Custom Fonts is a powerful WordPress plugin that allows you to upload your own custom fonts or choose from a vast collection of Google Fonts, all host …
77
Score
14
Errors
20
Warnings
+0
Change
Category Scores
Security69
Repo86
Performance100
Maintainability81
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
16
8 issue groups
Security
14
2 issue groups
Repo Compliance
3
3 issue groups
I18n
1
1 issue group
WARNINGSecurityRequest data is not unslashed$_GET['page'] not unslashed before sanitization. Use wp_unslash() or similar9
- Category
- Security
- Occurrences
- 9
- Severity
- warning
Sample message
$_GET['page'] not unslashed before sanitization. Use wp_unslash() or similar
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_POST['bsf_custom_font_nonce']5
- Category
- Security
- Occurrences
- 5
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_POST['bsf_custom_font_nonce']
ERRORMaintainabilityDeprecated parameter: get_terms parameter 2The parameter "array(\n\t\t\t\t'hide_empty' => false,\n\t\t\t)" at position #2 of get_terms() has been deprecated since WordPress version 4.5.0. Instead do not pass the parameter.4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- error
Sample message
The parameter "array(\n\t\t\t\t'hide_empty' => false,\n\t\t\t)" at position #2 of get_terms() has been deprecated since WordPress version 4.5.0. Instead do not pass the parameter.
ERRORMaintainabilitywp function not compatible with requires wpFunction "wp_is_block_theme()" requires WordPress 5.9.0, but your plugin minimum supported version is WordPress 5.0.0.4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- error
Sample message
Function "wp_is_block_theme()" requires WordPress 5.9.0, but your plugin minimum supported version is WordPress 5.0.0.
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
WARNINGI18nDiscouraged text-domain loadingload_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.1
- Category
- I18n
- Occurrences
- 1
- Severity
- warning
Sample message
load_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
WARNINGMaintainabilityslow db query meta queryDetected usage of meta_query, possible slow query.1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Detected usage of meta_query, possible slow query.
ERRORMaintainabilityfive star reviews detectedLinking directly to 5 stars reviews is not allowed.1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Linking directly to 5 stars reviews is not allowed.
Show 4 moreShow less
WARNINGMaintainabilitymismatched plugin name1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Plugin name "Custom Fonts - Host Your Fonts Locally" is different from the name declared in plugin header "Custom Fonts".
ERRORRepo Complianceoutdated tested upto header1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- error
Sample message
Tested up to: 6.9 < 7.0. The "Tested up to" value in your plugin is not set to the current version of WordPress. This means your plugin will not show up in searches, as we require plugins to be compatible and documented as tested up to the most recent version of WordPress.
ERRORRepo Complianceplugin header no license1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- error
Sample message
Missing "License" in Plugin Header. Please update your Plugin Header with a valid GPLv2 (or later) compatible license.
WARNINGRepo Compliancereadme parser warnings trimmed short description1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- warning
Sample message
The "Short Description" section is too long and was truncated. A maximum of 150 characters is supported.
External Connections
Not analyzed yet.
Score History
First score snapshot
v2.1.17
77
Latest
- Findings
- 34
- Errors
- 14
- Warnings
- 20
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 77 | 34 | 14 | 20 | v2.1.17 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueRelated
Relationship links
Author
Category
Issue
Request data is not unslashed9 findingsInput is not sanitized5 findingsDeprecated parameter: get_terms parameter 24 findingswp function not compatible with requires wp4 findingsMissing direct file access protection3 findingsDiscouraged text-domain loading1 findingDirect Query1 findingNo Caching1 finding
Related
Yoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreContact Form 769 scoreClassic Editor63 scoreUltimate Addons for Elementor33 scoreSpectra Legacy – Gutenberg Blocks25 scoreStarter Templates – AI-Powered Templates for Elementor & Gutenberg24 scoreSureForms – Contact Form Builder, AI Forms, Payment Form, Survey & Quiz29 scoreOMGF | GDPR/DSGVO Compliant, Faster Google Fonts. Easy.31 scoreCart Abandonment Recovery for WooCommerce – Recover Lost Sales with Automated Emails26 scoreSureRank SEO – Smart Assistant with Meta Tags, Social Preview, XML Sitemap, and Schema77 score
Author
Category
Issue
Request data is not unslashed9 findingsInput is not sanitized5 findingsDeprecated parameter: get_terms parameter 24 findingswp function not compatible with requires wp4 findingsMissing direct file access protection3 findingsDiscouraged text-domain loading1 findingDirect Query1 findingNo Caching1 finding
Related
Yoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreWooCommerce22 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreContact Form 769 scoreClassic Editor63 scoreUltimate Addons for Elementor33 scoreSpectra Legacy – Gutenberg Blocks25 scoreStarter Templates – AI-Powered Templates for Elementor & Gutenberg24 scoreSureForms – Contact Form Builder, AI Forms, Payment Form, Survey & Quiz29 scoreOMGF | GDPR/DSGVO Compliant, Faster Google Fonts. Easy.31 scoreCart Abandonment Recovery for WooCommerce – Recover Lost Sales with Automated Emails26 scoreSureRank SEO – Smart Assistant with Meta Tags, Social Preview, XML Sitemap, and Schema77 score
Related Plugins
Splide Carousel Block
3k+ active installs
100
Khattat – Arabic Fonts
500 active installs
100
Swap Google Fonts Display: Improve Font Rendering & Performance
10k+ active installs
99
Disable Google Fonts
40k+ active installs
98
Local Fonts Uploader – Upload & Host Any Font Locally for GDPR
4k+ active installs
98
Remove Google Fonts
700 active installs
98