Custom Fonts – Host Your Fonts Locally, PSC-2026-64660
- PSC, Research URL
- Application
- Published on
- May 26, 2026
- Research Description
- Typography plugins appear presentation-oriented, but their core workflows involve file uploads, local asset hosting, generated CSS, editor integration, and front-end output. That combination can become security-sensitive when font files, font names, CSS rules, and generated asset paths are accepted from administrators or imported from external providers. Custom Fonts version 2.1.17 has successfully completed the CleanTalk Plugin Security Certification process and received PSC-2026-64660, confirming that the plugin was reviewed from a secure code perspective with attention to common exploitation paths for local font hosting and typography customization plugins.
- Affected versions
-
Min 2.1.17, max 2.1.17.
- Status
-
SAFE & CERTIFIED