Easy self-host Google Fonts, Adobe Fonts support, or upload custom fonts in WordPress. Integrated into the most popular themes and page builders.
30
Score
191
Errors
178
Warnings
+0
Change
Category Scores
Security0
Repo97
Performance100
Maintainability28
Issues to Review
Prioritized issue groups from the latest Plugin Check scan
Maintainability
153
14 issue groups
I18n
109
1 issue group
Security
96
10 issue groups
ERRORI18nText Domain MismatchMismatched text domain. Expected 'yabe-webfont' but got 'jooosi-fon'.109
- Category
- I18n
- Occurrences
- 109
- Severity
- error
Sample message
Mismatched text domain. Expected 'yabe-webfont' but got 'jooosi-fon'.
WARNINGMaintainabilityDirect QueryUse of a direct database call is discouraged.45
- Category
- Maintainability
- Occurrences
- 45
- Severity
- warning
Sample message
Use of a direct database call is discouraged.
WARNINGMaintainabilityNo CachingDirect database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().39
- Category
- Maintainability
- Occurrences
- 39
- Severity
- warning
Sample message
Direct database call without caching detected. Consider using wp_cache_get() / wp_cache_set() or wp_cache_delete().
ERRORSecurityException output is not escapedAll output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$attachmentId'.38
- Category
- Security
- Occurrences
- 38
- Severity
- error
Sample message
All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '$attachmentId'.
WARNINGMaintainabilityNon-prefixed hook nameHook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "a!jooosi/fon/api/router:invalid_api".24
- Category
- Maintainability
- Occurrences
- 24
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "a!jooosi/fon/api/router:invalid_api".
WARNINGSecurityInterpolated SQL is not preparedUse placeholders and $wpdb->prepare(); found interpolated variable {$columns} at "INSERT IGNORE INTO `{$table}` ({$columns}) SELECT {$columns} FROM `{$legacyTable}`"23
- Category
- Security
- Occurrences
- 23
- Severity
- warning
Sample message
Use placeholders and $wpdb->prepare(); found interpolated variable {$columns} at "INSERT IGNORE INTO `{$table}` ({$columns}) SELECT {$columns} FROM `{$legacyTable}`"
WARNINGSecurityDatabase parameter is not escapedUnescaped parameter $legacyTable used in $wpdb->query()11
- Category
- Security
- Occurrences
- 11
- Severity
- warning
Sample message
Unescaped parameter $legacyTable used in $wpdb->query()
ERRORSecuritySQL query is not preparedUse placeholders and $wpdb->prepare(); found $sql11
- Category
- Security
- Occurrences
- 11
- Severity
- error
Sample message
Use placeholders and $wpdb->prepare(); found $sql
ERRORMaintainabilityunlink unlinkunlink() is discouraged. Use wp_delete_file() to delete a file.9
- Category
- Maintainability
- Occurrences
- 9
- Severity
- error
Sample message
unlink() is discouraged. Use wp_delete_file() to delete a file.
WARNINGMaintainabilityNon-prefixed global symbolThe "a!jooosi/fon/core/cache:build" prefix is not a valid namespace/function/class/variable/constant prefix in PHP.7
- Category
- Maintainability
- Occurrences
- 7
- Severity
- warning
Sample message
The "a!jooosi/fon/core/cache:build" prefix is not a valid namespace/function/class/variable/constant prefix in PHP.
Show 15 moreShow less
WARNINGMaintainabilityNon-prefixed global variable6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- warning
Sample message
Global variables defined by a theme/plugin should start with the theme/plugin prefix. Found: "$activePlugins".
ERRORMaintainabilityparse url parse url6
- Category
- Maintainability
- Occurrences
- 6
- Severity
- error
Sample message
parse_url() is discouraged because of inconsistency in the output across PHP versions; use wp_parse_url() instead.
ERRORMaintainabilityrename rename4
- Category
- Maintainability
- Occurrences
- 4
- Severity
- error
Sample message
rename() is discouraged. Use WP_Filesystem::move() to rename a file.
WARNINGMaintainabilitySchema Change3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Attempting a database schema change is discouraged.
WARNINGMaintainabilityDynamic hook name3
- Category
- Maintainability
- Occurrences
- 3
- Severity
- warning
Sample message
Hook names invoked by a theme/plugin should start with the theme/plugin prefix. Found: "$hook".
WARNINGSecurityInput is not sanitized3
- Category
- Security
- Occurrences
- 3
- Severity
- warning
Sample message
Detected usage of a non-sanitized input variable: $_GET['page']
ERRORSecurityLike Wildcards In Query2
- Category
- Security
- Occurrences
- 2
- Severity
- error
Sample message
SQL wildcards for a LIKE query should be passed in through a replacement parameter. Found: LIKE '%1\$s'.
