[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fnQcklSUAf9pFyjG50i2ThVH6uiuwSFQ8DwpUDDS-C1E":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":27,"vuln_count":28,"unpatched_count":29,"last_vuln_date":30,"fetched_at":31,"vulnerabilities":32,"developer":60,"crawl_stats":38,"alternatives":64,"analysis":165,"fingerprints":328},"fonto","Fonto – Custom Web Fonts Manager","1.2.2","vlad.olaru","https:\u002F\u002Fprofiles.wordpress.org\u002Fvladolaru\u002F","\u003Cp>Fonto is a custom fonts management plugin that will seamlessly integrate with the WordPress editor, allowing you to get right to using your fancy free or premium fonts.\u003C\u002Fp>\n\u003Cp>It is built to work with pretty much any configuration font vendors offer (like Typekit, Fonts.com, MyFonts.com, Google Fonts), either by allowing them to serve the fonts via an embed code or by self-hosting the font files.\u003C\u002Fp>\n\u003Cp>Plus, we’ve integrated Fonto with our \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fcustomify\u002F\" rel=\"ugc\">Customify\u003C\u002Fa> and \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fstyle-manager\u002F\" rel=\"ugc\">Style Manager\u003C\u002Fa> plugins to make it even smoother to control your site’s general typography.\u003C\u002Fp>\n\u003Ch3>Credits\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002FCMB2\u002FCMB2\" rel=\"nofollow ugc\">CMB2\u003C\u002Fa> Metaboxes, custom fields library – License: GPLv2 or later\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fjcchavezs\u002Fcmb2-conditionals\u002F\" rel=\"nofollow ugc\">CMB2 Conditionals\u003C\u002Fa> plugin for CMB2 – License: GPLv2 or later\u003C\u002Fli>\n\u003C\u002Ful>\n","Use your custom premium web fonts directly in the Editor or with the Customify and Style Manager plugins. Works with Typekit, MyFonts, Fonts.",2000,38108,60,4,"2024-10-16T08:33:00.000Z","6.6.5","4.9.9","5.6.20",[20,21,22,23,24],"custom-font","custom-fonts","custom-web-fonts","font-manager","fonts","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Ffonto","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ffonto.1.2.2.zip",70,2,1,"2025-04-03 00:00:00","2026-03-15T15:16:48.613Z",[33,47],{"id":34,"url_slug":35,"title":36,"description":37,"plugin_slug":4,"theme_slug":38,"affected_versions":39,"patched_in_version":38,"severity":40,"cvss_score":41,"cvss_vector":42,"vuln_type":43,"published_date":30,"updated_date":44,"references":45,"days_to_patch":38},"CVE-2025-31827","fonto-authenticated-author-arbitrary-file-download","Fonto \u003C= 1.2.2 - Authenticated (Author+) Arbitrary File Download","The Fonto – Custom Web Fonts Manager plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.2.2. This makes it possible for authenticated attackers, with Author-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information.",null,"\u003C=1.2.2","medium",6.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N","Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')","2025-04-08 13:40:39",[46],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F4bbff678-db55-4058-9f54-9220321616b0?source=api-prod",{"id":48,"url_slug":49,"title":50,"description":51,"plugin_slug":4,"theme_slug":38,"affected_versions":52,"patched_in_version":6,"severity":40,"cvss_score":53,"cvss_vector":54,"vuln_type":55,"published_date":56,"updated_date":57,"references":58,"days_to_patch":29},"CVE-2024-8920","fonto-custom-web-fonts-manager-authenticated-author-stored-cross-site-scripting-via-svg-file-upload","Fonto – Custom Web Fonts Manager \u003C= 1.2.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload","The Fonto – Custom Web Fonts Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.2.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file.","\u003C=1.2.1",6.4,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:N","Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","2024-10-16 20:46:08","2024-10-17 09:32:17",[59],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F358be91d-cb00-429b-a4ed-69bf81e4d19e?source=api-prod",{"slug":61,"display_name":7,"profile_url":8,"plugin_count":29,"total_installs":11,"avg_security_score":27,"avg_patch_time_days":29,"trust_score":62,"computed_at":63},"vladolaru",79,"2026-04-04T22:31:36.345Z",[65,90,111,131,147],{"slug":66,"name":67,"version":68,"author":69,"author_profile":70,"description":71,"short_description":72,"active_installs":73,"downloaded":74,"rating":75,"num_ratings":76,"last_updated":77,"tested_up_to":78,"requires_at_least":79,"requires_php":80,"tags":81,"homepage":85,"download_link":86,"security_score":87,"vuln_count":14,"unpatched_count":88,"last_vuln_date":89,"fetched_at":31},"use-any-font","Use Any Font | Custom Font Uploader","6.3.14","Dnesscarkey","https:\u002F\u002Fprofiles.wordpress.org\u002Fdnesscarkey\u002F","\u003Cp>Upload any custom fonts to give your site an elegant look. Easily change fonts without CSS knowledge or select from 23,871+ predefined fonts to add to your site, including Google fonts stored on your server.\u003C\u002Fp>\n\u003Cp>Click \u003Ca href=\"https:\u002F\u002Fdineshkarki.com.np\u002Fuse-any-font\u002Fdemo\" rel=\"nofollow ugc\">HERE\u003C\u002Fa> for a Use Any Font working demo.\u003C\u002Fp>\n\u003Cp>Use Any Font lets you install custom fonts in your WordPress website. Unlike other font embed services, it doesn’t limit your font choices or store your custom fonts on a remote server. Upload any font format (ttf, otf, woff) and our font uploader auto converts it to woff2 for faster load times and compatibility across all browsers. With our easy-to-use font uploader, you can seamlessly add custom fonts and manage your site’s typography. The plugin supports self-hosted and GDPR-compliant solutions, ensuring your fonts are SEO-friendly and quickly embedded with @font-face.