Disable and Remove Google Fonts | GDPR & DSGVO friendly

Disable and Remove Google Fonts | GDPR & DSGVO friendly has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it is fixed as of October 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for Disable and Remove Google Fonts | GDPR & DSGVO friendly has a vendor fix available, so running the current release closes it.

All of these findings were reported by neurotx. Disable and Remove Google Fonts | GDPR & DSGVO friendly is installed on roughly 100,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.3.

Strategic Overview

Avg CVSSMedium
6.1/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all Disable and Remove Google Fonts | GDPR & DSGVO friendly vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.1CVE-2026-95595

Disable and Remove Google Fonts | GDPR & DSGVO friendly <= 2.0.2 - Reflected Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records
Plugin Profile
Latestv2.0.3

Disable and Remove Google Fonts | GDPR & DSGVO friendly

fontsplugin

Author

fontsplugin

4.5(46)
90/100
Last Updated
2026-09-13 (1mo ago)
Active Installs
100,000+
Downloads
3,096,105
Requires WP
4.8+
Requires PHP
0+
Tested up to
WP 7.1.3
Created
2019-07-16 (7y ago)

Improve frontend performance by disabling Google Fonts loaded by themes and plugins. Looking to Host Google Fonts locally? Check out Fonts Plugin Pro. While this plugin removes Google Fonts from as many themes and plugins as possible, some require additional steps, we have detailed those here: Remove Google Fonts from WordPress After installing this plugin, visit the Google Fonts Audit page in your admin menu to see the Font Audit results. You can also test your site using the free Google Fonts Checker. Font Audit This plugin includes a Font Audit that shows you exactly which Google Font families your theme and plugins were trying to load and where they were loaded from. The audit runs automatically when you first activate the plugin and can be re-run at any time from the plugin’s admin page. Each removed font is displayed with a live preview rendered in its own typeface, so you can see at a glance what your site has stopped loading. If any fonts are embedded in external CSS files and cannot be automatically removed, they are flagged separately so you know exactly what still needs attention. Plugin Compatibility This plugin will work with all WordPress themes and has been specifically tested with the following: Twenty Twelve Twenty Thirteen Twenty Fourteen Twenty Fifteen Twenty Sixteen Twenty Seventeen Twenty Nineteen Twenty Twenty Twenty Twenty-One Twenty Twenty-Two Twenty Twenty-Three Twenty Twenty-Four Twenty Twenty-Five Acabado Avada Blocksy ColorMag Divi Extra Enfold GeneratePress Hestia Hueman JupiterX Kadence Neve OnePress Shapely Stackable Storefront Sydney Vantage Zerif Lite It will also remove Google Fonts loaded by the following plugins: Divi Redux MailPoet Elementor GroovyMenu Kadence Blocks Beaver Builder Revolution Slider Ajax Search Lite & Pro WPBakery (Visual Composer) As well as improving page load speed, removing Google Font references can also aid with GDPR and DSGVO compliance. Bugs If you find an issue with this plugin, please let us know here! Contributions Anyone is welcome to contribute to this plugin. There are various ways you can contribute: Raise an Issue Translate the Disable and Remove Google Fonts plugin into different languages Provide feedback and suggestions on enhancements

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C