[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fO7j6G01DxoaLssDigOfPR-4vKj91HIF4oprQYKreLD8":3,"$foOcmv4aP_bOlS2yEQjoNR9lFXy-AXGVm7cEJ4QO0gOk":237,"$fKxRiltKoh-yLTUlhzpBpEQsBrbxZG4dmi2UK4h74Nxk":242},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":11,"num_ratings":11,"last_updated":13,"tested_up_to":14,"requires_at_least":15,"requires_php":16,"tags":17,"homepage":22,"download_link":23,"security_score":24,"vuln_count":11,"unpatched_count":11,"last_vuln_date":25,"fetched_at":26,"discovery_status":27,"vulnerabilities":28,"developer":29,"crawl_stats":25,"alternatives":35,"analysis":133,"fingerprints":217},"fonts-manager","Fonts Manager – Local Hosting for Google Fonts","1.0.0","aleswebs","https:\u002F\u002Fprofiles.wordpress.org\u002Faleswebs\u002F","\u003Cp>Fonts Manager is a WordPress plugin that enables you to host Google Fonts locally, optimizing the performance and privacy of your website. The plugin scans your website pages, retrieves Google Fonts URLs, downloads the fonts locally, and replaces the Google Fonts URLs on your pages with local links.\u003C\u002Fp>\n\u003Ch3>Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Cstrong>Local Font Hosting:\u003C\u002Fstrong> Host Google Fonts locally for improved performance and privacy.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Automatic Scanning:\u003C\u002Fstrong> The plugin automatically scans your website pages to identify and retrieve Google Fonts.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Effortless Integration:\u003C\u002Fstrong> Seamlessly replace Google Fonts URLs on your pages with local links.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Support\u003C\u002Fh3>\n\u003Cp>For support or inquiries, please visit https:\u002F\u002Fplugins.aleswebs.com.\u003C\u002Fp>\n\u003Ch3>License\u003C\u002Fh3>\n\u003Cp>Fonts Manager is licensed under the GPLv3 or later.\u003C\u002Fp>\n","Fonts Manager is a WordPress plugin that enables you to host Google Fonts locally, optimizing the performance and privacy of your website.",0,1770,"2024-02-17T20:17:00.000Z","6.4.8","5.9","7.2",[18,19,20,21],"google-fonts","local-hosting","performance","web-fonts","https:\u002F\u002Fplugins.aleswebs.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ffonts-manager.1.0.0.zip",85,null,"2026-04-06T09:54:40.288Z","no_bundle",[],{"slug":7,"display_name":7,"profile_url":8,"plugin_count":30,"total_installs":31,"avg_security_score":32,"avg_patch_time_days":33,"trust_score":32,"computed_at":34},3,100,80,30,"2026-05-20T00:15:20.789Z",[36,61,82,101,116],{"slug":37,"name":38,"version":39,"author":40,"author_profile":41,"description":42,"short_description":43,"active_installs":44,"downloaded":45,"rating":46,"num_ratings":47,"last_updated":48,"tested_up_to":49,"requires_at_least":50,"requires_php":51,"tags":52,"homepage":55,"download_link":56,"security_score":57,"vuln_count":58,"unpatched_count":11,"last_vuln_date":59,"fetched_at":60},"custom-fonts","Custom Fonts – Host Your Fonts Locally","2.1.17","Brainstorm Force","https:\u002F\u002Fprofiles.wordpress.org\u002Fbrainstormforce\u002F","\u003Cp>\u003Cstrong>HOST FONTS, IMPROVE WEBSITE SPEED, AND ELIMINATE PRIVACY CONCERNS\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>★★★★★\u003C\u002Fp>\n\u003Ch3>IMPROVED SPEED AND PERFORMANCE 🚀\u003C\u002Fh3>\n\u003Cp>Custom Fonts enables you to upload your own custom fonts or choose from a vast collection of Google Fonts, all hosted directly on your own web server.\u003C\u002Fp>\n\u003Cp>By hosting fonts locally, you can significantly improve your website’s performance. As the fonts load directly from your server, it reduces external requests, significantly reducing page load times.\u003C\u002Fp>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fbsf.io\u002Fcustom-fonts-demo\" rel=\"nofollow ugc\">Try it out on a free dummy site\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>UPLOAD YOUR CUSTOM FONTS OR CHOOSE FROM GOOGLE FONTS 🎨\u003C\u002Fh3>\n\u003Cp>With Custom Fonts, you have the freedom to customize your website typography to match your unique brand identity!