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Key Features\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Easy Font Upload, Supports all browsers : \u003C\u002Fstrong>\u003Cbr \u002F>\nUpload font in one format, all required format for browser compatibily is auto converted by our font convertor. Supports ttf, otf, woff, and woff2 font formats.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Fastest Font Load ( 30% Faster ) : \u003C\u002Fstrong>\u003Cbr \u002F>\nAutomatically convert uploaded custom fonts to compressed woff2 format with Brotli, achieving 30% faster loading.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Easy Font Assign : \u003C\u002Fstrong>\u003Cbr \u002F>\nQuickly assign uploaded font with inbuilt font assign interface. You can select pre defined html tags or assign it to custom css.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\u003Cstrong>SEO Friendly & GDPR compliant : \u003C\u002Fstrong>\u003Cbr \u002F>\nFonts embedded with @font-face CSS for quick loading and SEO benefits. Custom Fonts are stored on Your Server for Faster Loading and full GDPR compliant \u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Large Font Upload upto 25 MB : \u003C\u002Fstrong>\u003Cbr \u002F>\nSome fonts are larger in size. Our font uploader allows you to upload custom font upto 25 MB. \u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Font Variations : \u003C\u002Fstrong>\u003Cbr \u002F>\nUpload custom fonts with their various styles and weights. \u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Editor and Visual Builder Support : \u003C\u002Fstrong>\u003Cbr \u002F>\nUse uploaded custom fonts from WordPress Editor, Gutenberg Editor,\u003Cbr \u002F>\n\u003Ca href=\"http:\u002F\u002Fwww.elegantthemes.com\u002Faffiliates\u002Fidevaffiliate.php?id=39880\" title=\"custom font in Divi builder\" rel=\"nofollow ugc\">Divi Builder\u003C\u002Fa>,\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fsiteorigin-panels\u002F\" title=\"Custom font in Site Origin Page Buider\" rel=\"ugc\">Site Origin Page Buider\u003C\u002Fa>,\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Felementor\u002F\" title=\"Elementor Page Builder\" rel=\"ugc\">Elementor Page Builder\u003C\u002Fa>,\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fwww.wpbeaverbuilder.com\u002F?fla=2054&campaign=use-any-font\" title=\"custom font in Beaver Builder\" rel=\"nofollow ugc\">Beaver Builder\u003C\u002Fa>,\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fthemify.me\u002Fmember\u002Faff\u002Fgo\u002Fdnesscarkey\u002F?cr=aHR0cHM6Ly90aGVtaWZ5Lm1lL2J1aWxkZXI=\" title=\"custom font in Themify Builder\" rel=\"nofollow ugc\">Themify Builder\u003C\u002Fa>,\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fthemes\u002Fkadence\u002F\" title=\"custom font in Kadence Theme and Kadence Blocks\" rel=\"ugc\">Kadence Theme and Blocks\u003C\u002Fa>,\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Foxygenbuilder.com\u002F\" title=\"custom font in Oxygen Builder\" rel=\"nofollow ugc\">Oxygen Builder\u003C\u002Fa>,\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fthemes\u002Fgeneratepress\u002F\" title=\"custom font in Generate Press\" rel=\"ugc\">Generate Press\u003C\u002Fa>,\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fthemes\u002Fastra\u002F\" title=\"custom font in Astra Theme\" rel=\"ugc\">Astra Theme\u003C\u002Fa>,\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fthemes\u002Foceanwp\u002F\" title=\"custom font in Revolution Slider\" rel=\"ugc\">Ocean WP Theme\u003C\u002Fa>,\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fbricksbuilder.io\u002F\" title=\"custom font in Bricks Builder\" rel=\"nofollow ugc\">Bricks Builder\u003C\u002Fa>,\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fthemeisle.com\u002F\" title=\"custom font in themeisle neva theme\" rel=\"nofollow ugc\">Themeisle\u003C\u002Fa>,\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fbit.ly\u002F3auJKzt\" title=\"custom font in Revolution Slider\" rel=\"nofollow ugc\">Revolution Slider\u003C\u002Fa>,\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fwpbakery.com\u002F\" title=\"custom font in WPBakery Page Builder\" rel=\"nofollow ugc\">WPBakery Page Builder ( Js Composer )\u003C\u002Fa>,\u003Cbr \u002F>\nMore… and any visual builder using the class. \u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Theme Compatibility : \u003C\u002Fstrong>\u003Cbr \u002F>\nCustom fonts uploaded can be directly used from Theme options panel for major themeforest themes like \u003Ca href=\"https:\u002F\u002Fbit.ly\u002F3auJKzt\" rel=\"nofollow ugc\">Avada, X Theme, Flatsome, Salient, Porto, Shopkeeper, Oshine, WPLMS Learning Management System Theme, KLEO, WoodMart, ListingPro, SimpleMag, ROSA 1, 907, Voice, Grand Restaurant, LeadEngine, Service Finder, MagPlus, Hostiko, Adifier, Puca, GreenMart, Reco, VidoRev, Halena and many more known themes. (1000+). Check out full list here.\u003C\u002Fa>\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Language Support : \u003C\u002Fstrong>\u003Cbr \u002F>\nAssign fonts based on language with WPML and Polylang plugins.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Font Display Property : \u003C\u002Fstrong>\u003Cbr \u002F>\nCSS property managing font loading behavior in @font-face.