WARNINGSecurityReplacements Wrong Number2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
Incorrect number of replacements passed to $wpdb->prepare(). Found 1 replacement parameters, expected 0.
ERRORMaintainabilitydate date2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
date() is affected by runtime timezone changes which can cause date/time to be incorrectly displayed. Use gmdate() instead.
WARNINGSecurityMissing nonce verification2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityNonce verification recommended2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
Processing form data without nonce verification.
WARNINGSecurityRequest data is not unslashed2
- Category
- Security
- Occurrences
- 2
- Severity
- warning
Sample message
$_SERVER['HTTP_REFERER'] not unslashed before sanitization. Use wp_unslash() or similar
ERRORMaintainabilityfile system operations fclose2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- error
Sample message
File operations should use WP_Filesystem methods instead of direct PHP filesystem calls. Found: fclose().
WARNINGMaintainabilityMissing Version2
- Category
- Maintainability
- Occurrences
- 2
- Severity
- warning
Sample message
Resource version not set in call to wp_register_script(). This means new versions of the script may not always be loaded due to browser caching.
ERRORMaintainabilityNot Allowed1
- Category
- Maintainability
- Occurrences
- 1
- Severity
- error
Sample message
Use of heredoc syntax (<<<) is not allowed; use standard strings or inline HTML instead
External Connections
Potential connections found in static code analysis.
Outbound calls
114
External assets
0
Incoming endpoints
0
Notable Domains
php.net11 · outbound
facebook.com4 · outbound
fon.jooo.si4 · outbound
jooo.si4 · outbound
unicode.org3 · outbound
use.typekit.net3 · outbound
Platform / Reference Domains
github.com23 · platform/reference
w3.org17 · platform/reference
developer.wordpress.org8 · platform/reference
make.wordpress.org3 · platform/reference
External Asset Domains
No external asset domains detected.
Incoming Endpoints
No public endpoints detected.
Score History
5 score snapshots
v1.1.4
30
Latest
- Findings
- 369
- Errors
- 191
- Warnings
- 178
- Check
- 2.1.0
v1.1.3
30
Score
- Findings
- 369
- Errors
- 191
- Warnings
- 178
- Check
- 2.1.0
| Scan | Score | Findings | Errors | Warnings | Plugin | Check |
|---|---|---|---|---|---|---|
| Latest | 30 | 369 | 191 | 178 | v1.1.4 | 2.1.0 |
| 30 | 369 | 191 | 178 | v1.1.3 | 2.1.0 |
Relationship Map
Author, categories, issues, domains, and nearby plugins.
Loading map
PluginAuthorCategoryIssueDomainRelated
Relationship links
Author
Issue
Domain
Related
Yoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder38 scoreWooCommerce22 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreAdvanced Custom Fields (ACF®)23 scoreComplianz GDPR/CCPA Cookie Consent Banner24 scoreCookieYes – Cookie Banner for Cookie Consent (Easy to setup GDPR/CCPA Compliant Cookie Notice)87 scoreCookie Compliance for WordPress – Cookie Consent, GDPR & CCPA29 score
Author
Issue
Domain
Related
Yoast SEO – Advanced SEO with real-time guidance and built-in AI24 scoreContact Form 769 scoreElementor Website Builder – more than just a page builder38 scoreWooCommerce22 scoreSite Kit by Google – Analytics, Search Console, AdSense, Speed25 scoreWordfence Security – Firewall, Malware Scan, and Login Security21 scoreAkismet Anti-spam: Spam Protection35 scoreAll-in-One WP Migration and Backup34 scoreJetpack – WP Security, Backup, Speed, & Growth22 scoreReally Simple Security – Simple and Performant Security (formerly Really Simple SSL)19 scoreAdvanced Custom Fields (ACF®)23 scoreComplianz GDPR/CCPA Cookie Consent Banner24 scoreCookieYes – Cookie Banner for Cookie Consent (Easy to setup GDPR/CCPA Compliant Cookie Notice)87 scoreCookie Compliance for WordPress – Cookie Consent, GDPR & CCPA29 score
Related Plugins
Disable Emojis (GDPR friendly)
60k+ active installs
100
WF Cookie Consent
10k+ active installs
100
WS Form LITE – Drag & Drop Contact Form Builder
10k+ active installs
100
Kansleri Cookie Consent
700 active installs
100
Lightweight Google Analytics
400 active installs
100
Show Me The Cookies
400 active installs
100