\u003C\u002Fp>\n\u003Cp>You can easily upload your own custom font files, such as .ttf or .otf, and use them throughout your website. Or, you can choose from a rich library of Google Fonts and host them locally on your server, ensuring full control over their use.\u003C\u002Fp>\n\u003Ch3>UPLOAD MULTIPLE FONT VARIANTS 🆒\u003C\u002Fh3>\n\u003Cp>You have the flexibility to upload any number of font variants to suit your design needs. Whether it’s different weights, styles, or character sets, easily manage and customize the necessary font variants. Personalize your typography to perfection and create a unique visual identity for your website.\u003C\u002Fp>\n\u003Ch3>ENHANCED PRIVACY AND GDPR COMPLIANCE 🛡️\u003C\u002Fh3>\n\u003Cp>Privacy is a top priority, especially in light of data protection regulations like GDPR. By using Custom Fonts, you can self-host your fonts, eliminating any privacy concerns associated with external font services. Take full control over the fonts you use on your website and ensure compliance with privacy regulations.\u003C\u002Fp>\n\u003Ch3>FULL SITE EDITING THEME SUPPORT AND EASY INTEGRATION 🎉\u003C\u002Fh3>\n\u003Cp>Custom Fonts seamlessly integrates with WordPress full site editing themes, allowing you to effortlessly choose and customize fonts across your entire website. Say goodbye to limitations and enjoy the freedom to create a consistent and visually appealing typography experience for visitors.\u003C\u002Fp>\n\u003Ch3>BEAUTIFUL AND USER-FRIENDLY INTERFACE MADE WITH REACT JS 💻\u003C\u002Fh3>\n\u003Cp>We take pride in providing an elegant and intuitive user interface for Custom Fonts. Built with React JS, our interface offers a seamless experience, making it easy to upload and manage custom fonts, select from Google Fonts, and customize typography settings to suit your needs.\u003C\u002Fp>\n\u003Ch3>COMPLETELY FREE, NO UPSELLS OR HIDDEN COSTS 🆓\u003C\u002Fh3>\n\u003Cp>Custom Fonts is completely free, with no upsells or hidden costs. We believe in empowering website owners with essential tools without nickel-and-diming. Enjoy full access to all the features and functionality of Custom Fonts.\u003C\u002Fp>\n\u003Ch3>WHO CAN BENEFIT FROM CUSTOM FONTS?\u003C\u002Fh3>\n\u003Col>\n\u003Cli>\n\u003Cp>\u003Cstrong>Web designers and developers:\u003C\u002Fstrong> You can easily enhance the typography and overall design of your projects, making them stand out from the crowd.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>eCommerce store owners:\u003C\u002Fstrong> Custom fonts can enhance your brand identity and provide a distinctive visual style for product descriptions, banners, and more. Hosting fonts locally with Custom Fonts improves website performance, benefiting you and your consumers.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Bloggers and content creators:\u003C\u002Fstrong> Make your content truly pop. Stand out from the crowd and captivate your audience with Custom Fonts.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>SEO experts:\u003C\u002Fstrong> You can now boost page speed by hosting fonts locally with Custom Fonts. Fewer external requests means faster loading times! Plus, you ensure compliance with privacy regulations.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>Custom Fonts caters to anyone who values the customization of typography, performance optimization, privacy control, and compliance with regulations.\u003C\u002Fp>\n\u003Cp>If you want to take control of your website’s typography and enhance its overall appearance, Custom Fonts is the plugin for you!