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Support\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Visit our \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Fuse-any-font\u002F\" rel=\"ugc\">Support Forum\u003C\u002Fa> for quick issue resolution.\u003C\u002Fli>\n\u003Cli>Utilize our Facebook Message widget on our website at \u003Ca href=\"https:\u002F\u002Fdineshkarki.com.np\" rel=\"nofollow ugc\">https:\u002F\u002Fdineshkarki.com.np\u003C\u002Fa>.\u003C\u002Fli>\n\u003Cli>Reach out via email using the form found at \u003Ca href=\"https:\u002F\u002Fdineshkarki.com.np\u002Fcontact\" rel=\"nofollow ugc\">https:\u002F\u002Fdineshkarki.com.np\u002Fcontact\u003C\u002Fa>.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Font Conversion API Usage\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>You need API key to connect to our server for font conversion. Our server converts your font and sends it back. You can get key from \u003Ca href=\"https:\u002F\u002Fdineshkarki.com.np\u002Fuse-any-font\u002Fapi-key\" rel=\"nofollow ugc\">here\u003C\u002Fa>. You can also generate Lite \u002F Test API key from button at top of the plugin page. \u003Cstrong>Note : \u003C\u002Fstrong> Lite \u002F Test API only allow single font conversion.\u003C\u002Fli>\n\u003Cli>Use Any Font uses Font Conversion API developed by Dnesscarkey. Font conversion API helps the plugin to convert the font files in different format (woff, woff2 but not limited to) for faster loading, and multiple browser support. Plugins sends the request to Font conversion server with font files, font conversion server converts it and returns the converted files. Once the conversion is completed, font files are automatically deleted.\u003C\u002Fli>\n\u003Cli>We don’t store your fonts in our server neither any of your information except the API key details. Our server deletes the temporary file after the font upload is complete. Your font files are served from your own server.\u003C\u002Fli>\n\u003Cli>For font conversion, our plugin uses server2.dnesscarkey.org and server3.dnesscarkey.org and it is only dedicated to Use Any Font plugin.\u003C\u002Fli>\n\u003Cli>For Font Conversion API terms and condition. Please visit \u003Ca href=\"https:\u002F\u002Fdineshkarki.com.np\u002Fuse-any-font\u002Fterms-conditions\" rel=\"nofollow ugc\">here\u003C\u002Fa>.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Installation Video\u003C\u002Fstrong>\u003Cbr \u002F>\n\u003Cspan class=\"embed-youtube\" style=\"text-align:center; display: block;\">\u003Ciframe loading=\"lazy\" class=\"youtube-player\" width=\"750\" height=\"422\" src=\"https:\u002F\u002Fwww.youtube.com\u002Fembed\u002FQzGaWIPVwEk?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent\" allowfullscreen=\"true\" style=\"border:0;\" sandbox=\"allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox\">\u003C\u002Fiframe>\u003C\u002Fspan>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Integration for Themes \u002F Plugin Developers\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>You can use \u003Cstrong>uaf_get_font_families();\u003C\u002Fstrong> function to get the list of custom fonts uploaded with Use Any Font. You can add it in your font family select box or list.\u003C\u002Fp>\n\u003Cp>\u003Cem>if (function_exists(‘uaf_get_font_families’)){\u003Cbr \u002F>\n    $uaf_font_families = uaf_get_font_families();   \u002F\u002F Returns Array\u003Cbr \u002F>\n}\u003C\u002Fem>\u003C\u002Fp>\n\u003Cp>Please do write us after integration and we will add it in our supported list and create a discount code for your users.\u003C\u002Fp>\n","Upload custom fonts with custom font uploader. Auto converts to woff2 for better performance. Self-hosted, GDPR compliant, and easy custom font plugin",200000,7221706,94,1143,"2025-12-20T04:17:00.000Z","6.9.4","4.0","7.0",[21,23,82,83,84],"font-uploader","google-fonts","typography","https:\u002F\u002Fdineshkarki.com.np\u002Fuse-any-font","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fuse-any-font.6.3.14.zip",97,0,"2024-09-25 00:00:00",{"slug":21,"name":91,"version":92,"author":93,"author_profile":94,"description":95,"short_description":96,"active_installs":97,"downloaded":98,"rating":99,"num_ratings":100,"last_updated":101,"tested_up_to":78,"requires_at_least":102,"requires_php":103,"tags":104,"homepage":107,"download_link":108,"security_score":109,"vuln_count":28,"unpatched_count":88,"last_vuln_date":110,"fetched_at":31},"Custom Fonts – Host Your Fonts Locally","2.1.17","Brainstorm Force","https:\u002F\u002Fprofiles.wordpress.org\u002Fbrainstormforce\u002F","\u003Cp>\u003Cstrong>HOST FONTS, IMPROVE WEBSITE SPEED, AND ELIMINATE PRIVACY CONCERNS\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>★★★★★\u003C\u002Fp>\n\u003Ch3>IMPROVED SPEED AND PERFORMANCE 🚀\u003C\u002Fh3>\n\u003Cp>Custom Fonts enables you to upload your own custom fonts or choose from a vast collection of Google Fonts, all hosted directly on your own web server.\u003C\u002Fp>\n\u003Cp>By hosting fonts locally, you can significantly improve your website’s performance. As the fonts load directly from your server, it reduces external requests, significantly reducing page load times.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fbsf.io\u002Fcustom-fonts-demo\" rel=\"nofollow ugc\">Try it out on a free dummy site\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>UPLOAD YOUR CUSTOM FONTS OR CHOOSE FROM GOOGLE FONTS 🎨\u003C\u002Fh3>\n\u003Cp>With Custom Fonts, you have the freedom to customize your website typography to match your unique brand identity!