Custom Icons for Elementor

Custom Icons for Elementor has one disclosed vulnerability in the WordSec catalog, all reported in 2024; it is fixed as of September 2026. Their average CVSS score is 7.2, and the most serious one scores 7.2 out of 10. Severity breakdown: 0 critical and 1 high.

The most common weakness is Unrestricted Upload Of File With Dangerous Type, behind 1 of the records (100%).

The one issue recorded for Custom Icons for Elementor has a vendor fix available, so running the current release closes it.

All of these findings were reported by tahu.datar. Custom Icons for Elementor is installed on roughly 10,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.6.7.

Strategic Overview

Avg CVSSHigh
7.2/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all Custom Icons for Elementor vulnerabilities before they are exploited.

Highest severity on recordCVSS 7.2CVE-2024-49676

Custom Icons for Elementor <= 0.3.3 - Authenticated (Admin+) Arbitrary File Upload

Read the full analysis

Vulnerability Records

1 records
Custom Icons for Elementor banner
Latestv0.3.4

Custom Icons for Elementor

Michael Bourne

Author

Michael Bourne

4.5(33)
90/100
Last Updated
2024-10-28 (2y ago)
Active Installs
10,000+
Downloads
250,296
Requires WP
5.4+
Requires PHP
7.4+
Tested up to
WP 6.6.7
Created
2018-08-02 (8y ago)

Enables the user to add their own custom icons to the built in Elementor icon controls and elements, thereby removing the reliance on FontAwesome and providing a better opportunity for branding with custom icon sets on your websites. Works exclusively through the use of Fontello’s free icon font service. Plugin Features Add unlimited icons to your website via Fontello font packs View the icons in each uploaded pack, delete individual packs if desired Use icons anywhere you would normally with the default Elementor icon selectors Please note, this plugin requires the Elementor Page Builder to be installed and active. Elementor is a free plugin. This plugin relies on a third party service for it’s functionality provided by Fontello. No private information is sent to their server, rather their provided webfont downloads are what’s used to add fonts to this plugin. Looking for a video tutorial? Here it is! Plugin Removal Removing this plugin will render your custom icons to be deleted. Take care to un-select them from your icon elements prior to plugin removal. Copyright Custom Icons for Elementor is a plugin for WordPress that enables you to add custom icon fonts to the built in Elementor controls. Copyright (c) 2018 Michael Bourne. The Custom Icons for Elementor Plugin is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program. If not, see http://www.gnu.org/licenses/ You can contact me at michael@michaelbourne.ca

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C