\u003C\u002Fp>\n\u003Ch3>SOME OF THE SUPPORTED WORDPRESS THEMES:\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fwpastra.com\u002F\" rel=\"nofollow ugc\">Astra WordPress Theme\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fthemes\u002Fspectra-one\u002F\" rel=\"ugc\">Spectra One Theme\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>All FSE themes\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>SOME OF THE SUPPORTED WORDPRESS PLUGINS:\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Spectra Page Builder\u003C\u002Fli>\n\u003Cli>Elementor Page Builder\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Branding Guidelines\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>When mentioning Custom Fonts, please use the following format:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Custom Fonts [correct]\u003C\u002Fli>\n\u003Cli>CustomFonts [incorrect]\u003C\u002Fli>\n\u003Cli>Custom fonts [incorrect]\u003C\u002Fli>\n\u003Cli>CustomFont [incorrect]\u003C\u002Fli>\n\u003Cli>Customfont [incorrect]\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Our Other Products:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwpastra.com\u002F\" rel=\"nofollow ugc\">Astra\u003C\u002Fa> – The most popular WordPress theme that perfectly integrates with Custom Fonts.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwpspectra.com\u002F\" rel=\"nofollow ugc\">Spectra\u003C\u002Fa> – A visual website builder built with WordPress’ native block editor.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fultimateelementor.com\u002F\" rel=\"nofollow ugc\">Ultimate Addons for Elementor\u003C\u002Fa> – The best addons to extend Elementor’s capabilities.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwpschema.com\u002F\" rel=\"nofollow ugc\">Schema Pro\u003C\u002Fa> – All-in-one schema markup plugin that offers complete functionality and easy configuration.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fprojecthuddle.com\u002F\" rel=\"nofollow ugc\">ProjectHuddle\u003C\u002Fa> – Lets you collect sticky note-style feedback on page designs and web projects.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Other partnered products:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fcartflows.com\u002F\" rel=\"nofollow ugc\">CartFlows\u003C\u002Fa> – One-click sales funnel builder for WordPress.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fprestoplayer.com\u002F\" rel=\"nofollow ugc\">Presto Player\u003C\u002Fa> – Best video player plugin for WordPress.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fsurecart.com\u002F\" rel=\"nofollow ugc\">SureCart\u003C\u002Fa> – A powerful eCommerce platform designed to grow your business by effortlessly selling online.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fsuremembers.com\u002F\" rel=\"nofollow ugc\">SureMembers\u003C\u002Fa> – Fastest and easiest way to protect content on your website and build memberships.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fottokit.com\u002F\" rel=\"nofollow ugc\">OttoKit\u003C\u002Fa> – Connects your favorite tools so you can automate workflows and streamline your business processes.\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.surewriter.com\u002F\" rel=\"nofollow ugc\">SureWriter\u003C\u002Fa> – AI writing tool to make your web design journey faster.\u003C\u002Fli>\n\u003C\u002Ful>\n","Custom Fonts is a powerful WordPress plugin that allows you to upload your own custom fonts or choose from a vast collection of Google Fonts, all host …",400000,6327909,86,62,"2026-01-19T06:43:00.000Z","6.9.4","5.0","",[37,53,54,18,20],"fonts","full-site-editing","http:\u002F\u002Fwww.wpastra.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcustom-fonts.2.1.17.zip",98,2,"2026-01-19 15:16:44","2026-04-16T10:56:18.058Z",{"slug":62,"name":63,"version":64,"author":65,"author_profile":66,"description":67,"short_description":68,"active_installs":69,"downloaded":70,"rating":71,"num_ratings":72,"last_updated":73,"tested_up_to":74,"requires_at_least":75,"requires_php":76,"tags":77,"homepage":80,"download_link":81,"security_score":24,"vuln_count":11,"unpatched_count":11,"last_vuln_date":25,"fetched_at":60},"disable-google-fonts","Disable Google Fonts","2.0","Milan Dinić","https:\u002F\u002Fprofiles.wordpress.org\u002Fdimadin\u002F","\u003Cp>\u003Ca href=\"https:\u002F\u002Fmilandinic.com\u002Fwordpress\u002Fplugins\u002Fdisable-google-fonts\u002F\" rel=\"nofollow ugc\">Plugin homepage\u003C\u002Fa> | \u003Ca