\u003C\u002Fp>\n\u003Cp>You can easily upload your own custom font files, such as .ttf or .otf, and use them throughout your website. Or, you can choose from a rich library of Google Fonts and host them locally on your server, ensuring full control over their use.\u003C\u002Fp>\n\u003Ch3>UPLOAD MULTIPLE FONT VARIANTS 🆒\u003C\u002Fh3>\n\u003Cp>You have the flexibility to upload any number of font variants to suit your design needs. Whether it’s different weights, styles, or character sets, easily manage and customize the necessary font variants. Personalize your typography to perfection and create a unique visual identity for your website.\u003C\u002Fp>\n\u003Ch3>ENHANCED PRIVACY AND GDPR COMPLIANCE 🛡️\u003C\u002Fh3>\n\u003Cp>Privacy is a top priority, especially in light of data protection regulations like GDPR. By using Custom Fonts, you can self-host your fonts, eliminating any privacy concerns associated with external font services. Take full control over the fonts you use on your website and ensure compliance with privacy regulations.\u003C\u002Fp>\n\u003Ch3>FULL SITE EDITING THEME SUPPORT AND EASY INTEGRATION 🎉\u003C\u002Fh3>\n\u003Cp>Custom Fonts seamlessly integrates with WordPress full site editing themes, allowing you to effortlessly choose and customize fonts across your entire website. Say goodbye to limitations and enjoy the freedom to create a consistent and visually appealing typography experience for visitors.\u003C\u002Fp>\n\u003Ch3>BEAUTIFUL AND USER-FRIENDLY INTERFACE MADE WITH REACT JS 💻\u003C\u002Fh3>\n\u003Cp>We take pride in providing an elegant and intuitive user interface for Custom Fonts. Built with React JS, our interface offers a seamless experience, making it easy to upload and manage custom fonts, select from Google Fonts, and customize typography settings to suit your needs.\u003C\u002Fp>\n\u003Ch3>COMPLETELY FREE, NO UPSELLS OR HIDDEN COSTS 🆓\u003C\u002Fh3>\n\u003Cp>Custom Fonts is completely free, with no upsells or hidden costs. We believe in empowering website owners with essential tools without nickel-and-diming. Enjoy full access to all the features and functionality of Custom Fonts.\u003C\u002Fp>\n\u003Ch3>WHO CAN BENEFIT FROM CUSTOM FONTS?\u003C\u002Fh3>\n\u003Col>\n\u003Cli>\n\u003Cp>\u003Cstrong>Web designers and developers:\u003C\u002Fstrong> You can easily enhance the typography and overall design of your projects, making them stand out from the crowd.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>eCommerce store owners:\u003C\u002Fstrong> Custom fonts can enhance your brand identity and provide a distinctive visual style for product descriptions, banners, and more. Hosting fonts locally with Custom Fonts improves website performance, benefiting you and your consumers.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Bloggers and content creators:\u003C\u002Fstrong> Make your content truly pop. Stand out from the crowd and captivate your audience with Custom Fonts.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>SEO experts:\u003C\u002Fstrong> You can now boost page speed by hosting fonts locally with Custom Fonts. Fewer external requests means faster loading times! Plus, you ensure compliance with privacy regulations.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>Custom Fonts caters to anyone who values the customization of typography, performance optimization, privacy control, and compliance with regulations.\u003C\u002Fp>\n\u003Cp>If you want to take control of your website’s typography and enhance its overall appearance, Custom Fonts is the plugin for you!\u003C\u002Fp>\n\u003Ch3>SOME OF THE SUPPORTED WORDPRESS THEMES:\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fwpastra.com\u002F\" rel=\"nofollow ugc\">Astra WordPress Theme\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fthemes\u002Fspectra-one\u002F\" rel=\"ugc\">Spectra One Theme\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>All FSE themes\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>SOME OF THE SUPPORTED WORDPRESS PLUGINS:\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Spectra Page Builder\u003C\u002Fli>\n\u003Cli>Elementor Page Builder\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Branding Guidelines\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>When mentioning Custom Fonts, please use the following format:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Custom Fonts [correct]\u003C\u002Fli>\n\u003Cli>CustomFonts [incorrect]\u003C\u002Fli>\n\u003Cli>Custom fonts [incorrect]\u003C\u002Fli>\n\u003Cli>CustomFont [incorrect]\u003C\u002Fli>\n\u003Cli>Customfont [incorrect]\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Our Other Products:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwpastra.com\u002F\" rel=\"nofollow ugc\">Astra\u003C\u002Fa> – The most popular WordPress theme that perfectly integrates with Custom Fonts.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwpspectra.com\u002F\" rel=\"nofollow ugc\">Spectra\u003C\u002Fa> – A visual website builder built with WordPress’ native block editor.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fultimateelementor.com\u002F\" rel=\"nofollow ugc\">Ultimate Addons for Elementor\u003C\u002Fa> – The best addons to extend Elementor’s capabilities.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwpschema.com\u002F\" rel=\"nofollow ugc\">Schema Pro\u003C\u002Fa> – All-in-one schema markup plugin that offers complete functionality and easy configuration.