The #1 fonts plugin for WordPress. 1,400+ Google Fonts, Adobe Fonts and your own font files. Live preview, no code required.
35
Score
49
Errors
4
Warnings
+0
Change
Category Scores
Security66
Repo90
Performance100
Maintainability74
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
45
7 issue groups
Security
5
2 issue groups
I18n
2
1 issue group
Supply Chain
1
1 issue group
ERRORMaintainabilityMissing direct file access protectionPHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;33
- Category
- Maintainability
- Occurrences
- 33
- Severity
- error
Sample message
PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;
ERRORMaintainabilitywp function not compatible with requires wpFunction "register_block_type()" requires WordPress 5.0.0, but your plugin minimum supported version is WordPress 4.0.0.6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- error
Sample message
Function "register_block_type()" requires WordPress 5.0.0, but your plugin minimum supported version is WordPress 4.0.0.
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$attr_str'.4
- Category
- Security
- Occurrences
- 4
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$attr_str'.
ERRORI18nText Domain MismatchMismatched text domain. Expected 'olympus-google-fonts' but got 'plinth'.2
- Category
- I18n
- Occurrences
- 2
- Severity
- error
Sample message
Mismatched text domain. Expected 'olympus-google-fonts' but got 'plinth'.
WARNINGMaintainabilitytrademarked termThe plugin name includes a restricted term. Your chosen plugin name - "Fonts Plugin | Google Fonts, Adobe Fonts & Upload Fonts" - contains the restricted term "plugin" which cannot be used at all in your plugin name.2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
The plugin name includes a restricted term. Your chosen plugin name - "Fonts Plugin | Google Fonts, Adobe Fonts & Upload Fonts" - contains the restricted term "plugin" which cannot be used at all in your plugin name.
ERRORMaintainabilityOffloaded ContentOffloading images, js, css, and other scripts to your servers or any remote service is disallowed.1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Offloading images, js, css, and other scripts to your servers or any remote service is disallowed.
ERRORSecuritySetting is missing a sanitization callbackSanitization missing for register_setting().1
- Category
- Security
- Occurrences
- 1
- Severity
- error
Sample message
Sanitization missing for register_setting().
ERRORMaintainabilitybadly named filesFile and folder names must not contain spaces or special characters.1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
File and folder names must not contain spaces or special characters.
ERRORSupply ChainHidden files includedHidden files are not permitted.1
- Category
- Supply Chain
- Occurrences
- 1
- Severity
- error
Sample message
Hidden files are not permitted.
WARNINGMaintainabilitymismatched plugin namePlugin name "Fonts Plugin | Google Fonts, Adobe Fonts & Upload Fonts" is different from the name declared in plugin header "Fonts Plugin | Use Google Fonts, Adobe Fonts or Upload Fonts".1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Plugin name "Fonts Plugin | Google Fonts, Adobe Fonts & Upload Fonts" is different from the name declared in plugin header "Fonts Plugin | Use Google Fonts, Adobe Fonts or Upload Fonts".
Show 1 moreShow less
WARNINGMaintainabilityunexpected markdown file1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Unexpected markdown file "CLAUDE.md" detected in plugin root. Only specific markdown files are expected in production plugins.
External Connections
Potential connections found in static code analysis.
Outbound calls
79
External assets
4
Incoming endpoints
11
Notable Domains
docs.fontsplugin.com5 · outbound
fonts.adobe.com2 · outbound
typekit.com2 · outbound
fonts.gstatic.com1 · outbound
fontsplugin.email1 · outbound
Platform / Reference Domains
opensource.org36 · platform/reference
wordpress.org4 · platform/reference
w3.org3 · platform/reference
codex.wordpress.org1 · platform/reference
developer.wordpress.org1 · platform/reference
github.com1 · platform/reference
gnu.org1 · platform/reference
ps.w.org1 · platform/reference
External Asset Domains
fontsplugin.com18 · asset + outbound
fonts.googleapis.com4 · asset + outbound
use.typekit.com2 · asset + outbound
Incoming Endpoints
No public endpoints detected.
Admin AJAX endpoints11
wp_ajax_ogf_clear_font_cacheauthenticated
wp_ajax
wp_ajax_ogf_delete_custom_fontauthenticated
wp_ajax
wp_ajax_ogf_dismiss_guideauthenticated
wp_ajax
wp_ajax_ogf_dismiss_noticeauthenticated
wp_ajax
wp_ajax_ogf_refresh_typekitauthenticated
wp_ajax
wp_ajax_ogf_reset_all_fontsauthenticated
wp_ajax
wp_ajax_ogf_save_custom_fontauthenticated
wp_ajax
wp_ajax_ogf_save_font_loadingauthenticated
wp_ajax
wp_ajax_ogf_save_settingsauthenticated
wp_ajax
wp_ajax_ogf_save_typekit_keyauthenticated
wp_ajax
wp_ajax_ogf_toggle_typekit_kitauthenticated
wp_ajax
Score History
2 score snapshots
v4.2.1
35
Latest
- Findings
- 53
- Errors
- 49
- Warnings
- 4
- Check
- 2.0.0
v4.1.3
35
Score
- Findings
- 49
- Errors
- 41
- Warnings
- 8
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 35 | 53 | 49 | 4 | v4.2.1 | 2.0.0 |
| 35 | 49 | 41 | 8 | v4.1.3 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Issue
Domain
Related
Disable and Remove Google Fonts | GDPR & DSGVO friendly35 scoreElementor Website Builder – more than just a page builder39 scoreLiteSpeed Cache35 scoreAkismet Anti-spam: Spam Protection35 scoreContact Form 769 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreClassic Editor63 scoreWooCommerce22 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreCustom Fonts – Host Your Fonts Locally77 scoreOMGF | GDPR/DSGVO Compliant, Faster Google Fonts. Easy.31 scoreUse Any Font | Custom Font Uploader39 scoreLocal Google Fonts93 score
Author
Issue
Domain
Related
Disable and Remove Google Fonts | GDPR & DSGVO friendly35 scoreElementor Website Builder – more than just a page builder39 scoreLiteSpeed Cache35 scoreAkismet Anti-spam: Spam Protection35 scoreContact Form 769 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreClassic Editor63 scoreWooCommerce22 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreCustom Fonts – Host Your Fonts Locally77 scoreOMGF | GDPR/DSGVO Compliant, Faster Google Fonts. Easy.31 scoreUse Any Font | Custom Font Uploader39 scoreLocal Google Fonts93 score
Related Plugins
Khattat – Arabic Fonts
500 active installs
100
Swap Google Fonts Display: Improve Font Rendering & Performance
10k+ active installs
99
Disable Google Fonts
40k+ active installs
98
Local Fonts Uploader – Upload & Host Any Font Locally for GDPR
4k+ active installs
98
Remove Google Fonts
700 active installs
98
Adobe Fonts (formerly Typekit) for WordPress
10k+ active installs
97