Custom Fonts – Host Your Fonts Locally

WordPress plugin · custom-fonts · WordPress.org ↗

Latest v2.1.17 Last release Aug 24, 2026 Tested up to WP 7.1.1 400,000+ active installs

Critical

High

Known total

Unfixed

Running Custom Fonts – Host Your Fonts Locally on your site? WP Alerts checks your installed version against every entry below and emails you only when one affects you. Free, no tracking.

Scan a site Monitor my sites →

Severity	Vulnerability	Affected	Fixed in	CVE	Published
MEDIUM CVSS 5.3	Custom Fonts – Host Your Fonts Locally [custom-fonts] < 2.1.17 WPVulnerability	< 2.1.17	v2.1.17	CVE-2025-14351	Jan 19, 2026
MEDIUM CVSS 5.4	Custom Fonts – Host Your Fonts Locally [custom-fonts] < 2.1.5 WPVulnerability	< 2.1.5	v2.1.5	CVE-2024-1332	May 23, 2024

Data aggregated from WPVulnerability, NVD/NIST, ENISA EUVD, CVE.org and WordPress.org. Provided as-is; verify with the plugin author before acting. Disclaimer.