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fprojecthuddle.com\u002F\" rel=\"nofollow ugc\">ProjectHuddle\u003C\u002Fa> – Lets you collect sticky note-style feedback on page designs and web projects.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Other partnered products:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fcartflows.com\u002F\" rel=\"nofollow ugc\">CartFlows\u003C\u002Fa> – One-click sales funnel builder for WordPress.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fprestoplayer.com\u002F\" rel=\"nofollow ugc\">Presto Player\u003C\u002Fa> – Best video player plugin for WordPress.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fsurecart.com\u002F\" rel=\"nofollow ugc\">SureCart\u003C\u002Fa> – A powerful eCommerce platform designed to grow your business by effortlessly selling online.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fsuremembers.com\u002F\" rel=\"nofollow ugc\">SureMembers\u003C\u002Fa> – Fastest and easiest way to protect content on your website and build memberships.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fottokit.com\u002F\" rel=\"nofollow ugc\">OttoKit\u003C\u002Fa> – Connects your favorite tools so you can automate workflows and streamline your business processes.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.surewriter.com\u002F\" rel=\"nofollow ugc\">SureWriter\u003C\u002Fa> – AI writing tool to make your web design journey faster.\u003C\u002Fli>\n\u003C\u002Ful>\n","Custom Fonts is a powerful WordPress plugin that allows you to upload your own custom fonts or choose from a vast collection of Google Fonts, all host …",300000,6292269,86,62,"2026-01-19T06:43:00.000Z","5.0","",[21,24,105,83,106],"full-site-editing","performance","http:\u002F\u002Fwww.wpastra.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcustom-fonts.2.1.17.zip",98,"2026-01-19 15:16:44",{"slug":112,"name":113,"version":114,"author":115,"author_profile":116,"description":117,"short_description":118,"active_installs":73,"downloaded":119,"rating":120,"num_ratings":121,"last_updated":122,"tested_up_to":78,"requires_at_least":79,"requires_php":103,"tags":123,"homepage":127,"download_link":128,"security_score":109,"vuln_count":129,"unpatched_count":88,"last_vuln_date":130,"fetched_at":31},"olympus-google-fonts","Fonts Plugin | Use Google Fonts, Adobe Fonts or Upload Fonts","4.0.6","fontsplugin","https:\u002F\u002Fprofiles.wordpress.org\u002Ffontsplugin\u002F","\u003Cp>The \u003Ca href=\"https:\u002F\u002Ffontsplugin.com\u002F?utm_source=wporg&utm_medium=readme&utm_campaign=intro\" rel=\"nofollow ugc\">Google Fonts\u003C\u002Fa> library currently contains 1455 unique fonts. This plugin allows you to easily use any of them on your WordPress website.\u003C\u002Fp>\n\u003Cp>You’re not stuck with one font for the entire website, you can easily choose one font for headings and another for your content.\u003C\u002Fp>\n\u003Cp>It’s hard to know which font will look good on your website, that’s why we’ve included a live preview feature. That means you can test each font and see a live preview of how it will look with your content instantly.\u003C\u002Fp>\n\u003Cp>Once you’ve found a combination you love, you can press save and make the changes publicly visible.\u003C\u002Fp>\n\u003Cp>The full Google Fonts library can be found here – \u003Ca href=\"https:\u002F\u002Ffonts.google.com\" rel=\"nofollow ugc\">Google Fonts\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch4>Plugin Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>Live Customizer Preview:\u003C\u002Fstrong> Choose and preview fonts in real time using the WordPress Customizer.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Over 1000+ Google Fonts\u003C\u002Fstrong> to choose from.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fdocs.fontsplugin.com\u002Fintegrations\u002Fadobe-fonts\" rel=\"nofollow ugc\">\u003Cstrong>Adobe Fonts (Typekit)\u003C\u002Fstrong> integration.\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fdocs.fontsplugin.com\u002Fcustom-font-uploads\u002Fcustom-font-uploads\u002F\" rel=\"nofollow ugc\">\u003Cstrong>Upload Your Own Fonts.\u003C\u002Fstrong>\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Works with any WordPress Theme. No coding required.\u003C\u002Fli>\n\u003Cli>Easy One-Click Updates.\u003C\u002Fli>\n\u003Cli>WooCommerce support.\u003C\u002Fli>\n\u003Cli>Translation Ready.\u003C\u002Fli>\n\u003Cli>SSL and HTTPS compatible.\u003C\u002Fli>\n\u003Cli>Efficient Font Loading using a single request.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>SEO-Friendly\u003C\u002Fstrong> (Search Engine Optimization).\u003C\u002Fli>\n\u003Cli>Tested with \u003Cstrong>PHP7\u003C\u002Fstrong> and \u003Cstrong>PHP8\u003C\u002Fstrong>.\u003C\u002Fli>\n\u003Cli>Selective Font Loading.\u003C\u002Fli>\n\u003Cli>Preconnect Resource Hints.\u003C\u002Fli>\n\u003Cli>Host Google Fonts Locally.\u003C\u002Fli>\n\u003Cli>Font Size, Weight, Color and Line Height Typography Settings.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cblockquote>\n\u003Cp>Note: some features are Premium. Which means you need to upgrade to unlock those features. You can upgrade here: \u003Ca href=\"https:\u002F\u002Ffontsplugin.com\u002Fpro-upgrade\u002F?utm_source=wporg&utm_medium=readme&utm_campaign=upsell\" rel=\"nofollow ugc\">Fonts Plugin Pro\u003C\u002Fa>\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Ffontsplugin.com\u002Ffree-vs-pro\u002F\" rel=\"nofollow ugc\">A comparison of free and pro features.