Fontier – Font Preview Plugin for Easy Digital Downloads, WooCommerce, and Dokan Security & Risk Analysis

wordpress.org/plugins/fontier

A font preview extension works with Easy Digital Downloads, WooCommerce, and Dokan products.

400 active installs v1.4 PHP 7.4+ WP 5.6+ Updated Nov 27, 2024

addonselementorelementor-addonelementor-widgetelements

A · Safe

CVEs total0

Unpatched0

Last CVENever

Plugin page Download

Safety Verdict

Is Fontier – Font Preview Plugin for Easy Digital Downloads, WooCommerce, and Dokan Safe to Use in 2026?

Generally Safe

Score 92/100

Fontier – Font Preview Plugin for Easy Digital Downloads, WooCommerce, and Dokan has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 1yr ago

Risk Assessment

The "fontier" plugin version 1.4 exhibits a mixed security posture, with several positive indicators alongside a significant area of concern. The plugin demonstrates good practices in its handling of SQL queries, utilizing prepared statements exclusively, and has a robust set of nonce and capability checks, indicating developer awareness of common security mechanisms. Furthermore, the absence of known CVEs and critical or high severity taint flows is a strong positive sign, suggesting a relatively clean history and a lack of obvious critical vulnerabilities. However, the presence of an unprotected AJAX handler is a notable weakness. This entry point could potentially be exploited by unauthenticated users, depending on the functionality it exposes. While the overall attack surface is not excessively large, this single unprotected handler significantly elevates the risk profile.

Key Concerns

Unprotected AJAX handler

Vulnerabilities

None known

Fontier – Font Preview Plugin for Easy Digital Downloads, WooCommerce, and Dokan Security Vulnerabilities

No known vulnerabilities — this is a good sign.

Version History

Fontier – Font Preview Plugin for Easy Digital Downloads, WooCommerce, and Dokan Release Timeline

v1.4Current

v1.3

v1.2

v1.1

v1.0.4

v1.0.3

v1.0.2

v1.0.1

v1.0.0

Code Analysis

Analyzed Mar 16, 2026

Fontier – Font Preview Plugin for Easy Digital Downloads, WooCommerce, and Dokan Code Analysis

Dangerous Functions

Raw SQL Queries

2 prepared

Unescaped Output

251

567 escaped

Nonce Checks

Capability Checks

File Operations

External Requests

Bundled Libraries

SQL Query Safety

100% prepared2 total queries

Output Escaping

69% escaped818 total outputs

Data Flows · Security

All sanitized

Data Flow Analysis

3 flows

csf_export (admin\vendors\codestar-framework\functions\actions.php:62)

Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized

Attack Surface

1 unprotected

Fontier – Font Preview Plugin for Easy Digital Downloads, WooCommerce, and Dokan Attack Surface

Entry Points10

Unprotected1

AJAX Handlers 10

authwp_ajax_fontier_dismiss_noticeadmin\class-fontier-admin.php:15

authwp_ajax_csf-get-iconsadmin\vendors\codestar-framework\functions\actions.php:50

authwp_ajax_csf-exportadmin\vendors\codestar-framework\functions\actions.php:87

authwp_ajax_csf-importadmin\vendors\codestar-framework\functions\actions.php:123

authwp_ajax_csf-resetadmin\vendors\codestar-framework\functions\actions.php:150

authwp_ajax_csf-chosenadmin\vendors\codestar-framework\functions\actions.php:189

authwp_ajax_fontGenratepublic\class-fontier-public.php:40

noprivwp_ajax_fontGenratepublic\class-fontier-public.php:41

authwp_ajax_fontier_glyph_generatorpublic\class-fontier-public.php:42

noprivwp_ajax_fontier_glyph_generatorpublic\class-fontier-public.php:43

WordPress Hooks 58

filterupload_mimesadmin\class-fontier-admin.php:12

filterwp_check_filetype_and_extadmin\class-fontier-admin.php:13

actionadmin_noticesadmin\class-fontier-admin.php:14

actionwp_enqueue_scriptsadmin\vendors\codestar-framework\classes\abstract.class.php:20

