Really Simple Security logo

Log out
Get PRO

Category Icon

  • Category Icon on WordPress.org
  • Current version: 1.0.2
  • Last update: May 19, 2025
  • Known issues: Open

This information is sourced from wpvulnerabilities.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Submit

Vulnerabilities

  • Input validation vulnerability in Category Icon 1.0.2

    Open

    The Category Icon plugin for WordPress has a security issue called XML External Entity Injection (XXE) in versions 1.0.2 and below. This means that attackers who are logged in and have author or high...

    Read More

  • Access violation vulnerability in Category Icon 1.0.0

    Fixed

    A plugin called Category Icon for WordPress has a security issue. This problem, called Path Traversal, affects all versions of the plugin, even the latest one (1.0.0). It allows people who are logged...

    Read More

  • Input validation vulnerability in Category Icon 1.0.0

    Fixed

    The Category Icon plugin for WordPress has a security issue that allows attackers to inject harmful code into web pages by uploading SVG files. This can be done by someone with at least Author-level ...

    Read More