PLUGIN SECURITY
Is Font Awesome safe?
The official way to use Font Awesome Free or Pro icons on your WordPress site, brought to you by the Font Awesome team.
What this plugin does
- Slug:
font-awesome - Author: fontawesome
- 400000+ active installs
- 72/100 rating (61 reviews on wordpress.org)
- 6553954 all-time downloads
- On WordPress.org since 2012-09-18
FontAwesomeiconiconfontSVG iconwebfont
Maintenance status
- Latest known version: 5.2.1
- Last updated: 2026-08-13 9:25pm GMT
- Tested up to WordPress: 7.1
- Requires PHP: 7.4+
- Max supported PHP (analyzed): 8.4
Known vulnerabilities
1 known CVE on file for Font Awesome. Reported between 2020 and 2022.
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2022-4478 | Font Awesome [font-awesome] < 4.3.2 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 5.4 | < 4.3.2 | 4.3.2 | 2022-12-22 | ✓ fixed in latest |
| — | Font Awesome [font-awesome] >= 4.0.0-RC15 - <= 4.0.0-RC16 | — | Unknown | 4.0.0-RC15–4.0.0-RC16 | 4.0.0-RC16 | 2020-03-11 | ✓ fixed in latest |
| — | Font Awesome [font-awesome] >= 4.0.0-rc15 - <= 4.0.0-rc16 | — | Unknown | 4.0.0-rc15–4.0.0-rc16 | 4.0.0-rc16 | 2020-03-11 | ✓ fixed in latest |
| — | Font Awesome [font-awesome] >= 4.0.0-rc15 - <= 4.0.0-rc16 | — | Unknown | 4.0.0-rc15–4.0.0-rc16 | 4.0.0-rc16 | — | ✓ fixed in latest |
| — | Font Awesome 4.0.0-RC15 & RC16 - API Token & Access Token Disclosure | — | Unknown | < 4.0.0-RC17 | 4.0.0-RC17 | — | ✓ fixed in latest |
How to fix it
Keep Font Awesome updated — 5.2.1 is the latest version on wordpress.org, and each CVE above lists the exact release that fixed it ("Fixed in").
This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.
Safer / more established alternatives
- Favicon by RealFaviconGenerator — 200000+ active installs — 98/100 (801) — max PHP 8.4
- Advanced Custom Fields: Font Awesome Field — 90000+ active installs — 98/100 (36) — max PHP 8.4
- Icon Element – Icon Pack for Elementor Page Builder (6718 icons) — 40000+ active installs — 88/100 (7)
- The Icon Block — 40000+ active installs — 100/100 (29)
- Favicon Rotator — 20000+ active installs — 86/100 (12)
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.