"description":77,"short_description":78,"active_installs":79,"downloaded":80,"rating":23,"num_ratings":81,"last_updated":82,"tested_up_to":83,"requires_at_least":84,"requires_php":13,"tags":85,"homepage":87,"download_link":88,"security_score":89,"vuln_count":11,"unpatched_count":11,"last_vuln_date":24,"fetched_at":52},"remove-site-icon","Remove Site Icon","1","amit5204","https:\u002F\u002Fprofiles.wordpress.org\u002Famit5204\u002F","\u003Cp>This plugin will remove site icon\u002Ffavicon from frontend and admin.\u003C\u002Fp>\n","This plugin will remove site icon\u002Ffavicon from frontend and admin.",80,2412,2,"2022-12-13T16:12:00.000Z","6.1.10","4.9.6",[86,72],"remove-favicon","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fremove-site-icon\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fremove-site-icon.zip",85,{"slug":91,"name":92,"version":93,"author":94,"author_profile":95,"description":96,"short_description":97,"active_installs":98,"downloaded":99,"rating":23,"num_ratings":81,"last_updated":100,"tested_up_to":101,"requires_at_least":102,"requires_php":13,"tags":103,"homepage":106,"download_link":107,"security_score":89,"vuln_count":11,"unpatched_count":11,"last_vuln_date":24,"fetched_at":52},"vanilla-bean-icon-setter","Vanilla Bean – Icon Setter","2.81","vsmash","https:\u002F\u002Fprofiles.wordpress.org\u002Fvsmash\u002F","\u003Cp>Icon Setter (Iconifier) is a simple set-site-icon plugin for all devices.\u003C\u002Fp>\n\u003Cp>Simply visit settings in admin, upload or choose your logo from the media\u003Cbr \u002F>\nlibrary and it will set:\u003Cbr \u002F>\n*   All Apple device icons and tiles\u003Cbr \u002F>\n*   All windows device icons and tiles\u003Cbr \u002F>\n*   All Android and smartphone device icons and tiles\u003Cbr \u002F>\n*   ALl desktop website icons\u003C\u002Fp>\n\u003Cp>Designed to solve your wordpress website branding setup in moments without\u003Cbr \u002F>\ndependency on themes or jetpack.\u003C\u002Fp>\n\u003Cp>Vanilla Beans are published separately so that you can choose your beans to suit\u003Cbr \u002F>\nyour needs.\u003C\u002Fp>\n\u003Cp>See your Vanilla Bean page in admin for other beans available.\u003C\u002Fp>\n\u003Cp>Tested with php v5.4 to v7.4\u003Cbr \u002F>\nPHP v5.5+ supports cropping of Microsoft wide tile image version.\u003C\u002Fp>\n","Icon Setter (Iconifier) is a simple set-site-icon plugin for all devices.",20,3935,"2020-07-21T03:25:00.000Z","5.4.19","4.0",[104,19,48,105,21],"branding","iconify","http:\u002F\u002Fwww.velvary.com.au\u002Fvanilla-beans\u002Fwordpress\u002FIconifier\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fvanilla-bean-icon-setter.2.81.zip",{"slug":109,"name":110,"version":6,"author":111,"author_profile":112,"description":113,"short_description":114,"active_installs":11,"downloaded":115,"rating":11,"num_ratings":11,"last_updated":116,"tested_up_to":14,"requires_at_least":117,"requires_php":118,"tags":119,"homepage":122,"download_link":123,"security_score":23,"vuln_count":11,"unpatched_count":11,"last_vuln_date":24,"fetched_at":52},"jtzls-dark-mode","JTZL's Dark Mode","jtzl","https:\u002F\u002Fprofiles.wordpress.org\u002Fjtzl\u002F","\u003Cp>JTZL’s Dark Mode automatically applies dark mode styling to your WordPress site based on your visitors’ operating system preferences. No configuration required – it just works.