actionadmin_menuadmin\vendors\codestar-framework\classes\admin-options.class.php:107

actionadmin_bar_menuadmin\vendors\codestar-framework\classes\admin-options.class.php:108

actionnetwork_admin_menuadmin\vendors\codestar-framework\classes\admin-options.class.php:112

filteradmin_footer_textadmin\vendors\codestar-framework\classes\admin-options.class.php:432

actionadd_meta_boxes_commentadmin\vendors\codestar-framework\classes\comment-options.class.php:38

actionedit_commentadmin\vendors\codestar-framework\classes\comment-options.class.php:39

actioncustomize_registeradmin\vendors\codestar-framework\classes\customize-options.class.php:44

actioncustomize_save_afteradmin\vendors\codestar-framework\classes\customize-options.class.php:45

actionwp_enqueue_scriptsadmin\vendors\codestar-framework\classes\customize-options.class.php:49

actionadd_meta_boxesadmin\vendors\codestar-framework\classes\metabox-options.class.php:52

actionsave_postadmin\vendors\codestar-framework\classes\metabox-options.class.php:53

actionedit_attachmentadmin\vendors\codestar-framework\classes\metabox-options.class.php:54

actionwp_nav_menu_item_custom_fieldsadmin\vendors\codestar-framework\classes\nav-menu-options.class.php:32

actionwp_update_nav_menu_itemadmin\vendors\codestar-framework\classes\nav-menu-options.class.php:33

filterwp_edit_nav_menu_walkeradmin\vendors\codestar-framework\classes\nav-menu-options.class.php:35

actionadmin_initadmin\vendors\codestar-framework\classes\profile-options.class.php:32

actionshow_user_profileadmin\vendors\codestar-framework\classes\profile-options.class.php:44

actionedit_user_profileadmin\vendors\codestar-framework\classes\profile-options.class.php:45

actionpersonal_options_updateadmin\vendors\codestar-framework\classes\profile-options.class.php:47

actionedit_user_profile_updateadmin\vendors\codestar-framework\classes\profile-options.class.php:48

actionafter_setup_themeadmin\vendors\codestar-framework\classes\setup.class.php:73

actioninitadmin\vendors\codestar-framework\classes\setup.class.php:74

actionswitch_themeadmin\vendors\codestar-framework\classes\setup.class.php:75

actionadmin_enqueue_scriptsadmin\vendors\codestar-framework\classes\setup.class.php:76

actionwp_enqueue_scriptsadmin\vendors\codestar-framework\classes\setup.class.php:77

actionwp_headadmin\vendors\codestar-framework\classes\setup.class.php:78

filteradmin_body_classadmin\vendors\codestar-framework\classes\setup.class.php:79

actionadmin_footeradmin\vendors\codestar-framework\classes\shortcode-options.class.php:47

actioncustomize_controls_print_footer_scriptsadmin\vendors\codestar-framework\classes\shortcode-options.class.php:48

actionelementor/editor/before_enqueue_scriptsadmin\vendors\codestar-framework\classes\shortcode-options.class.php:59

actionelementor/editor/footeradmin\vendors\codestar-framework\classes\shortcode-options.class.php:60

actionelementor/editor/footeradmin\vendors\codestar-framework\classes\shortcode-options.class.php:61

actionenqueue_block_editor_assetsadmin\vendors\codestar-framework\classes\shortcode-options.class.php:258

actionmedia_buttonsadmin\vendors\codestar-framework\classes\shortcode-options.class.php:262

actionadmin_initadmin\vendors\codestar-framework\classes\taxonomy-options.class.php:41

