diff --git a/app/templates/page-header.php b/app/templates/page-header.php
index c4f0db3..b0d6398 100644
--- a/app/templates/page-header.php
+++ b/app/templates/page-header.php
@@ -53,6 +53,10 @@
         });
     </script>
 <?php } ?>
+<?php
+// hook for loading plugin assets (css, images, etc.)
+do_hook('page_head_assets', ['page' => $page ?? null, 'action' => $_GET['action'] ?? null, 'app_root' => $app_root ?? '']);
+?>
     <title><?= htmlspecialchars($config['site_name']) ?></title>
     <link rel="icon" type="image/x-icon" href="<?= htmlspecialchars($app_root) ?>static/favicon.ico">
 </head>
diff --git a/public_html/index.php b/public_html/index.php
index 5e80777..b328d21 100644
--- a/public_html/index.php
+++ b/public_html/index.php
@@ -108,7 +108,7 @@ if (!isset($page)) {
 }
 
 // List of pages that don't require authentication
-$public_pages = ['login', 'help', 'about'];
+$public_pages = ['login', 'help', 'about', 'theme-asset', 'plugin-asset'];
 
 // Let plugins filter/extend public_pages
 $public_pages = filter_public_pages($public_pages);