href=\"https:\u002F\u002Fmilandinic.com\u002F\" rel=\"nofollow ugc\">Plugin author\u003C\u002Fa> | \u003Ca href=\"https:\u002F\u002Fmilandinic.com\u002Fdonate\u002F\" rel=\"nofollow ugc\">Donate\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>This plugin stops loading of fonts from Google Fonts used by WordPress core, Gutenberg plugin, bundled themes (Twenty Twelve, Twenty Thirteen, Twenty Fourteen, Twenty Fifteen, Twenty Sixteen, Twenty Seventeen), and most other themes. If theme or plugin (whose name is not listed here) uses fonts from Google Fonts, those fonts still might be loaded if that theme or plugin loads fonts from Google in a way that is incompatible with this plugin.\u003C\u002Fp>\n\u003Cp>Reasons for not using Google Fonts might be privacy and security, local development or production, blocking of Google’s servers, characters not supported by font, performance.\u003C\u002Fp>\n\u003Cp>Disable Google Fonts is a very lightweight, it has no settings, just activate it and it works immediately.\u003C\u002Fp>\n\u003Cp>And it’s on \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fdimadin\u002Fdisable-google-fonts\" rel=\"nofollow ugc\">GitHub\u003C\u002Fa>.\u003C\u002Fp>\n","Disable enqueuing of fonts from Google used by WordPress core, default themes, Gutenberg, and many more.",40000,894279,88,42,"2019-02-24T21:01:00.000Z","5.1.22","3.5","5.2.4",[18,78,79],"google-web-fonts","open-sans","https:\u002F\u002Fmilandinic.com\u002Fwordpress\u002Fplugins\u002Fdisable-google-fonts\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fdisable-google-fonts.2.0.zip",{"slug":83,"name":84,"version":85,"author":86,"author_profile":87,"description":88,"short_description":89,"active_installs":90,"downloaded":91,"rating":31,"num_ratings":92,"last_updated":93,"tested_up_to":94,"requires_at_least":95,"requires_php":51,"tags":96,"homepage":51,"download_link":100,"security_score":31,"vuln_count":11,"unpatched_count":11,"last_vuln_date":25,"fetched_at":60},"chrome-font-rendering-fix","Chrome and Safari Web Font Rendering Fix","1.0.1","TheIToons","https:\u002F\u002Fprofiles.wordpress.org\u002Fpntrivedy\u002F","\u003Cp>This plugin includes a simple JavaScript snippet that helps your pages display local fonts while external fonts load in the background. Prevents font flicker and improves user experience, especially for Chrome\u002FSafari users.\u003C\u002Fp>\n\u003Ch3>Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Prevents font flickering.\u003C\u002Fli>\n\u003Cli>Fixes Chrome\u002FSafari rendering bugs.\u003C\u002Fli>\n\u003Cli>Lightweight and plug-and-play.\u003C\u002Fli>\n\u003C\u002Ful>\n","Fix Chrome\u002FSafari font rendering issues by displaying local fonts until web fonts load.",40,2712,1,"2025-05-30T11:40:00.000Z","6.8.5","3.0.1",[97,98,18,99,21],"font-face","font","rendering","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fchrome-font-rendering-fix.1.0.1.zip",{"slug":102,"name":103,"version":104,"author":65,"author_profile":66,"description":105,"short_description":106,"active_installs":107,"downloaded":108,"rating":11,"num_ratings":11,"last_updated":109,"tested_up_to":110,"requires_at_least":111,"requires_php":51,"tags":112,"homepage":114,"download_link":115,"security_score":24,"vuln_count":11,"unpatched_count":11,"last_vuln_date":25,"fetched_at":60},"enable-disabled-serbian-latin-google-fonts","Enable Disabled Serbian Latin Google Fonts","1.0","\u003Cp>This plugin enables loading of fonts used by bundled themes (Twenty Thirteen, Twenty Fifteen, Twenty Sixteen, Twenty Seventeen) from Google Fonts that were previously disabled by \u003Ca href=\"https:\u002F\u002Fsr.wordpress.org\u002F\" rel=\"nofollow ugc\">Serbian language package\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cp>Those fonts were disabled by default because they don’t support Serbian Cyrillic scripts, but since they do support Serbian Latin scripts this plugin re-enables them. Fonts that support both scripts are already enabled while fonts that do not support either script continue to be disabled.