\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch4>Plugin Compatibility\u003C\u002Fh4>\n\u003Cp>Fonts Plugin will work with all WordPress themes and has been specifically tested with the following:\u003C\u002Fp>\n\u003Ch4>Plugins\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fdocs.fontsplugin.com\u002Fintegrations\u002Felementor\u002F?utm_source=wporg&utm_medium=readme&utm_campaign=docs\" rel=\"nofollow ugc\">Elementor\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fdocs.fontsplugin.com\u002Fintegrations\u002Fdivi-builder\u002F?utm_source=wporg&utm_medium=readme&utm_campaign=docs\" rel=\"nofollow ugc\">Divi Builder\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fdocs.fontsplugin.com\u002Fintegrations\u002Fbeaver-builder\u002F?utm_source=wporg&utm_medium=readme&utm_campaign=docs\" rel=\"nofollow ugc\">Beaver Builder\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fdocs.fontsplugin.com\u002Fintegrations\u002Fwpbakery\u002F?utm_source=wporg&utm_medium=readme&utm_campaign=docs\" rel=\"nofollow ugc\">WPBakery\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Themes\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>All StudioPress and Genesis Themes\u003C\u002Fli>\n\u003Cli>Twenty Seventeen\u003C\u002Fli>\n\u003Cli>Twenty Nineteen\u003C\u002Fli>\n\u003Cli>Twenty Twenty\u003C\u002Fli>\n\u003Cli>ThemeGrill\u003C\u002Fli>\n\u003Cli>LyraThemes\u003C\u002Fli>\n\u003Cli>ThemeIsle\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Further Reading\u003C\u002Fh3>\n\u003Cp>For more info on Fonts Plugin, check out the following:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fdocs.fontsplugin.com\u002F?utm_source=wporg&utm_medium=readme&utm_campaign=docs\" rel=\"nofollow ugc\">Documentation\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Ffontsplugin.com\u002Ffont-combinations\u002F?utm_source=wporg&utm_medium=readme&utm_campaign=docs\" rel=\"nofollow ugc\">Font Combinations\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Ffontsplugin.com\u002Fgoogle-fonts-checker\u002F?utm_source=wporg&utm_medium=readme&utm_campaign=docs\" rel=\"nofollow ugc\">Google Fonts Checker\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Ffontsplugin.com\u002Fwordpress-google-fonts\u002F?utm_source=wporg&utm_medium=readme&utm_campaign=docs\" rel=\"nofollow ugc\">How to Use Google Fonts in WordPress\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Ffontsplugin.com\u002Fwebsite-font-checker\u002F\" rel=\"nofollow ugc\">Website Font Checker\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Bugs\u003C\u002Fh4>\n\u003Cp>If you find an issue with Fonts Plugin, let us know \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Folympus-google-fonts#new-post\" rel=\"ugc\">here\u003C\u002Fa>!\u003C\u002Fp>\n\u003Ch4>Fonts Plugin Gutenberg Block\u003C\u002Fh4>\n\u003Cp>Add some flair to your content with our new Gutenberg block.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>1000+ Google Fonts available in the editor.\u003C\u002Fli>\n\u003Cli>Font size, variant and line-height settings.\u003C\u002Fli>\n\u003Cli>Text-align: left, right or center.\u003C\u002Fli>\n\u003Cli>Adobe Fonts (Typekit) support.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Contributions\u003C\u002Fh4>\n\u003Cp>Anyone is welcome to contribute to Fonts Plugin.\u003C\u002Fp>\n\u003Cp>There are various ways you can contribute:\u003C\u002Fp>\n\u003Col>\n\u003Cli>Raise an \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Folympus-google-fonts#new-post\" rel=\"ugc\">Issue\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Translate the Fonts Plugin into \u003Ca href=\"https:\u002F\u002Ftranslate.wordpress.org\u002Fprojects\u002Fwp-plugins\u002Folympus-google-fonts\u002F\" rel=\"nofollow ugc\">different languages\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Provide feedback and suggestions on \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Folympus-google-fonts#new-post\" rel=\"ugc\">enhancements\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Fol>\n","The easiest to customize fonts in WordPress. Optimized for Speed. 1000+ font choices. Supports Google Fonts, Adobe Fonts and Upload Fonts.",10025166,100,1203,"2026-02-02T15:22:00.000Z",[124,21,83,125,126],"adobe-fonts","typekit-fonts","upload-fonts","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Folympus-google-fonts\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Folympus-google-fonts.4.0.6.zip",3,"2024-08-16 00:00:00",{"slug":132,"name":133,"version":134,"author":93,"author_profile":94,"description":135,"short_description":136,"active_installs":137,"downloaded":138,"rating":99,"num_ratings":139,"last_updated":140,"tested_up_to":78,"requires_at_least":141,"requires_php":103,"tags":142,"homepage":107,"download_link":146,"security_score":120,"vuln_count":88,"unpatched_count":88,"last_vuln_date":38,"fetched_at":31},"custom-typekit-fonts","Custom Adobe Fonts (Typekit)","2.1.1","\u003Cp>This plugin helps you easily embed adobe fonts easily in your WordPress website.\u003C\u002Fp>\n\u003Cp>Currently it works with:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwpastra.com\u002F?utm_source=wp-repo&utm_campaign=custom-typekit-fonts&utm_medium=description\" rel=\"nofollow ugc\">Astra Theme\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.wpbeaverbuilder.com\u002F\" rel=\"nofollow ugc\">Beaver Builder Theme\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.wpbeaverbuilder.com\u002F\" rel=\"nofollow ugc\">Beaver Builder Plugin\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Felementor.com\u002F\" rel=\"nofollow ugc\">Elementor Page Builder\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>How does it work?