Category Icon

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 81% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. A small install base leaves thin data to model from. The recent download trend is too spiky to read.

1. ★★★★★ mogeh

   3.7y ago

   How would someone implement your plugin if there is no documentation? The idea is good but the delivery is poor taste.

   Read on wp.org ↗
2. ★★★★★ farzinsb

   6.2y ago

   It is causing errors for my other plugins without showing any errors on screen or in error_log file or chrome console in latest wp update 5.4.2. so I removed it. This topic was modified 6 years ago by farzinsb. This topic was modified 6 years ago by farzinsb.

   Read on wp.org ↗
3. ★★★★★ Joe Bloggs

   6.8y ago

   This plugin is absolutely useless without any instructions on how to actually fetch the icon after it has been assigned to a taxonomy term. No support what’s so ever, support questions unanswered, figure out for your self kind of thing. Well done guys!

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 1.0.4 Updated WordPress compatibility metadata for WordPress 7.0. Fixed Plugin Check errors in the release package. Hardened taxonomy term meta saving with explicit nonce and capability checks. Escaped taxonomy admin output an 1.0.4
2. — Version 1.0.3 Security: sanitize and strictly validate term icon / image IDs on save and escape them on output to prevent XSS via the term_icon_value and term_image_value fields, even for Editor-level users. 1.0.3
3. — Version 1.0.2 Security: patched blind XXE/SSRF in SVG upload flow – external entity loading and network access are now disabled; malformed SVGs are rejected (fail-closed). 1.0.2
4. — Version 1.0.1 Added sanitization for SVG uploads to prevent Cross-Site Scripting (XSS) vulnerabilities. Implemented secure file naming for uploaded SVG files by appending a random suffix to filenames. Enhanced upload handling to ensur 1.0.1
5. — Version 1.0.0 Ensure compatibility with WordPress 5.9 Add getter functions for term icon and image. Update build process. Clarify description and instructions about what this plugin does and doesn’t do. 1.0.0
6. — Version 0.7.1 Improve compatibility with WordPress 5.7 0.7.1

4 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. Medium · 4.4 Category Icon <= 1.0.2 - Authenticated (Editor+) Stored Cross-Site Scripting ↗
   2025-12-25 CVE-2025-68525 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.0.2 Patched in 1.0.3
2. Medium · 6.3 Category Icon <= 1.0.1 - Authenticated (Author+) XML External Entity Injection ↗
   2025-06-03 CVE-2025-31039 Improper Restriction of XML External Entity Reference Affects <= 1.0.1 Patched in 1.0.2
3. Medium · 6.5 Category Icon <= 1.0.1 - Authenticated (Author+) Arbitrary File Download ↗
   2025-04-03 CVE-2025-31825 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Affects <= 1.0.1 Patched in 1.0.2
4. Medium · 6.4 Category Icon <= 1.0.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload ↗
   2024-10-11 CVE-2024-8915 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.0.0 Patched in 1.0.1

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0.1

Translated into 6 languages, 0 at 90% or more

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2025-01-22 3K+ → 2K+ down after 2 days in tier
2. 2025-01-20 2K+ → 3K+ up after 1 days in tier
3. 2025-01-19 3K+ → 2K+ down after 476 days in tier
4. 2023-10-01 4K+ → 3K+ down

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• Taxonomy Images 9K+ installs · 4.3★ · 4 shared tags D
• Term Management Tools 10K+ installs · 4.8★ · 3 shared tags B
• Taxonomy Thumbnail 3K+ installs · 4.4★ · 3 shared tags D
• Taxonomy Switcher 2K+ installs · 4.6★ · 3 shared tags A
• WP Term Images 2K+ installs · 4.2★ · 3 shared tags B
• Search & Filter 50K+ installs · 4.5★ · 2 shared tags A

Embed this report card

Drop a live Pulse card for Category Icon into a readme, a review or a deck. It updates itself.

Category Icon: 2K+ active installs, 1.0★ (3 reviews). Plugin Pulse (WP Mayor), as of 2026-08-29. https://plugins.wpmayor.com/plugin/category-icon