\u003C\u002Fp>\n\u003Cp>Enable Disabled Serbian Latin Google Fonts is a very lightweight, it has no settings, just activate it and it works immediately.\u003C\u002Fp>\n\u003Cp>And it’s on \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fdimadin\u002Fenable-disabled-serbian-latin-google-fonts\" rel=\"nofollow ugc\">GitHub\u003C\u002Fa>.\u003C\u002Fp>\n","Enable enqueuing of Google fonts disabled in Serbian language package.",10,1686,"2016-12-13T21:12:00.000Z","4.7.33","3.7",[18,78,113],"serbian-latin","http:\u002F\u002Fblog.milandinic.com\u002Fwordpress\u002Fplugins\u002Fenable-disabled-serbian-latin-google-fonts\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fenable-disabled-serbian-latin-google-fonts.1.0.zip",{"slug":117,"name":118,"version":119,"author":120,"author_profile":121,"description":122,"short_description":123,"active_installs":11,"downloaded":124,"rating":11,"num_ratings":11,"last_updated":125,"tested_up_to":49,"requires_at_least":50,"requires_php":126,"tags":127,"homepage":131,"download_link":132,"security_score":31,"vuln_count":11,"unpatched_count":11,"last_vuln_date":25,"fetched_at":60},"browsefyi-local-font-loader-for-google-fonts","LocalFonts","2.0.1","Browse.FYI","https:\u002F\u002Fprofiles.wordpress.org\u002Fbrowsefyi\u002F","\u003Cp>\u003Cstrong>LocalFonts\u003C\u002Fstrong> automatically detects, downloads, and serves Google Fonts from your own server instead of loading them from Google’s external CDN. No manual configuration needed — just activate and your site’s fonts are instantly self-hosted.\u003C\u002Fp>\n\u003Ch4>Why Self-Host Google Fonts?\u003C\u002Fh4>\n\u003Cp>Loading web fonts from Google’s servers (fonts.googleapis.com and fonts.gstatic.com) sends your visitors’ IP addresses to Google with every page load. This raises serious privacy concerns and has legal implications under data protection regulations worldwide.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>GDPR & DSGVO Compliance\u003C\u002Fstrong> — European courts have ruled that loading Google Fonts from Google’s servers without consent violates GDPR (General Data Protection Regulation) \u002F DSGVO (Datenschutz-Grundverordnung). A German court fined a website operator for transmitting visitor IP addresses to Google via externally loaded fonts. Self-hosting fonts eliminates this risk entirely.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Privacy Protection\u003C\u002Fstrong> — When fonts are served locally, zero connections are made to Google’s servers. No visitor IP addresses are transmitted, no tracking occurs, and no third-party requests are made. Your visitors’ data stays on your server.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Faster Page Load Times\u003C\u002Fstrong> — Eliminate extra DNS lookups, TCP connections, and TLS handshakes to fonts.googleapis.com and fonts.gstatic.com. Local fonts load from the same server as your site, reducing latency and improving Core Web Vitals metrics including Largest Contentful Paint (LCP), First Contentful Paint (FCP), and Cumulative Layout Shift (CLS).\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Better PageSpeed & Performance Scores\u003C\u002Fstrong> — Google PageSpeed Insights, GTmetrix, and Lighthouse often flag external font loading as a performance bottleneck. Self-hosting fonts eliminates “Reduce the impact of third-party code” and “Preconnect to required origins” warnings.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Reliability & Uptime\u003C\u002Fstrong> — No dependency on Google’s CDN availability. Your fonts work even if Google’s servers are slow, blocked, or unreachable in certain regions or corporate networks.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Simplified Cookie Consent\u003C\u002Fstrong> — By eliminating third-party connections to Google, you reduce the scope of your cookie consent and privacy policy requirements, as there are fewer external services to disclose.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>What Google Font References Does It Catch?