\u003C\u002Fp>\n\u003Col>\n\u003Cli>Install the plugin\u003C\u002Fli>\n\u003Cli>Enter the Project ID that you create in adobe fonts.\u003C\u002Fli>\n\u003Cli>And done. You will be able to see the fonts added in the settings of Astra \u002F Beaver Builder \u002F Elementor. Please refer screenshots.\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>If you’re not using any of the supported plugins and theme, you can write the custom CSS to apply the fonts.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fbsf.io\u002Fcustom-typekit-fonts-demo\" rel=\"nofollow ugc\">Try it out on a free dummy site\u003C\u002Fa>\u003C\u002Fp>\n","Custom Adobe Fonts allows you to extends the fonts supports from the Abobe Fonts.",60000,745558,7,"2026-01-07T05:14:00.000Z","4.4",[143,144,145],"custom-adobe-fonts","theme-custom-fonts","unlimited-typekit-custom-fonts","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcustom-typekit-fonts.2.1.1.zip",{"slug":24,"name":148,"version":149,"author":150,"author_profile":151,"description":152,"short_description":153,"active_installs":154,"downloaded":155,"rating":156,"num_ratings":157,"last_updated":158,"tested_up_to":159,"requires_at_least":79,"requires_php":103,"tags":160,"homepage":163,"download_link":164,"security_score":120,"vuln_count":88,"unpatched_count":88,"last_vuln_date":38,"fetched_at":31},"Fonts","3.0","WP SITES","https:\u002F\u002Fprofiles.wordpress.org\u002Fwordpresssites\u002F","\u003Cp>This plugin adds 2 drop down menus to your visual editor with additional sizes and fonts:\u003C\u002Fp>\n\u003Col>\n\u003Cli>A button for Styles\u003C\u002Fli>\n\u003Cli>A button for Sizes\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>New: You can also add your own selection of \u003Ca href=\"https:\u002F\u002Fwpsites.net\u002Fproduct\u002Fcustom-fonts-for-your-visual-editor-in-wordpress\u002F\" rel=\"nofollow ugc\">Google & Custom fonts\u003C\u002Fa> including premium fonts, to your editor by upgrading to Fonts Pro.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Fonts Pro:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Col>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwpsites.net\u002Fproduct\u002Fcustom-fonts-for-your-visual-editor-in-wordpress\u002F\" rel=\"nofollow ugc\">Fonts Pro\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch3>Support\u003C\u002Fh3>\n\u003Cp>New \u003Ca href=\"https:\u002F\u002Fwpsites.net\u002Fcontact\" rel=\"nofollow ugc\">Support\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Gutenberg\u003C\u002Fh3>\n\u003Cp>Works with the latest version of Gutenberg\u003C\u002Fp>\n","Add More Font To Your WordPress Editor",9000,310340,88,99,"2025-10-01T12:05:00.000Z","6.8.5",[21,161,162,24,83],"editor-fonts","font-plugin","https:\u002F\u002Fwpsites.net\u002Fbest-plugins\u002Fplugin-fonts-styles-sizes-wordpress\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ffonts.3.0.zip",{"attackSurface":166,"codeSignals":287,"taintFlows":312,"riskAssessment":313,"analyzedAt":327},{"hooks":167,"ajaxHandlers":271,"restRoutes":284,"shortcodes":285,"cronEvents":286,"entryPointCount":129,"unprotectedCount":28},[168,174,177,181,186,189,193,197,201,205,209,211,215,219,224,228,230,232,235,239,243,247,252,256,260,264,268],{"type":169,"name":170,"callback":171,"file":172,"line":173},"action","admin_notices","notice_php_version_wrong","includes\\class-fonto-init.php",111,{"type":169,"name":170,"callback":175,"file":172,"line":176},"notice_new_version",137,{"type":169,"name":178,"callback":179,"priority":139,"file":180,"line":157},"wp_head","add_front_embed_code","includes\\class-fonto-output.php",{"type":182,"name":183,"callback":184,"file":180,"line":185},"filter","mce_buttons_2","add_font_family_sizes_selects",102,{"type":182,"name":187,"callback":187,"file":180,"line":188},"tiny_mce_before_init",103,{"type":182,"name":190,"callback":191,"file":180,"line":192},"mce_external_plugins","tinymce_raw_head_code_plugin",106,{"type":169,"name":194,"callback":195,"file":180,"line":196},"admin_init","add_custom_css_into_wp_editor",117,{"type":169,"name":198,"callback":199,"file":200,"line":62},"cmb2_admin_init","add_meta_boxes","includes\\class-fonto-post-types.php",{"type":182,"name":202,"callback":203,"file":200,"line":204},"cmb2_enqueue_css","prevent_cmb2_core_styles",81,{"type":169,"name":206,"callback":206,"priority":207,"file":200,"line":208},"admin_enqueue_scripts",10,85,{"type":169,"name":206,"callback":210,"priority":207,"file":200,"line":99},"admin_enqueue_styles",{"type":182,"name":212,"callback":213,"file":200,"line":214},"upload_dir","custom_upload_directory",89,{"type":182,"name":216,"callback":217,"priority":207,"file":200,"line":218},"cmb2_input_attributes","handle_file_list_attributes",92,{"type":182,"name":220,"callback":221,"file":222,"line":223},"wp_handle_upload_prefilter","sanitize_svg_upload","includes\\class-fonto.php",146,{"type":169,"name":225,"callback":226,"file":222,"line":227},"init","load_integrations",169,{"type":169,"name":206,"callback":206,"priority":207,"file":222,"line":229},181,{"type":169,"name":206,"callback":210,"priority":207,"file":222,"line":231},182,{"type":169,"name":225,"callback":233,"priority":88,"file":222,"line":234},"load_localisation",185,{"type":182,"name":236,"callback":237,"file