actionadmin_footeradmin\vendors\codestar-framework\fields\icon\icon.php:41

actioncustomize_controls_print_footer_scriptsadmin\vendors\codestar-framework\fields\icon\icon.php:42

actionadmin_print_footer_scriptsadmin\vendors\codestar-framework\fields\link\link.php:65

actionprint_default_editor_scriptsadmin\vendors\codestar-framework\fields\wp_editor\wp_editor.php:63

actionadmin_menuadmin\vendors\codestar-framework\views\welcome.php:19

filterplugin_action_linksadmin\vendors\codestar-framework\views\welcome.php:20

filterplugin_row_metaadmin\vendors\codestar-framework\views\welcome.php:21

actionplugins_loadedincludes\class-fontier.php:152

actionadmin_enqueue_scriptsincludes\class-fontier.php:169

actionadmin_enqueue_scriptsincludes\class-fontier.php:170

actiondokan_new_product_after_product_tagspublic\class-fontier-dokan.php:17

actiondokan_new_product_addedpublic\class-fontier-dokan.php:54

actiondokan_product_updatedpublic\class-fontier-dokan.php:55

actiondokan_product_edit_after_product_tagspublic\class-fontier-dokan.php:72

actionwp_footerpublic\class-fontier-dokan.php:115

actionsave_postpublic\class-fontier-fes.php:17

actionfes_render_field_fontier_repeaterpublic\class-fontier-fes.php:137

actionthe_contentpublic\class-fontier-public.php:37

actionwp_enqueue_scriptspublic\class-fontier-public.php:46

Maintenance & Trust

Fontier – Font Preview Plugin for Easy Digital Downloads, WooCommerce, and Dokan Maintenance & Trust

Maintenance Signals

WordPress version tested6.5.8

Last updatedNov 27, 2024

PHP min version7.4

Downloads16K

Community Trust

Rating100/100

Number of ratings1

Active installs400

Alternatives

Fontier – Font Preview Plugin for Easy Digital Downloads, WooCommerce, and Dokan Alternatives

Qi Addons For Elementor

qi-addons-for-elementor

Qi Addons for Elementor is a comprehensive library of 60+ custom, flexible & easily styled Elementor widgets developed by Qode Interactive.

200K 10 CVEs

Addon Elements for Elementor (formerly Elementor Addon Elements)

addon-elements-for-elementor-page-builder

Addon Elements for Elementor comes with 40+ widgets and extensions to extend the power of Elementor Page Builder.

90K 29 CVEs

Mega Elements – Addons for Elementor

mega-elements-addons-for-elementor

A powerful and advanced all in one Elementor addons with unique styling features to create a beautiful website effortlessly.

10K 6 CVEs

ElementsReady Addons for Elementor

element-ready-lite

ElementsReady Addons for Elementor comes up with ultimate widgets like Post, Accordion, Portfolio, Testimonial, Nav menu, Carousel, Slider etc..

3K 9 CVEs

WPB Addons for Elementor – News Ticker, Timeline, Team & More Widgets

wpb-elementor-addons

A powerful collection of custom Elementor widgets and extensions to build advanced layouts with ease.

3K 1 unpatched

Developer Profile

Fontier – Font Preview Plugin for Easy Digital Downloads, WooCommerce, and Dokan Developer Profile

teconce

2 plugins · 700 total installs

trust score

Avg Security Score

92/100

Avg Patch Time

30 days

View full developer profile

Detection Fingerprints

How We Detect Fontier – Font Preview Plugin for Easy Digital Downloads, WooCommerce, and Dokan

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths

/wp-content/plugins/fontier/admin/css/fontier-admin.css/wp-content/plugins/fontier/admin/js/fontier-admin.js

Version Parameters

fontier-admin.css?ver=fontier-admin.js?ver=

HTML / DOM Fingerprints

CSS Classes

fontier-admin-notice

Data Attributes

id="fontier-admin-notice"

JS Globals

ajaxurlwindow.jQuery

FAQ