Category Icon
Healthy: 3 vulnerabilities published in the last 24 months.
| Ownership | 100 |
|---|---|
| Maintenance | 100 |
| Security | 85 |
| Support | 70 |
| Reputation | 70 |
Active signals
Facts we detected, with links to the source.
- InfoSEC-33 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| babbardel | 31 May 2019 to 17 May 2026, 15 commits |
|---|---|
| pixelgrade | 5 Mar 2021 to 13 Aug 2026, 4 commits |
2 committers recorded. No ownership changes recorded since 3 Nov 2026.
Maintenance
- Last release
- 3 months ago
- Releases, 24 months
- 4
- Tested up to
- 7.1 current
- Requires PHP
- 7.4 supported 8.2+
| Q1 2024 | 0 |
|---|---|
| Q2 2024 | 0 |
| Q3 2024 | 0 |
| Q4 2024 | 1 |
| Q1 2025 | 0 |
| Q2 2025 | 1 |
| Q3 2025 | 0 |
| Q4 2025 | 1 |
| Q1 2026 | 0 |
| Q2 2026 | 1 |
| Q3 2026 | 1 |
| Q4 2026 | 0 |
Last release 13 Aug 2026. Tested with WordPress 7.1 (current).
Support
Support history appears after our first snapshots of the forum counts.
Security record
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 25 Dec 2025 | Category Icon <= 1.0.2 - Authenticated (Editor+) Stored Cross-Site Scripting | 4.4 | <= 1.0.2 | 1.0.3 | 0 |
| 3 Jun 2025 | Category Icon <= 1.0.1 - Authenticated (Author+) XML External Entity Injection | 6.3 | <= 1.0.1 | 1.0.2 | 0 |
| 3 Apr 2025 | Category Icon <= 1.0.1 - Authenticated (Author+) Arbitrary File Download | 6.5 | <= 1.0.1 | 1.0.2 | 47 |
| 11 Oct 2024 | Category Icon <= 1.0.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload | 6.4 | <= 1.0.0 | 1.0.1 | 0 |
Source: Wordfence Intelligence.
Reputation
Lifetime rating 1.0 from 3 ratings. Quarterly trends appear as new reviews arrive.
| 5 star | 0 |
|---|---|
| 4 star | 0 |
| 3 star | 0 |
| 2 star | 0 |
| 1 star | 3 |
Momentum
2,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 39 |
|---|---|
| 11 May 2026 | 190 |
| 18 May 2026 | 677 |
| 25 May 2026 | 144 |
| 1 Jun 2026 | 96 |
| 8 Jun 2026 | 96 |
| 15 Jun 2026 | 76 |
| 22 Jun 2026 | 75 |
| 29 Jun 2026 | 69 |
| 6 Jul 2026 | 79 |
| 13 Jul 2026 | 96 |
| 20 Jul 2026 | 77 |
| 27 Jul 2026 | 99 |
| 3 Aug 2026 | 101 |
| 10 Aug 2026 | 567 |
| 17 Aug 2026 | 242 |
| 24 Aug 2026 | 140 |
| 31 Aug 2026 | 140 |
| 7 Sep 2026 | 104 |
| 14 Sep 2026 | 124 |
| 21 Sep 2026 | 120 |
| 28 Sep 2026 | 111 |
| 5 Oct 2026 | 103 |
| 12 Oct 2026 | 105 |
| 19 Oct 2026 | 156 |
| 26 Oct 2026 | 135 |
| 2 Nov 2026 | 20 |
Weekly downloads over the last 4 weeks are 29% below the 27-week average.
Healthier alternatives
Same category, higher Canary Score. Never sponsored.
Facts
| Version | 1.0.5 |
|---|---|
| Author | pixelgrade |
| Added | 10 Oct 2015 |
| Last updated | 13 Aug 2026 |
| Active installs | 2,000+ |
| Requires WordPress | 5.9.0 |
| Tested up to | 7.1.4 |
| Requires PHP | 7.4 |
| Category | Content Management > Document Management & Downloads |
| Tags | icon, term, image, category, taxonomy |
Other plugins by this author: Customify, PixTypes, PixCodes, Gridable, Comments Ratings, Pixelgrade Assistant, Nova Blocks by Pixelgrade, Style Manager
Questions
Is Category Icon still maintained?
Category Icon was last updated on 13 Aug 2026. Its Canary status is Healthy.
Is Category Icon safe?
Category Icon has no open unpatched vulnerabilities on record. 3 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.
Who owns Category Icon?
The wordpress.org author is pixelgrade. Recent committers: pixelgrade, babbardel, euthelup, plugin-master. We have recorded no ownership change.
What can I use instead of Category Icon?
Plugins in the same category with a higher Canary Score: WP Term Images, Advanced Category and Custom Taxonomy Image.