\u003C\u002Fh4>\n\u003Cp>This plugin intercepts Google Fonts loaded through every common method used by WordPress themes, plugins, and page builders:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Enqueued stylesheets\u003C\u002Fstrong> — Fonts registered and enqueued via \u003Ccode>wp_enqueue_style()\u003C\u002Fcode> using the Google Fonts CSS API v1 (\u003Ccode>\u002Fcss?family=\u003C\u002Fcode>) and CSS API v2 (\u003Ccode>\u002Fcss2?family=\u003C\u002Fcode>)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Hardcoded \u003Ccode>\u003Clink>\u003C\u002Fcode> tags\u003C\u002Fstrong> — Font references hardcoded directly in theme templates, header.php, footer.php, or plugin output\u003C\u002Fli>\n\u003Cli>\u003Cstrong>CSS \u003Ccode>@import url(...)\u003C\u002Fcode> rules\u003C\u002Fstrong> — Import statements in inline \u003Ccode>\u003Cstyle>\u003C\u002Fcode> blocks and external stylesheets\u003C\u002Fli>\n\u003Cli>\u003Cstrong>CSS \u003Ccode>@import \"...\"\u003C\u002Fcode> rules\u003C\u002Fstrong> — Import statements without the \u003Ccode>url()\u003C\u002Fcode> wrapper (valid CSS syntax)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Google Material Icons\u003C\u002Fstrong> — References to the \u003Ccode>\u002Ficon\u003C\u002Fcode> endpoint at fonts.googleapis.com for Material Design icon fonts and Material Symbols\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Protocol-relative URLs\u003C\u002Fstrong> — URLs starting with \u003Ccode>\u002F\u002Ffonts.googleapis.com\u003C\u002Fcode> (without https:)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>HTML-encoded URLs\u003C\u002Fstrong> — URLs containing \u003Ccode>&\u003C\u002Fcode> and other HTML entities commonly output by themes and page builders\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>It also removes \u003Ccode>dns-prefetch\u003C\u002Fcode> and \u003Ccode>preconnect\u003C\u002Fcode> resource hints for \u003Ccode>fonts.googleapis.com\u003C\u002Fcode> and \u003Ccode>fonts.gstatic.com\u003C\u002Fcode>, ensuring your site makes absolutely zero connections to Google’s font servers.\u003C\u002Fp>\n\u003Ch4>How It Works\u003C\u002Fh4>\n\u003Col>\n\u003Cli>\u003Cstrong>Detect\u003C\u002Fstrong> — On the first page load after activation, the plugin automatically identifies all Google Font URLs across your entire site.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Download\u003C\u002Fstrong> — Font files are downloaded in the background via WP-Cron so visitors experience no delay. The plugin requests WOFF2 format — the smallest and fastest web font format supported by all modern browsers.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Rewrite\u003C\u002Fstrong> — All Google Font references in your page HTML are rewritten to point to the locally hosted copies on your server.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Serve\u003C\u002Fstrong> — Subsequent page loads serve the cached local font files instantly from your own server with no external requests.\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>Font files are stored in \u003Ccode>wp-content\u002Fuploads\u002Flgfl-fonts\u002F\u003C\u002Fcode> with each unique font URL getting its own subdirectory.\u003C\u002Fp>\n\u003Ch4>Compatibility\u003C\u002Fh4>\n\u003Cp>LocalFonts works with virtually any WordPress setup:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Any WordPress theme\u003C\u002Fstrong> — flavor starter themes, starter themes, commercial themes, custom themes, classic themes, and block themes (Full Site Editing)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Page builders\u003C\u002Fstrong> — Elementor, Beaver Builder, Divi, WPBakery, Brizy, Oxygen, Bricks, Breakdance, Kadence, GeneratePress, Avada, and more\u003C\u002Fli>\n\u003Cli>\u003Cstrong>WooCommerce\u003C\u002Fstrong> — Catches fonts loaded by WooCommerce and its extensions\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Block Editor (Gutenberg)\u003C\u002Fstrong> — Works with the native WordPress block editor and block-based themes\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Multilingual