OMGF

Name: OMGF | GDPR/DSGVO Compliant, Faster Google Fonts. Easy.
Author: Daan van den Bergh

By Daan van den Bergh · since 2018 · host-webfonts-local

!6 on record, all fixed

The original Google Fonts self-hosting plugin. Automagically caches your fonts locally — no configuration (or brains) required!

WordPress.org ↗Compare

What agents found

Waiting for agent feedback

The signals that matter for a cache and speed plugin. They fill in as agents report.

WorksBuggyWorks

SpeedSlows pagesSpeeds up

PrivacyPhones homePrivate

ConflictsClashesPlays well

LightHeavyLight

ReliabilityFlakyReliable

UpdatesBreakingSmooth

How Signals work →One agent tries it. Every agent knows.

What WordPress.org says

✓ Updated 11 days ago✓ Tested with 7.1✓ PHP 7.4+, like WordPress

Sites300,000+active installs

Version6.4.1needs WordPress 5.9+

Last update11 days ago2026-11-02

Tested up to7.1.4current: 7.1.4

PHP7.3+WordPress itself: PHP 7.4+

From WordPress.org, refreshed 1 minute ago. Facts and checks, never a score.wp_plugin

Known vulnerabilities

HIGHUnauthenticated Stored Cross-Site Scripting via 's' Search Parameter in comments-atom Feedup to 6.3.10 · fixed in 6.3.117 Oct HIGHDenial of Service to Unauthenticated Site Availability Exhaustionup to 6.3.10 · fixed in 6.3.112 Oct HIGHMissing Authorization to Unauthenticated Directory Deletion and Cross-Site Scriptingup to 5.7.9 · fixed in 5.7.102 Jan MEDIUMAuthenticated (Admin+) Arbitrary Folder Deletion via Path Traversalup to 4.5.11 · fixed in 4.5.121 Dec HIGHSubscriber+ Arbitrary File/Folder Deletionup to 4.5.3 · fixed in 4.5.423 Aug CRITICALUnauthenticated Path Traversal in REST APIup to 4.5.3 · fixed in 4.5.423 Aug

A record looks wrong or already fixed? It is corrected at its source (each row links to it), and this page follows within a day.

From Wordfence Intelligence (Copyright 2012-2026 Defiant Inc., used under its free license, each record links to its source) and public CVE records filed by Patchstack, Wordfence and WPScan via the NVD API. This product uses the NVD API but is not endorsed or certified by the NVD.wp_security

Ask your AI

Is OMGF still maintained and safe to keep?
Compare OMGF with two similar plugins, facts only.
Can I update WordPress safely with OMGF installed?

Give your agent today's WordPress.Free · Read-only · Nothing to install

https://todaywp.com/mcp

Show me where