Does LH Favicon have any unpatched vulnerabilities?

No. All known vulnerabilities in LH Favicon have been patched as of the latest data update. Always keep the plugin updated to the latest version.

Is LH Favicon compatible with WordPress 6.0.11?

According to WordPress.org data, LH Favicon 1.02 has been tested up to WordPress 6.0.11. Check the plugin's changelog for the latest compatibility information.

How often is LH Favicon updated?

LH Favicon was last updated on Jul 31, 2022. Frequent updates are generally a positive security signal.

What is LH Favicon's security score?

LH Favicon has a WP-Safety security score of 85/100. This score is computed from CVE history, patch response time, developer trust signals, and plugin maintenance activity.

LH Favicon Security & Risk Analysis

wordpress.org/plugins/lh-favicon

Overide your site icon favicon on the front end of your site

40 active installs v1.02 PHP + WP 4.0+ Updated Jul 31, 2022

faviconsvgtransparencywiconwp-admin

A · Safe

CVEs total0

Unpatched0

Last CVENever

Plugin page Download

Safety Verdict

Is LH Favicon Safe to Use in 2026?

Generally Safe

Score 85/100

LH Favicon has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 3yr ago

Risk Assessment

The "lh-favicon" plugin version 1.02 exhibits a strong security posture based on the provided static analysis. The absence of any identified AJAX handlers, REST API routes, shortcodes, or cron events significantly limits its attack surface. Furthermore, the code demonstrates good practices by utilizing prepared statements for all SQL queries and not performing any file operations or external HTTP requests. The lack of recorded vulnerabilities in its history is also a positive indicator of its security.

Key Concerns

Low output escaping
No capability checks
No nonce checks

Vulnerabilities

None known

LH Favicon Security Vulnerabilities

No known vulnerabilities — this is a good sign.

Code Analysis

Analyzed Mar 16, 2026

LH Favicon Code Analysis

Dangerous Functions

Raw SQL Queries

0 prepared

Unescaped Output

2 escaped

Nonce Checks

Capability Checks

File Operations

External Requests

Bundled Libraries

Output Escaping

14% escaped14 total outputs

Attack Surface

LH Favicon Attack Surface

Entry Points0

Unprotected0

WordPress Hooks 8

filterwp_cache_eof_tagslh-favicon.php:254

actioncustomize_registerlh-favicon.php:284

filtersite_icon_meta_tagslh-favicon.php:287

actionwp_headlh-favicon.php:290

actionembed_headlh-favicon.php:291

actionlogin_headlh-favicon.php:292

actiondo_faviconicolh-favicon.php:295

actionplugins_loadedlh-favicon.php:319

Maintenance & Trust

LH Favicon Maintenance & Trust

Maintenance Signals

WordPress version tested6.0.11

Last updatedJul 31, 2022

PHP min version

Downloads2K

Community Trust

Rating0/100

Number of ratings0

Active installs40

Alternatives

LH Favicon Alternatives

Custom Favicon – Easily Add a Favicon in WordPress

custom-favicon

100

Easily add a custom favicon and Apple touch icon to your WordPress site, including support for dark mode, SVG icons, and admin dashboard branding.

5K No CVEs

Safe SVG

safe-svg

Enable SVG uploads and sanitize them to stop XML/SVG vulnerabilities in your WordPress website.

1.0M 6 CVEs

SVG Support

svg-support

Securely upload SVG files to your media library, with built-in sanitization and advanced features for styling and animation.

1.0M 6 CVEs

Font Awesome

font-awesome

The official way to use Font Awesome Free or Pro icons on your WordPress site, brought to you by the Font Awesome team.

400K 2 CVEs

Favicon by RealFaviconGenerator

favicon-by-realfavicongenerator

Create and install your favicon for all platforms: PC/Mac, iPhone/iPad, Android devices, Windows 8 tablets...

200K 4 CVEs

Developer Profile

LH Favicon Developer Profile

shawfactor

77 plugins · 15K total installs

trust score

Avg Security Score

87/100

Avg Patch Time

7 days

View full developer profile

Detection Fingerprints

How We Detect LH Favicon

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

HTML / DOM Fingerprints

HTML Comments

FAQ