PWD WP Favicon Security & Risk Analysis

wordpress.org/plugins/pwd-wp-favicon

This plugin allows you to upload a custom favicon & Apple touch icon for your website and your WordPress Dashboard using API customizer.

800 active installs v1.5.3 PHP + WP 3.2+ Updated Aug 24, 2023
adminblogfaviconicontheme
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is PWD WP Favicon Safe to Use in 2026?

Generally Safe

Score 85/100

PWD WP Favicon has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 2yr ago
Risk Assessment

The 'pwd-wp-favicon' plugin version 1.5.3 exhibits an excellent security posture based on the provided static analysis. The absence of any detected AJAX handlers, REST API routes, shortcodes, or cron events significantly limits the potential attack surface. Furthermore, the code demonstrates strong security practices with 100% of SQL queries utilizing prepared statements, all output being properly escaped, and no file operations or external HTTP requests identified. The lack of any known vulnerabilities in its history further reinforces this positive assessment. This suggests a well-developed and securely coded plugin.

Vulnerabilities
None known

PWD WP Favicon Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

PWD WP Favicon Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
0
6 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

100% escaped6 total outputs
Attack Surface

PWD WP Favicon Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 5
actioncustomize_registerclasses\plugin.php:12
actionwp_headclasses\plugin.php:15
actionadmin_headclasses\plugin.php:18
actionlogin_headclasses\plugin.php:19
actionplugins_loadedwp-favicon.php:37
Maintenance & Trust

PWD WP Favicon Maintenance & Trust

Maintenance Signals

WordPress version tested6.3.8
Last updatedAug 24, 2023
PHP min version
Downloads15K

Community Trust

Rating100/100
Number of ratings5
Active installs800
Developer Profile

PWD WP Favicon Developer Profile

Plateforme WP Digital

2 plugins · 900 total installs

84
trust score
Avg Security Score
85/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect PWD WP Favicon

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

HTML / DOM Fingerprints

Shortcode Output
<link rel="shortcut icon" href="<link rel="apple-touch-icon" href="<link rel="apple-touch-icon-precomposed" href="
FAQ

Frequently Asked Questions about PWD WP Favicon