Use Any Font
Healthy: released 2 months ago, tested with WordPress 7.1, no open vulnerabilities. One warning: the author or contributor list changed.
Based on 3 of 5 areas
| Ownership | 80 |
|---|---|
| Maintenance | 100 |
| Security | 100 |
| Support | No data |
| Reputation | No data |
Active signals
Open issues right now, with links to the source.
- WarningOWN-2Author or contributor list changed (seen 5 Nov 2026). Review the latest release before updating, and consider disabling auto-updates for this plugin.5 Nov 2026Evidence
History: 4 past vulnerabilities, all patched. Patched issues are listed in the Security record, not here.
Quick answers
- Is Use Any Font still maintained?
- Yes. Last release 3 Sep 2026, 6 releases in the last 24 months. 3 Sep 2026 · wordpress.org
- Who owns Use Any Font, and has it changed hands?
- Changed. Author or contributor list changed (seen 5 Nov 2026). 5 Nov 2026 · SVN log
- Was Use Any Font removed from wordpress.org?
- No. Listed on wordpress.org as of 5 Nov 2026. 5 Nov 2026 · wordpress.org
- Is Use Any Font safe?
- 4 known vulnerabilities, all fixed (latest in 6.3.09). Not on the exploited list. 25 Sep 2024 · Wordfence Intelligence
- Is the latest Use Any Font update safe to install?
- No ownership change before 6.4.1. No one-star spike after it. 18 Aug 2026 · Release history
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| dnesscarkey | 2 Dec 2012 to 3 Sep 2026, 138 commits |
|---|
Author or contributor list changed (seen 5 Nov 2026).
Maintenance
- Last release
- 2 months ago
- Releases, 24 months
- 6
- Tested up to
- 7.1 current
- Requires PHP
- 7.0 supported 8.2+
| Q1 2024 | 1 |
|---|---|
| Q2 2024 | 2 |
| Q3 2024 | 3 |
| Q4 2024 | 1 |
| Q1 2025 | 1 |
| Q2 2025 | 1 |
| Q3 2025 | 0 |
| Q4 2025 | 1 |
| Q1 2026 | 0 |
| Q2 2026 | 1 |
| Q3 2026 | 1 |
| Q4 2026 | 0 |
Last release 3 Sep 2026. Tested with WordPress 7.1 (current).
Support
- Resolved, last 2 months
- 100%
- Threads, last 2 months
- 2
Trend appears after 8 weekly snapshots.
Security record
4 vulnerabilities on record, all patched (latest fixed in 6.3.09).
Show 4 patched vulnerabilities
| Date | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 25 Sep 2024 | Cross-Site Request Forgery | 4.3 | <= 6.3.08 | 6.3.09 | Before disclosure |
| 10 May 2022 | Cross-Site Scripting | 6.4 | <= 6.2.7 | 6.2.8 | 1 |
| 30 Mar 2022 | Cross-Site Request Forgery to API Key Deactivation | 5.4 | <= 6.1.7 | 6.1.8 | Before disclosure |
| 31 Jan 2022 | Unauthenticated Arbitrary CSS Appending | 6.1 | < 6.2.1 | 6.2.1 | Before disclosure |
Changelog mentions of security fixes: 6.4 (security, CSRF, nonce).
Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.
Reputation
Last 90 days: no reviews. Lifetime: 4.7.
| Last 90 days | No reviews |
|---|---|
| Lifetime | 4.7 |
| Q3 2024 | 4.3 |
|---|---|
| Q4 2024 | 4.3 |
| Q1 2025 | 3.0 |
| Q2 2025 | 4.2 |
| Q4 2025 | 4.7 |
| Q1 2026 | 5.0 |
| