EasyFonts – Host Google Fonts Locally, Fast & Auto-Optimize, GDPR Compliant

Host Google Fonts locally, Auto combine and remove duplicate fonts, Auto preload. pass Core Web Vitals — GDPR compliant, auto-config.

v2.0.2FluxPressUpdated Added 1k+ installs100% rating
47
Score
5
Errors
58
Warnings
+0
Change

Category Scores

Security7
Repo100
Performance100
Maintainability93

Issues to Review

Prioritized issue groups from the latest Plugin Check scan

63 findings

Security

57

5 issue groups

Maintainability

5

4 issue groups

I18n

1

1 issue group

WARNINGSecurityInterpolated SQL is not preparedUse placeholders and $wpdb->prepare(); found interpolated variable {$dec} at "DELETE FROM {$dec} WHERE updated_at IS NOT NULL AND updated_at < ( NOW() - INTERVAL %d DAY )"28
Category
Security
Occurrences
28
Severity
warning

Sample message

Use placeholders and $wpdb->prepare(); found interpolated variable {$dec} at "DELETE FROM {$dec} WHERE updated_at IS NOT NULL AND updated_at < ( NOW() - INTERVAL %d DAY )"

WARNINGSecurityDatabase parameter is not escapedUnescaped parameter $col used in $wpdb->query()\n$col assigned unsafely at line 252.24
Category
Security
Occurrences
24
Severity
warning

Sample message

Unescaped parameter $col used in $wpdb->query()\n$col assigned unsafely at line 252.

ERRORSecuritySQL query is not preparedUse placeholders and $wpdb->prepare(); found $value3
Category
Security
Occurrences
3
Severity
error

Sample message

Use placeholders and $wpdb->prepare(); found $value

WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$site_id".2
Category
Maintainability
Occurrences
2
Severity
warning

Sample message

Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$site_id".

WARNINGI18nDiscouraged text-domain loadingload_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.1
Category
I18n
Occurrences
1
Severity
warning

Sample message

load_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.

WARNINGSecurityUnfinished PrepareReplacement variables found, but no valid placeholders found in the query.1
Category
Security
Occurrences
1
Severity
warning

Sample message

Replacement variables found, but no valid placeholders found in the query.

WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_GET['easyfonts_probe']1
Category
Security
Occurrences
1
Severity
warning

Sample message

Detected usage of a non-sanitized input variable: $_GET['easyfonts_probe']

ERRORMaintainabilityfile system operations is writableFile operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: is_writable().1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: is_writable().

ERRORMaintainabilityNon Enqueued StylesheetStylesheets must be registered/enqueued via wp_enqueue_style()1
Category
Maintainability
Occurrences
1
Severity
error

Sample message

Stylesheets must be registered/enqueued via wp_enqueue_style()

WARNINGMaintainabilitymismatched plugin namePlugin name "EasyFonts – Host Google Fonts Locally, Fast & Auto-Optimize, GDPR Compliant" is different from the name declared in plugin header "Easy Fonts".1
Category
Maintainability
Occurrences
1
Severity
warning

Sample message

Plugin name "EasyFonts – Host Google Fonts Locally, Fast & Auto-Optimize, GDPR Compliant" is different from the name declared in plugin header "Easy Fonts".

External Connections

Potential connections found in static code analysis.

6 domains

Outbound calls

11

External assets

0

Incoming endpoints

0

Notable Domains

fluxpress.io4 · outbound
cdn.yourdomain.com1 · outbound
evil.test1 · outbound

Platform / Reference Domains

gnu.org1 · platform/reference
w3.org1 · platform/reference

External Asset Domains

No external asset domains detected.

Incoming Endpoints

No public endpoints detected.

Score History

First score snapshot

v2.0.2

47

Latest

Findings
63
Errors
5
Warnings
58
Check
2.0.0

Relationship Map

Author, categories, issues, domains, and nearby plugins.

33 nodes

Related Plugins

Disable Emojis (GDPR friendly)

60k+ active installs

100
EU Withdrawal Compliance

900 active installs

100
Show Me The Cookies

500 active installs

100
WF Cookie Consent

10k+ active installs

100