Title: Genericons Example File is Unsafe
Author: Ipstenu (Mika Epstein)
Published: May 7, 2015

---

 [  ](https://profiles.wordpress.org/ipstenu/) [Ipstenu (Mika Epstein)](https://profiles.wordpress.org/ipstenu/)
3:41 am _on_ May 7, 2015      

# Genericons Example File is Unsafe

If you use Genericons in your pluginPlugin A plugin is a piece of software containing
a group of functions that can be added to a WordPress website. They can extend functionality
or add new features to your WordPress websites. WordPress plugins are written in
the PHP programming language and integrate seamlessly with WordPress. These can 
be free in the WordPress.org Plugin Directory [https://wordpress.org/plugins/](https://wordpress.org/plugins/)
or can be cost-based plugin from a third-party., please exclude the example.htmlHTML
HTML is an acronym for Hyper Text Markup Language. It is a markup language that 
is used in the development of web pages and websites. (which is no longer included
in the Genericons package itself).

> The Genericons icon font package, which is used in a number of popular themes 
> and plugins, contained an HTML file vulnerable to a cross-site scripting attack.
> All affected themes and plugins hosted on WordPress.orgWordPress.org The community
> site where WordPress code is created and shared by the users. This is where you
> can download the source code for WordPress core, plugins and themes as well as
> the central location for community conversations and organization. [https://wordpress.org/](https://wordpress.org/)(
> including the Twenty Fifteen default theme) have been updated today by the WordPress
> security team to address this issue by removing this nonessential file. To help
> protect other Genericons usage, WordPress 4.2.2 proactively scans the wp-content
> directory for this HTML file and removes it. Reported by Robert Abela of Netsparker.

See the full release notes: https://wordpress.org/news/2015/05/wordpress-4-2-2/

### Share this:

 * [  Threads ](https://make.wordpress.org/plugins/2015/05/07/genericons-example-file-is-unsafe/?share=threads)
 * [  Mastodon ](https://make.wordpress.org/plugins/2015/05/07/genericons-example-file-is-unsafe/?share=mastodon)
 * [  Bluesky ](https://make.wordpress.org/plugins/2015/05/07/genericons-example-file-is-unsafe/?share=bluesky)
 * [  X ](https://make.wordpress.org/plugins/2015/05/07/genericons-example-file-is-unsafe/?share=x)
 * [  Facebook ](https://make.wordpress.org/plugins/2015/05/07/genericons-example-file-is-unsafe/?share=facebook)
 * [  LinkedIn ](https://make.wordpress.org/plugins/2015/05/07/genericons-example-file-is-unsafe/?share=linkedin)

# Post navigation

[← Reporting Plugin Issues](https://make.wordpress.org/plugins/2015/05/04/reporting-plugin-issues/)

[‘Policy’ on PHP Versions →](https://make.wordpress.org/plugins/2015/06/05/policy-on-php-versions/)