\u003C\u002Fp>\n\u003Cp>Interactive demo:\u003Cbr \u002F>\nhttps:\u002F\u002Fplayground.wordpress.net\u002F?blueprint-url=https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwp-json\u002Fplugins\u002Fv1\u002Fplugin\u002Fjtzls-dark-mode\u002Fblueprint.json\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Key Features:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Automatic detection using CSS \u003Ccode>prefers-color-scheme: dark\u003C\u002Fcode> media query\u003C\u002Fli>\n\u003Cli>Zero configuration – works out of the box\u003C\u002Fli>\n\u003Cli>Privacy-respecting – all detection happens client-side\u003C\u002Fli>\n\u003Cli>Theme-agnostic – works with any WordPress theme\u003C\u002Fli>\n\u003Cli>Media preservation – images, videos, and embeds display correctly\u003C\u002Fli>\n\u003Cli>Developer-friendly – extensible via WordPress filter hooks\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>How It Works:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>The plugin uses the CSS \u003Ccode>prefers-color-scheme\u003C\u002Fcode> media query to detect when a visitor’s operating system is set to dark mode. When detected, dark mode styles are automatically applied without any JavaScript or server-side processing.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Technical Features:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Modern PHP 8.2+ architecture with dependency injection (PHP-DI)\u003C\u002Fli>\n\u003Cli>Service-oriented design with PSR-4 autoloading\u003C\u002Fli>\n\u003Cli>Separate styling strategies for Block themes (CSS variables) and Classic themes (filter inversion)\u003C\u002Fli>\n\u003Cli>Comprehensive test coverage with PHPUnit\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Developer Hooks:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Customize the plugin behavior using these filter hooks:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ccode>jtzl_dark_mode_enabled\u003C\u002Fcode> – Enable\u002Fdisable dark mode on specific pages\u003C\u002Fli>\n\u003Cli>\u003Ccode>jtzl_dark_mode_css_variables\u003C\u002Fcode> – Customize dark mode colors\u003C\u002Fli>\n\u003Cli>\u003Ccode>jtzl_dark_mode_custom_css\u003C\u002Fcode> – Add custom CSS rules\u003C\u002Fli>\n\u003C\u002Ful>\n","Automatic dark mode styling based on visitor OS preference using CSS prefers-color-scheme media query.",146,"2026-02-25T13:27:00.000Z","6.9","8.2",[120,18,121,20],"accessibility","dark-theme","https:\u002F\u002Fwordpress.org\u002Fjtzls-dark-mode\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fjtzls-dark-mode.1.0.0.zip",{"attackSurface":125,"codeSignals":172,"taintFlows":220,"riskAssessment":221,"analyzedAt":232},{"hooks":126,"ajaxHandlers":156,"restRoutes":157,"shortcodes":170,"cronEvents":171,"entryPointCount":81,"unprotectedCount":81},[127,132,136,140,144,148,152],{"type":128,"name":129,"callback":129,"file":130,"line":131},"action","admin_menu","huntsman-dark-mode-site-icon.php",22,{"type":128,"name":133,"callback":134,"file":130,"line":135},"admin_init","register_settings",23,{"type":128,"name":137,"callback":138,"file":130,"line":139},"admin_enqueue_scripts","admin_assets",24,{"type":128,"name":141,"callback":142,"file":130,"line":143},"rest_api_init","register_rest_routes",25,{"type":128,"name":145,"callback":146,"priority":23,"file":130,"line":147},"wp_head","output_frontend_icons",27,{"type":128,"name":149,"callback":150,"priority":23,"file":130,"line":151},"admin_head","output_admin_icons",28,{"type":128,"name":153,"callback":154,"priority":23,"file":130,"line":155},"login_head","output_login_icons",29,[],[158,166],{"namespace":159,"route":160,"methods":161,"callback":163,"permissionCallback":164,"file":130,"line":165},"hdmsi\u002Fv1","\u002Ficons",[162],"GET","closure","__return_true",167,{"namespace":159,"route":167,"methods":168,"callback":163,"permissionCallback":164,"file":130,"line":169},"\u002Fmanifest",[162],199,[],[],{"dangerousFunctions":173,"sqlUsage":174,"outputEscaping":176,"fileOperations":11,"externalRequests":11,"nonceChecks":11,"capabilityChecks":29,"bundledLibraries":219},[],{"prepared":11,"raw":11,"locations":175},[],{"escaped":177,"rawEcho":178,"locations":179},34,19,[180,183,185,187,189,191,193,195,197,199,201,203,205,207,209,211,213,215,217],{"file":130,"line":181,"context":182},91,"raw