":222,"line":238},"upload_mimes","extra_mime_types",198,{"type":182,"name":240,"callback":241,"priority":207,"file":222,"line":242},"wp_check_filetype_and_ext","update_mime_types",199,{"type":182,"name":244,"callback":245,"file":222,"line":246},"cmb2_script_dependencies","cmb2_requires_wp_media",296,{"type":169,"name":248,"callback":249,"file":250,"line":251},"customify_typography_font_family_before_options","fonto_add_custom_fonts_to_customify_typography_select","includes\\integrations\\customify.php",124,{"type":169,"name":253,"callback":254,"file":250,"line":255},"customify_font_family_before_options","fonto_add_custom_fonts_to_customify_font_select",152,{"type":182,"name":257,"callback":258,"file":250,"line":259},"customify_third_party_fonts","fonto_add_fonts_to_customify_third_party_list",177,{"type":182,"name":261,"callback":262,"priority":207,"file":250,"line":263},"customify_third_party_font_group_label","closure",184,{"type":182,"name":265,"callback":266,"file":267,"line":251},"style_manager\u002Fthird_party_fonts","fonto_add_fonts_to_style_manager_third_party_list","includes\\integrations\\style-manager.php",{"type":182,"name":269,"callback":262,"priority":207,"file":267,"line":270},"style_manager\u002Fthird_party_font_group_label",131,[272,277,280],{"action":273,"nopriv":274,"callback":275,"hasNonce":274,"hasCapCheck":274,"file":180,"line":276},"fonto_editor_dynamic_css",false,"editor_dynamic_css",326,{"action":273,"nopriv":278,"callback":275,"hasNonce":274,"hasCapCheck":274,"file":180,"line":279},true,327,{"action":281,"nopriv":274,"callback":282,"hasNonce":278,"hasCapCheck":274,"file":200,"line":283},"sample_font_url_path","wp_ajax_sample_font_url_path",95,[],[],[],{"dangerousFunctions":288,"sqlUsage":289,"outputEscaping":291,"fileOperations":28,"externalRequests":88,"nonceChecks":29,"capabilityChecks":88,"bundledLibraries":308},[],{"prepared":29,"raw":88,"locations":290},[],{"escaped":292,"rawEcho":293,"locations":294},41,6,[295,298,300,302,304,306],{"file":172,"line":296,"context":297},161,"raw output",{"file":180,"line":299,"context":297},209,{"file":180,"line":301,"context":297},218,{"file":180,"line":303,"context":297},243,{"file":250,"line":305,"context":297},112,{"file":250,"line":307,"context":297},140,[309],{"name":310,"version":38,"knownCves":311},"TinyMCE",[],[],{"summary":314,"deductions":315},"The Fonto plugin v1.2.2 exhibits a mixed security posture. While it demonstrates good practices in certain areas, such as using prepared statements for all SQL queries and a high percentage of properly escaped output, significant concerns remain. The presence of two unprotected AJAX handlers creates a substantial attack surface that could be exploited by unauthenticated users. The plugin's vulnerability history is particularly concerning, with two previously disclosed medium-severity vulnerabilities, one of which remains unpatched. These past vulnerabilities, specifically Path Traversal and Cross-site Scripting, indicate a recurring pattern of insecure input handling, which is further suggested by the high percentage of unescaped output and the lack of capability checks on its entry points.\n\nThe static analysis reveals two unprotected AJAX handlers, which are direct entry points without authentication. This is a critical oversight. The absence of capability checks on any of the entry points means that even if authentication were present, authorization is not being enforced. Furthermore, the bundled TinyMCE library, while not explicitly flagged as outdated in this analysis, represents a potential risk if it is an older, vulnerable version. The taint analysis showing zero flows with unsanitized paths is a positive sign, suggesting that known path traversal vectors might have been addressed in this version, but the historical pattern of such vulnerabilities should not be ignored.\n\nIn conclusion, Fonto v1.2.2 has strengths in its handling of database queries and output sanitization. However, the unprotected AJAX endpoints and the unpatched medium-severity vulnerability from its history represent significant risks. The recurring types of past vulnerabilities (Path Traversal, XSS) and the lack of capability checks are red flags that warrant immediate attention. The plugin's overall security is compromised by these factors, making it a potentially risky component for any WordPress installation.",[316,318,321,323,325],{"reason":317,"points":207},"Unprotected AJAX handlers",{"reason":319,"points":320},"Unpatched CVE (medium severity)",15,{"reason":322,"points":207},"Lack of capability checks on entry points",{"reason":324,"points":129},"Bundled libraries (TinyMCE)",{"reason":326,"points":139},"Past vulnerabilities (Path Traversal, XSS)","2026-03-16T18:31:22.724Z",{"wat":329,"direct":338},{"assetPaths":330,"generatorPatterns":333,"scriptPaths":334,"versionParams":335},[331,332],"\u002Fwp-content\u002Fplugins\u002Ffonto\u002Fassets\u002Fcss\u002Fadmin-style.css","\u002Fwp-content\u002Fplugins\u002Ffonto\u002Fassets\u002Fjs\u002Fadmin-script.js",[],[332],[336,337],"fonto\u002Fassets\u002Fcss\u002Fadmin-style.css?ver=","fonto\u002Fassets\u002Fjs\u002Fadmin-script.js?ver=",{"cssClasses":339,"htmlComments":342,"htmlAttributes":345,"restEndpoints":348,"jsGlobals":350,"shortcodeOutput":351},[340,341],"cmb2-wrap","cmb2-id-fonto-font-details",[343,344],"\u003C!-- Fonto: Start Font Details -->","\u003C!-- Fonto: End Font Details -->",[346,347],"data-objectid","data-objecttype",[349],"\u002Fwp-json\u002Ffonto\u002F",[4],[]]