plugins\u003C\u002Fstrong> — Compatible with WPML, Polylang, TranslatePress, and other translation solutions\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Caching plugins\u003C\u002Fstrong> — Works alongside WP Super Cache, W3 Total Cache, LiteSpeed Cache, WP Rocket, and other caching solutions\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Any plugin that loads Google Fonts\u003C\u002Fstrong> — If it loads fonts from fonts.googleapis.com, LocalFonts will catch and self-host them\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>Zero configuration\u003C\u002Fstrong> — Works automatically on activation with no settings to configure\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Enable\u002Fdisable toggle\u003C\u002Fstrong> — Easily turn local font hosting on and off from Settings\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Manual download button\u003C\u002Fstrong> — Pre-download all detected Google Fonts with one click\u003C\u002Fli>\n\u003Cli>\u003Cstrong>System status dashboard\u003C\u002Fstrong> — Check write permissions, filesystem method, and font storage directory status at a glance\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Async background downloads\u003C\u002Fstrong> — Fonts are downloaded via WP-Cron in the background so the first visitor is never delayed\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Clean uninstall\u003C\u002Fstrong> — All downloaded font files and plugin settings are removed when you uninstall the plugin, following WordPress best practices\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>External services\u003C\u002Fh3>\n\u003Cp>This plugin connects to the Google Fonts API (fonts.googleapis.com) and the Google Fonts CDN (fonts.gstatic.com) to download font files for local hosting. These connections happen only when a Google Font URL is first detected on your site and is not yet cached locally.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>What is sent:\u003C\u002Fstrong> the Google Font family name and variant parameters as they appear in the requesting CSS URL (e.g., \u003Ccode>family=Roboto:wght@400;700\u003C\u002Fcode>). No site data, user data, or personal information is transmitted.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>When it is sent:\u003C\u002Fstrong> once per unique Google Font URL, during an asynchronous WP-Cron job triggered the first time the font is seen. All subsequent page loads serve font files from your own server with zero external requests.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Service provider:\u003C\u002Fstrong> Google LLC\u003Cbr \u002F>\n\u003Cstrong>Terms of Service:\u003C\u002Fstrong> https:\u002F\u002Fdevelopers.google.com\u002Ffonts\u002Ffaq#what_does_using_the_google_fonts_api_mean_for_the_privacy_of_my_users\u003Cbr \u002F>\n\u003Cstrong>Privacy Policy:\u003C\u002Fstrong> https:\u002F\u002Fpolicies.google.com\u002Fprivacy\u003C\u002Fp>\n","Self-host Google Fonts for faster load times, GDPR\u002FDSGVO compliance, and visitor privacy. Zero configuration required.",72,"2026-04-15T13:31:00.000Z","7.4",[128,18,129,20,130],"gdpr","local-fonts","self-host","https:\u002F\u002Fbrowse.fyi\u002Fresources\u002Flocalfonts","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbrowsefyi-local-font-loader-for-google-fonts.2.0.1.zip",{"attackSurface":134,"codeSignals":183,"taintFlows":206,"riskAssessment":207,"analyzedAt":216},{"hooks":135,"ajaxHandlers":155,"restRoutes":179,"shortcodes":180,"cronEvents":181,"entryPointCount":182,"unprotectedCount":182},[136,142,146,150],{"type":137,"name":138,"callback":139,"file":140,"line":141},"action","init","winofm_init","fonts-manager.php",64,{"type":137,"name":143,"callback":144,"file":140,"line":145},"admin_menu","winofm_register_menu",73,{"type":137,"name":147,"callback":148,"file":140,"line":149},"admin_enqueue_scripts","winofm_admin_enqueue_scripts",82,{"type":137,"name":151,"callback":152,"file":153,"line":154},"template_redirect","winofm_font_links_replace","includes\u002Ffunctions.php",297,[156,161,164,167,170,173,176