Skip to content
PluginCanary

OMGF

OMGF | GDPR/DSGVO Compliant, Faster Google Fonts. Easy.
by Daan van den Bergh · 300,000+ active installs · Checked 4 Nov 2026
Healthy

Healthy: maintained, last release 2 Nov 2026, 38 releases in 24 months, no unpatched vulnerabilities.

91/ 100 Canary Score
Sub-scores for OMGF
Ownership100
Maintenance100
Security80
SupportNo data
Reputation85

How the score works

Quick answers

Is OMGF still maintained?
Yes. Last release 2 Nov 2026, 38 releases in the last 24 months. 2 Nov 2026 · wordpress.org
Who owns OMGF, and has it changed hands?
No change recorded. Main committer DaanvandenBergh since Jun 2018. 4 Nov 2026 · SVN log
Was OMGF removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
Is OMGF safe?
6 known vulnerabilities, all fixed (latest in 6.3.11). Not on the exploited list. 6 Oct 2026 · Wordfence Intelligence
Is the latest OMGF update safe to install?
No ownership change before 6.4.1. No one-star spike after it. 2 Nov 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
DaanvandenBergh27 Jun 2018 to 2 Nov 2026, 569 commits

1 committer recorded. No ownership change since 2018.

Maintenance

Last release
2 days ago
Releases, 24 months
38
Tested up to
7.1 current
Requires PHP
7.3 supported 8.2+
Releases per quarter
Releases per quarter for OMGF
Q1 202410
Q2 20241
Q3 20241
Q4 20240
Q1 20251
Q2 20255
Q3 20255
Q4 20254
Q1 20269
Q2 20266
Q3 20264
Q4 20264

Last release 2 Nov 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: 5.0 (1 review). Lifetime: 4.7.

Average rating per quarter for OMGF
Q4 20235.0
Q1 20245.0
Q3 20245.0
Q4 20245.0
Q1 20255.0
Q2 20253.7
Q3 20265.0

Average rating stayed at 5.0 between Q4 2023 and Q3 2026.

Rating distribution
5 star191
4 star2
3 star4
2 star3
1 star13
Latest low reviews

Security record

2 vulnerabilities in 24 months (6 on record), all patched (latest fixed in 6.3.11).

Show 6 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
6 Oct 2026OMGF | GDPR/DSGVO Compliant, Faster Google Fonts. Easy. <= 6.3.10 - Unauthenticated Stored Cross-Site Scripting via 's' Search Parameter in comments-atom Feed7.2<= 6.3.106.3.11Patched before disclosure
29 Sep 2026OMGF <= 6.3.10 - Denial of Service to Unauthenticated Site Availability Exhaustion7.5<= 6.3.106.3.11Patched before disclosure
2 Jan 2024OMGF | GDPR/DSGVO Compliant, Faster Google Fonts. Easy. <= 5.7.9 - Missing Authorization to Unauthenticated Directory Deletion and Cross-Site Scripting8.6<= 5.7.95.7.10Patched before disclosure
1 Dec 2021OMGF <= 4.5.11 - Authenticated (Admin+) Arbitrary Folder Deletion via Path Traversal4.9<= 4.5.114.5.12Patched before disclosure
23 Aug 2021OMGF <= 4.5.3 - Subscriber+ Arbitrary File/Folder Deletion8.1<= 4.5.34.5.4Patched before disclosure
23 Aug 2021OMGF <= 4.5.3 - Unauthenticated Path Traversal in REST API9.1<= 4.5.34.5.4Patched before disclosure

Changelog mentions of security fixes: 6.3.8 (security, XSS, nonce); 6.3.9 (security); 6.3.11 (security, escaping); 6.3.12 (security, escaping); 6.3.13 (nonce).

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

100% of 1 support threads resolved in the last 2 months.

Momentum

300,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for OMGF
4 May 20266,871
11 May 2026127,472
18 May 202633,915
25 May 202617,581
1 Jun 2026127,037
8 Jun 202630,014
15 Jun 2026133,148
22 Jun 2026132,603
29 Jun 202633,458
6 Jul 202621,560
13 Jul 202613,756
20 Jul 202613,496
27 Jul 2026126,479
3 Aug 202636,406
10 Aug 2026142,731
17 Aug 202624,473
24 Aug 202615,360
31 Aug 202612,362
7 Sep 20269,460
14 Sep 20268,561
21 Sep 2026144,193
28 Sep 2026141,589
5 Oct 202632,422
12 Oct 2026139,871
19 Oct 2026157,494
26 Oct 2026138,425
2 Nov 202612,628

Weekly downloads over the last 4 weeks are 65% above the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

Local Google FontsScore 100 · 100,000+The Icon BlockScore 100 · 40,000+Custom FontsScore 98 · 400,000+Fonts PluginScore 97 · 200,000+Custom Adobe Fonts (Typekit)Score 97 · 60,000+

Facts

Version6.4.1
AuthorDaan van den Bergh
Added27 Jun 2018
Last updated2 Nov 2026
Active installs300,000+
Requires WordPress5.9
Tested up to7.1.4
Requires PHP7.3
CategoryPerformance & Optimization > Caching Solutions
TagsGDPR, cache, dsgvo, fonts, google

Other plugins by this author: CAOS | Host Google Analytics Locally, GDPRess | Eliminate external requests to increase GDPR compliance

Questions

Is OMGF still maintained?

Yes. Last release 2 Nov 2026, 38 releases in the last 24 months.

Who owns OMGF, and has it changed hands?

No change recorded. Main committer DaanvandenBergh since Jun 2018.

Was OMGF removed from wordpress.org?

No. Listed on wordpress.org as of 4 Nov 2026.

Is OMGF safe?

6 known vulnerabilities, all fixed (latest in 6.3.11). Not on the exploited list.

Is the latest OMGF update safe to install?

No ownership change before 6.4.1. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 4 Nov 2026.Report a data issue