Iconic Button Security & Risk Analysis

wordpress.org/plugins/iconic-button

Create beautiful, accessible icon buttons for WordPress. WCAG 2.1 Level AA compliant, performance-optimized, Gutenberg native.

0 active installs v1.0.2 PHP 7.4+ WP 6.6+ Updated Dec 15, 2025
accessiblebuttongutenbergicon-buttonresponsive
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Download
Safety Verdict

Is Iconic Button Safe to Use in 2026?

Generally Safe

Score 100/100

Iconic Button has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 3mo ago
Risk Assessment

Based on the static analysis and vulnerability history provided, the 'iconic-button' plugin v1.0.2 exhibits a very strong security posture. The absence of any identified attack surface points, dangerous functions, unsanitized taint flows, or known vulnerabilities is highly commendable and suggests adherence to secure coding practices. The plugin also demonstrates excellent data handling with 100% of SQL queries using prepared statements and all outputs being properly escaped. There are no file operations or external HTTP requests to consider, further reducing the potential for security weaknesses. The lack of any previously recorded vulnerabilities, including critical or high severity ones, and no common vulnerability types further solidifies its current secure state. This plugin appears to be exceptionally well-hardened against common web vulnerabilities. The only potential area for consideration, though not a direct security finding in this analysis, is the complete absence of nonces and capability checks. While the current attack surface is zero, this could be a point of future vulnerability if new entry points are introduced without corresponding security checks. However, based solely on the provided data, this plugin is assessed as highly secure.

Vulnerabilities
None known

Iconic Button Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 17, 2026

Iconic Button Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
0
2 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

100% escaped2 total outputs
Attack Surface

Iconic Button Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 6
actioniniticonic-button.php:86
actionwp_enqueue_scriptsiconic-button.php:122
actionwp_headiconic-button.php:140
actionenqueue_block_assetsiconic-button.php:167
filterscript_loader_tagiconic-button.php:207
filterstyle_loader_tagiconic-button.php:208
Maintenance & Trust

Iconic Button Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedDec 15, 2025
PHP min version7.4
Downloads132

Community Trust

Rating0/100
Number of ratings0
Active installs0
Developer Profile

Iconic Button Developer Profile

Dvora Gvili

1 plugin · 0 total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Iconic Button

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/iconic-button/assets/fontawesome-free-7.0.1-web/css/all.min.css/wp-content/plugins/iconic-button/assets/fontawesome-free-7.0.1-web/webfonts/fa-solid-900.woff2/wp-content/plugins/iconic-button/build/icon-buttons/wp-content/plugins/iconic-button/build/icon-button
Version Parameters
fontawesome-frontend?ver=7.0.1fontawesome?ver=7.0.1dgdev-icon-button-script?ver=dgdev-icon-button-style?ver=

HTML / DOM Fingerprints

FAQ

Frequently Asked Questions about Iconic Button