],{"action":157,"nopriv":158,"callback":157,"hasNonce":158,"hasCapCheck":158,"file":159,"line":160},"winofm_scan_page",false,"includes\u002Fajax-calls\u002Flocalization.php",114,{"action":162,"nopriv":158,"callback":162,"hasNonce":158,"hasCapCheck":158,"file":159,"line":163},"winofm_host_fonts",168,{"action":165,"nopriv":158,"callback":165,"hasNonce":158,"hasCapCheck":158,"file":153,"line":166},"winofm_tool_content",354,{"action":168,"nopriv":158,"callback":168,"hasNonce":158,"hasCapCheck":158,"file":153,"line":169},"winofm_cleanup_files",416,{"action":171,"nopriv":158,"callback":171,"hasNonce":158,"hasCapCheck":158,"file":153,"line":172},"winofm_regenerate_files",464,{"action":174,"nopriv":158,"callback":174,"hasNonce":158,"hasCapCheck":158,"file":153,"line":175},"winofm_save_files_locally",498,{"action":177,"nopriv":158,"callback":177,"hasNonce":158,"hasCapCheck":158,"file":153,"line":178},"winofm_save_settings",523,[],[],[],7,{"dangerousFunctions":184,"sqlUsage":185,"outputEscaping":187,"fileOperations":204,"externalRequests":11,"nonceChecks":11,"capabilityChecks":11,"bundledLibraries":205},[],{"prepared":11,"raw":11,"locations":186},[],{"escaped":188,"rawEcho":189,"locations":190},60,6,[191,194,196,198,200,202],{"file":159,"line":192,"context":193},110,"raw output",{"file":159,"line":195,"context":193},164,{"file":153,"line":197,"context":193},351,{"file":153,"line":199,"context":193},413,{"file":153,"line":201,"context":193},461,{"file":153,"line":203,"context":193},495,12,[],[],{"summary":208,"deductions":209},"The \"fonts-manager\" plugin v1.0.0 presents a significant security risk due to its unprotected AJAX handlers. While the code shows good practices like using prepared statements for SQL queries and a high percentage of properly escaped output, the complete lack of authentication checks on all seven identified AJAX entry points is a major concern. This means any unauthenticated user could potentially trigger these handlers, leading to unintended actions or information disclosure depending on the functionality they expose.\n\nThe static analysis also reveals no critical or high-severity taint flows, which is a positive sign. Furthermore, the plugin has no recorded vulnerability history, suggesting a generally secure development past. However, this lack of historical issues does not negate the immediate risk posed by the unprotected AJAX endpoints.\n\nIn conclusion, \"fonts-manager\" v1.0.0 has strengths in its SQL handling and output escaping. However, the presence of numerous unprotected AJAX endpoints creates a critical vulnerability that overshadows these positive aspects. The plugin's security posture is compromised by this oversight, and immediate remediation is recommended.",[210,212,214],{"reason":211,"points":107},"Unprotected AJAX handlers",{"reason":213,"points":107},"Missing nonce checks on AJAX",{"reason":215,"points":107},"Missing capability checks on AJAX","2026-04-16T13:32:30.982Z",{"wat":218,"direct":227},{"assetPaths":219,"generatorPatterns":222,"scriptPaths":223,"versionParams":224},[220,221],"\u002Fwp-content\u002Fplugins\u002Ffonts-manager\u002Fassets\u002Fcss\u002Fstyles.css","\u002Fwp-content\u002Fplugins\u002Ffonts-manager\u002Fassets\u002Fjs\u002Fscripts.js",[],[221],[225,226],"winofm_admin_styles","winofm_localization_tool",{"cssClasses":228,"htmlComments":232,"htmlAttributes":233,"restEndpoints":234,"jsGlobals":235,"shortcodeOutput":236},[229,230,231],"winofm-main","winofm-main-content","winofm-sidebar",[],[],[],[],[],{"error":238,"url":239,"statusCode":240,"statusMessage":241,"message":241},true,"http:\u002F\u002Flocalhost\u002Fapi\u002Fplugins\u002Ffonts-manager\u002Fbundle",404,"no bundle for this plugin yet",{"slug":4,"current_version":6,"total_versions":92,"versions":243},[244],{"version":6,"download_url":23,"svn_tag_url":245,"released_at":25,"has_diff":158,"diff_files_changed":246,"diff_lines":25,"trac_diff_url":25,"vulnerabilities":247,"is_current":238},"https:\u002F\u002Fplugins.svn.wordpress.org\u002Ffonts-manager\u002Ftags\u002F1.0.0\u002F",[],[]]