Favicon Rotator
Healthy: vulnerability published 9 Oct 2026, fixed in 1.2.12.
| Ownership | 100 |
|---|---|
| Maintenance | 100 |
| Security | 85 |
| Support | 70 |
| Reputation | 70 |
Active signals
Facts we detected, with links to the source.
- WarningSEC-1Vulnerability published 9 Oct 2026, fixed in 1.2.12. Update to version 1.2.12 or later.9 Oct 2026Evidence
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| Archetyped | 13 Aug 2010 to 12 Sep 2026, 56 commits |
|---|
1 committer recorded. No ownership changes recorded since 3 Nov 2026.
Maintenance
- Last release
- 53 days ago
- Releases, 24 months
- 2
- Tested up to
- 7.1 current
- Requires PHP
- 8.2 supported 8.2+
| Q1 2024 | 1 |
|---|---|
| Q2 2024 | 0 |
| Q3 2024 | 0 |
| Q4 2024 | 0 |
| Q1 2025 | 0 |
| Q2 2025 | 0 |
| Q3 2025 | 0 |
| Q4 2025 | 0 |
| Q1 2026 | 0 |
| Q2 2026 | 2 |
| Q3 2026 | 0 |
| Q4 2026 | 0 |
Last release 12 Sep 2026. Tested with WordPress 7.1 (current).
Support
Support history appears after our first snapshots of the forum counts.
Security record
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 9 Oct 2026 | Favicon Rotator <= 1.2.11 - Reflected Cross-Site Scripting via 'fvrt_' prefix | 6.1 | <= 1.2.11 | 1.2.12 | 0 |
| 29 Apr 2026 | Favicon Rotator <= 1.2.11 - Unauthenticated Stored Cross-Site Scripting | 7.2 | <= 1.2.11 | 1.2.12 | 0 |
| 26 Mar 2024 | Favicon Rotator <= 1.2.10 - Reflected Cross-Site Scripting | 6.1 | <= 1.2.10 | 1.2.11 | 2 |
Source: Wordfence Intelligence.
Reputation
Average rating rose from 1.0 to 2.0 between Q4 2023 and Q1 2025.
| 5 star | 9 |
|---|---|
| 4 star | 1 |
| 3 star | 0 |
| 2 star | 1 |
| 1 star | 1 |
- No SVG support · 2 stars · 18 Jan 2025
- Didn’t Do Anything! · 1 star · 16 Nov 2023
Momentum
20,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 279 |
|---|---|
| 11 May 2026 | 451 |
| 18 May 2026 | 604 |
| 25 May 2026 | 362 |
| 1 Jun 2026 | 320 |
| 8 Jun 2026 | 299 |
| 15 Jun 2026 | 3,214 |
| 22 Jun 2026 | 807 |
| 29 Jun 2026 | 531 |
| 6 Jul 2026 | 575 |
| 13 Jul 2026 | 337 |
| 20 Jul 2026 | 457 |
| 27 Jul 2026 | 383 |
| 3 Aug 2026 | 345 |
| 10 Aug 2026 | 265 |
| 17 Aug 2026 | 298 |
| 24 Aug 2026 | 323 |
| 31 Aug 2026 | 295 |
| 7 Sep 2026 | 338 |
| 14 Sep 2026 | 311 |
| 21 Sep 2026 | 325 |
| 28 Sep 2026 | 307 |
| 5 Oct 2026 | 345 |
| 12 Oct 2026 | 328 |
| 19 Oct 2026 | 1,671 |
| 26 Oct 2026 | 949 |
| 2 Nov 2026 | 109 |
Weekly downloads over the last 4 weeks are 39% above the 27-week average.
Healthier alternatives
Same category, higher Canary Score. Never sponsored.
No healthier plugin in the same category yet.
Facts
| Version | 1.3.0 |
|---|---|
| Author | Archetyped |
| Added | 13 Aug 2010 |
| Last updated | 12 Sep 2026 |
| Active installs | 20,000+ |
| Requires WordPress | 6.6 |
| Tested up to | 7.1.4 |
| Requires PHP | 8.2 |
| Category | Design & Themes > Themes & Templates |
| Tags | icon, image, mobile, favicon, customization |
Other plugins by this author: Simple Lightbox, Cornerstone, Eyes Only
Questions
Is Favicon Rotator still maintained?
Favicon Rotator was last updated on 12 Sep 2026. Its Canary status is Healthy.
Is Favicon Rotator safe?
Favicon Rotator has no open unpatched vulnerabilities on record. 2 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.
Who owns Favicon Rotator?
The wordpress.org author is Archetyped. Recent committers: Archetyped, plugin-master. We have recorded no ownership change.
What can I use instead of Favicon Rotator?
We have no healthier plugin in the same category on record yet.