Icon Indexa

Icon Indexa is a WordPress plugin that bundles thousands of SVG icons with a fast search interface and a Gutenberg block, so you can find and use icons without ever leaving WordPress.

Ant Design Icons (830 icons) and Boxicons (3,768 icons), covering filled, outlined, two-tone, regular, solid, and logo styles — more than 4,500 icons in total.

No. Every SVG is bundled with the plugin and served from your own site. No external requests are made to display icons.

Icons are indexed in a local SQLite database using FTS5 full-text search. You can search by icon name or tags and filter by library and style, with results returned in milliseconds even across thousands of icons.

No. Icon Indexa builds a local SQLite database automatically on first run from the icon data bundled with the plugin, storing it in your uploads directory. It only requires the PHP PDO SQLite extension, which is enabled on most hosts.

Yes. You can add your own custom icon in two ways: paste the SVG code directly, or select an SVG from the WordPress Media Library.

The icon block includes controls for the icon's color and background. However, if your SVG icon has hard-coded color or fill values, the plugin will respect those instead of any applied custom colors.

Yes. The plugin uses a text domain and is fully ready for localization.

Yes. Every SVG you paste or import from the Media Library is sanitized before it is used. Scripts, event handlers, and unsafe markup are stripped, and SVGs that embed a raster bitmap (PNG/JPEG) or that have no usable vector content are rejected with a clear message. Link URLs on icons are restricted to safe protocols (http, https, mailto, tel, and same-page anchors).

Icon Indexa stores its data in a self-contained SQLite database that ships inside the plugin, plus a small set of WordPress options. No content is written outside your own site. Custom icons you add are stored locally. Removing the plugin cleans up its data on uninstall.

No. Icon Indexa is fully self-hosted. No icon data, usage data, or telemetry is sent to any external service, and no assets are fetched from a third-party CDN.

No. backend/data/ib.db contains only static, public icon metadata (icon names, tags, and SVG markup) that is already served to your visitors. It holds no user data, credentials, or telemetry. An index.php guard prevents directory listing, and the database is only ever read server-side by PHP. If you prefer to also block direct HTTP access to the data directory, add a rule to your server config. For Nginx: location ~* /wp-content/plugins/icon-indexa/backend/data/ { deny all; } Blocking direct HTTP access has no effect on plugin functionality.