Upload custom fonts with custom font uploader. Auto converts to woff2 for better performance. Self-hosted, GDPR compliant, and easy custom font plugin
39
Score
36
Errors
55
Warnings
+1
Change
Category Scores
Security0
Repo94
Performance100
Maintainability72
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Security
67
6 issue groups
Maintainability
23
9 issue groups
Repo Compliance
1
1 issue group
WARNINGSecurityRequest data is not unslashed$_GET['predefinedfontid'] not unslashed before sanitization. Use wp_unslash() or similar16
- Category
- Security
- Occurrences
- 16
- Severity
- warning
Sample message
$_GET['predefinedfontid'] not unslashed before sanitization. Use wp_unslash() or similar
ERRORSecurityOutput is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$languageSelector['selectHTML']'.13
- Category
- Security
- Occurrences
- 13
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$languageSelector['selectHTML']'.
WARNINGSecurityInput is not sanitizedDetected usage of a non-sanitized input variable: $_GET['predefinedfontid']12
- Category
- Security
- Occurrences
- 12
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_GET['predefinedfontid']
WARNINGSecurityMissing nonce verificationProcessing form data without nonce verification.10
- Category
- Security
- Occurrences
- 10
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityInput is not validatedDetected usage of a possibly undefined superglobal array index: $_GET['delete_font_assign_key']. Check that the array index exists before using it.10
- Category
- Security
- Occurrences
- 10
- Severity
- warning
Sample message
Detected usage of a possibly undefined superglobal array index: $_GET['delete_font_assign_key']. Check that the array index exists before using it.
WARNINGSecurityNonce verification recommendedProcessing form data without nonce verification.6
- Category
- Security
- Occurrences
- 6
- Severity
- warning
Sample message
Processing form data without nonce verification.
ERRORMaintainabilityfile system operations fcloseFile operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().
ERRORMaintainabilityfile system operations fopenFile operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fopen().4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fopen().
ERRORMaintainabilityfile system operations fwriteFile operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fwrite().4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fwrite().
ERRORMaintainabilitydate datedate() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- error
Sample message
date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.
Show 6 moreShow less
ERRORMaintainabilitywp function not compatible with requires wp3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- error
Sample message
Function "sanitize_textarea_field()" requires WordPress 4.7.0, but your plugin minimum supported version is WordPress 4.0.0.
ERRORMaintainabilityrand rand2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
rand() is discouraged. Use the far less predictable wp_rand() instead.
ERRORMaintainabilityfile system operations mkdir1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: mkdir().
ERRORMaintainabilityfive star reviews detected1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Linking directly to 5 stars reviews is not allowed.
WARNINGMaintainabilitymismatched plugin name1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- warning
Sample message
Plugin name "Use Any Font | Custom Font Uploader" is different from the name declared in plugin header "Use Any Font".
ERRORRepo Complianceplugin header no license1
- Category
- Repo Compliance
- Occurrences
- 1
- Severity
- error
Sample message
Missing "License" in Plugin Header. Please update your Plugin Header with a valid GPLv2 (or later) compatible license.
External Connections
Potential connections found in static code analysis.
Outbound calls
29
External assets
1
Incoming endpoints
1
Notable Domains
dineshkarki.com.np13 · outbound
demos.dnesscarkey.com2 · outbound
messenger.com2 · outbound
server2.dnesscarkey.org1 · outbound
server3.dnesscarkey.org1 · outbound
Platform / Reference Domains
wordpress.org9 · platform/reference
External Asset Domains
ultimatefont.com2 · asset + outbound
Incoming Endpoints
No public endpoints detected.
Admin AJAX endpoints1
wp_ajax_uaf_predefined_font_interfaceauthenticated
wp_ajax
Score History
2 score snapshots
v6.4
39
Latest
- Findings
- 91
- Errors
- 36
- Warnings
- 55
- Check
- 2.0.0
v6.3.14
38
Score
- Findings
- 90
- Errors
- 37
- Warnings
- 53
- Check
- 2.0.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 39 | 91 | 36 | 55 | v6.4 | 2.0.0 |
| 38 | 90 | 37 | 53 | v6.3.14 | 2.0.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Category
Issue
Domain
Related
Disable Google Fonts98 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreClassic Editor63 scoreWooCommerce21 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreAkismet Anti-spam: Spam Protection35 scoreCustom Fonts – Host Your Fonts Locally77 scoreWP Armour – Honeypot Anti Spam40 scoreFonts Plugin | Google Fonts, Adobe Fonts & Upload Fonts35 scoreDisable and Remove Google Fonts | GDPR & DSGVO friendly35 scoreSelf-Hosted Google Fonts77 scoreAny Mobile Theme Switcher38 score
Author
Category
Issue
Domain
Related
Disable Google Fonts98 scoreYoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreClassic Editor63 scoreWooCommerce21 scoreAll-in-One WP Migration and Backup34 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreAkismet Anti-spam: Spam Protection35 scoreCustom Fonts – Host Your Fonts Locally77 scoreWP Armour – Honeypot Anti Spam40 scoreFonts Plugin | Google Fonts, Adobe Fonts & Upload Fonts35 scoreDisable and Remove Google Fonts | GDPR & DSGVO friendly35 scoreSelf-Hosted Google Fonts77 scoreAny Mobile Theme Switcher38 score
Related Plugins
Swap Google Fonts Display: Improve Font Rendering & Performance
10k+ active installs
99
Disable Google Fonts
40k+ active installs
98
Local Fonts Uploader – Upload & Host Any Font Locally for GDPR
4k+ active installs
98
Remove Google Fonts
700 active installs
98
Ultimate Fonts
400 active installs
92
Fonto – Custom Web Fonts Manager
2k+ active installs
91