output",{"file":130,"line":184,"context":182},96,{"file":130,"line":186,"context":182},440,{"file":130,"line":188,"context":182},444,{"file":130,"line":190,"context":182},466,{"file":130,"line":192,"context":182},471,{"file":130,"line":194,"context":182},475,{"file":130,"line":196,"context":182},481,{"file":130,"line":198,"context":182},485,{"file":130,"line":200,"context":182},487,{"file":130,"line":202,"context":182},495,{"file":130,"line":204,"context":182},498,{"file":130,"line":206,"context":182},505,{"file":130,"line":208,"context":182},510,{"file":130,"line":210,"context":182},514,{"file":130,"line":212,"context":182},516,{"file":130,"line":214,"context":182},524,{"file":130,"line":216,"context":182},527,{"file":130,"line":218,"context":182},534,[],[],{"summary":222,"deductions":223},"The \"huntsman-dark-mode-site-icon\" v1.0.0 plugin exhibits a mixed security posture.  On the positive side, it demonstrates good practices by using prepared statements for all SQL queries and has no recorded vulnerability history, suggesting a generally secure development approach.  The absence of dangerous functions, file operations, and external HTTP requests also contributes to a reduced attack surface. However, significant concerns arise from the static analysis.  The plugin exposes two REST API routes without any permission callbacks, creating an unprotected attack surface.  Additionally, only 64% of output is properly escaped, leaving room for potential cross-site scripting (XSS) vulnerabilities.  The lack of nonce checks on AJAX handlers, while currently showing zero handlers, is a potential future risk if functionality is added without proper security considerations. The plugin's vulnerability history is clean, which is a positive indicator, but the current code analysis reveals critical areas for improvement, particularly regarding authentication for REST API endpoints and output escaping.",[224,227,230],{"reason":225,"points":226},"REST API routes without permission callbacks",10,{"reason":228,"points":229},"Unescaped output detected",5,{"reason":231,"points":229},"Lack of nonce checks on AJAX handlers","2026-03-17T05:55:56.246Z",{"wat":234,"direct":243},{"assetPaths":235,"generatorPatterns":238,"scriptPaths":239,"versionParams":240},[236,237],"\u002Fwp-content\u002Fplugins\u002Fhuntsman-dark-mode-site-icon\u002Fassets\u002Fadmin.css","\u002Fwp-content\u002Fplugins\u002Fhuntsman-dark-mode-site-icon\u002Fassets\u002Fadmin.js",[],[237],[241,242],"huntsman-dark-mode-site-icon\u002Fassets\u002Fadmin.css?ver=","huntsman-dark-mode-site-icon\u002Fassets\u002Fadmin.js?ver=",{"cssClasses":244,"htmlComments":247,"htmlAttributes":250,"restEndpoints":253,"jsGlobals":256,"shortcodeOutput":258},[245,246],"huntsman-dark-mode-site-icon-container","hdmsi-options-page-wrapper",[248,249],"\u003C!-- Generated by Huntsman Dark Mode Site Icon -->","\u003C!-- Site Icon \u002F Favicon Settings -->",[251,252],"data-hdmsi-enabled","data-hdmsi-dark-icon-id",[254,255],"\u002Fwp-json\u002Fhdmsi\u002Fv1\u002Ficons","\u002Fwp-json\u002Fhdmsi\u002Fv1\u002Fmanifest",[257],"window.HDMSI",[]]