Fonts Plugin | Google Fonts, Adobe Fonts & Upload Fonts
Fonts Plugin | Google Fonts, Adobe Fonts & Upload Fonts has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2021 and 2024; all 3 are fixed as of September 2026. Their average CVSS score is 5.6, and the most serious one scores 6.1 out of 10. 2024 was the busiest year with 2 disclosures.
The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (33%). Other recurring categories include Cross-Site Scripting, Missing Authorization.
Every one of the 3 issues recorded for Fonts Plugin | Google Fonts, Adobe Fonts & Upload Fonts has a vendor fix available, so running the current release closes all known holes.
2 independent researchers contributed these findings, most of them (2) reported by Rafie Muhammad. Fonts Plugin | Google Fonts, Adobe Fonts & Upload Fonts is installed on roughly 200,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.
CVE-2024-43301Fonts <= 3.7.7 - Cross-Site Request Forgery
Read the full analysisVulnerability Records

Fonts Plugin | Google Fonts, Adobe Fonts & Upload Fonts
Author
fontsplugin
Pick a font from a dropdown and watch your site change live. When you’re happy, click Publish. The preview updates on your own content as you browse, so you can try as many fonts as you like before anything goes live. You never need to edit theme files or write CSS. Fonts Plugin is the #1 fonts plugin for WordPress: 200,000+ websites, 10.6 million downloads, and a 5.0 rating from 1,217 reviews on WordPress.org. What Can You Do With Fonts Plugin? Fonts Plugin lets you apply different fonts to different parts of your website. Choose one typeface for headings and another for body text, then adjust size, weight, colour, line height and letter spacing from the same screen. The live preview updates instantly, so you can see how a font looks on your own content before saving. The plugin works with every WordPress theme (Twenty Twenty-Five, GeneratePress, Elementor, and others) and requires no changes to your theme files. What Fonts Are Available? Fonts Plugin gives you three ways to get fonts onto your site. Google Fonts: over 1,400 typefaces, all free for personal and commercial use. Adobe Fonts (Typekit): connect your Adobe Creative Cloud subscription and use any typeface from your kit. Your own font files: upload in any standard format for brand fonts that aren’t in either library. Whether you need a sans-serif for a corporate site or a serif for a blog, you can set it up without installing a second plugin. Free Features Live Customizer preview: see fonts on your real site before saving 1,400+ Google Fonts (the complete library, always current) Adobe Fonts (Typekit) integration Upload custom fonts: .ttf, .otf, .woff and .woff2 Works with any WordPress theme, no coding required Gutenberg block for applying Google Fonts in the block editor WooCommerce support Translated into 25+ languages SSL/HTTPS compatible Tested with PHP 7 and PHP 8 Pro Features Pro adds local hosting, font loading controls, and per-element typography. Host Google Fonts locally: font files are served from your own domain, so no visitor request reaches Google Remove external fonts: strip out Google Fonts loaded by your theme and other plugins Rewrite external fonts: convert third-party font requests to your local copies Selective font loading: a font family can arrive with up to sixteen weights and several alphabets. Most sites use three or four. Untick the rest and they stop downloading. Font preloading: text paints sooner without the fallback flash Per-element controls: font size, colour, line height, letter spacing and text transform Custom elements: target your own CSS selectors Priority email support: responses within 24 hours Pro is a one-time payment. Lifetime updates and priority support are included, with no subscription or renewal fees. Every purchase is covered by a 14-day money-back guarantee. Compare free and Pro side by side → Why Choose Fonts Plugin Over Other Font Plugins? Fonts Plugin is the only WordPress font plugin that combines Google Fonts, Adobe Fonts and custom font uploads in a single lightweight plugin, with a live preview in the WordPress Customizer. Unlike page builder typography tools, it works with every theme. Unlike GDPR-focused font plugins that only localize fonts you already have, it also lets you choose and preview new ones. Fonts Plugin is the #1 fonts plugin for WordPress, with a 5.0 average across 1,217 reviews, 200,000+ active installations and 10.6 million downloads to date. Plugin Compatibility Fonts Plugin works with all WordPress themes. It has been tested with: Page Builders Elementor Divi Builder Beaver Builder WPBakery Themes All StudioPress / Genesis themes Twenty Twenty-Five, Twenty Twenty-Four, Twenty Twenty-Three Twenty Twenty, Twenty Nineteen, Twenty Seventeen ThemeGrill themes LyraThemes ThemeIsle themes Helpful Resources Full Documentation Best Google Font Combinations for WordPress Google Fonts Checker — audit any website’s fonts How to Add Google Fonts to WordPress (step-by-step guide) Website Font Checker Free vs Pro Comparison Found a Bug? Please let us know via the support forum. We read every report. Contribute Fonts Plugin is open source and welcomes contributions: Report a bug or issue Translate the plugin into your language Submit feedback or feature requests
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C