Host Google Fonts locally, Auto combine and remove duplicate fonts, Auto preload. pass Core Web Vitals — GDPR compliant, auto-config.
Category Scores
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
57
5 issue groups
Maintainability
5
4 issue groups
I18n
1
1 issue group
WARNINGSecurityInterpolated SQL is not preparedUse placeholders and $wpdb->prepare(); found interpolated variable {$dec} at "DELETE FROM {$dec} WHERE updated_at IS NOT NULL AND updated_at < ( NOW() - INTERVAL %d DAY )"28
- Category
- Security
- Occurrences
- 28
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable {$dec} at "DELETE FROM {$dec} WHERE updated_at IS NOT NULL AND updated_at < ( NOW() - INTERVAL %d DAY )"
WARNINGSecurityDatabase parameter is not escapedUnescaped parameter $col used in $wpdb->query()\n$col assigned unsafely at line 252.24
- Category
- Security
- Occurrences
- 24
- Severity
- warning
Sample message
Unescaped parameter $col used in $wpdb->query()\n$col assigned unsafely at line 252.
ERRORSecuritySQL query is not preparedUse placeholders and $wpdb->prepare(); found $value3
- Category
- Security
- Occurrences
- 3
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $value
WARNINGMaintainabilityNon-prefixed global variableGlobal variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$site_id".2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$site_id".
WARNINGI18nDiscouraged text-domain loadingload_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.1
- Category
- I18n
- Occurrences
- 1
- Severity
- warning
Sample message
load_plugin_textdomain() has been discouraged since WordPress version 4.6. When your plugin is hosted on WordPress.org, you no longer need to manually include this function call for translations under your plugin slug. WordPress will automatically load the translations for you as needed.
WARNINGSecurityUnfinished PrepareReplacement variables found, but no valid placeholders found in the query.1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
Replacement variables found, but no valid placeholders found in the query.
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_GET['easyfonts_probe']1
- Category
- Security
- Occurrences
- 1
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_GET['easyfonts_probe']
ERRORMaintainabilityfile system operations is writableFile operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: is_writable().1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: is_writable().
ERRORMaintainabilityNon Enqueued StylesheetStylesheets must be registered/enqueued via wp_enqueue_style()1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Stylesheets must be registered/enqueued via wp_enqueue_style()
WARNINGMaintainabilitymismatched plugin namePlugin name "EasyFonts – Host Google Fonts Locally, Fast & Auto-Optimize, GDPR Compliant" is different from the name declared in plugin header "Easy Fonts".1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Plugin name "EasyFonts – Host Google Fonts Locally, Fast & Auto-Optimize, GDPR Compliant" is different from the name declared in plugin header "Easy Fonts".
External Connections
Potential connections found in static code analysis.
Outbound calls
11
External assets
0
Incoming endpoints
0
Notable Domains
External Asset Domains
No external asset domains detected.
Incoming Endpoints
No public endpoints detected.
Score History
First score snapshot
v2.0.2
47
Latest
- Findings
- 63
- Errors
- 5
- Warnings
- 58
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 47 | 63 | 5 | 58 | v2.0.2 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.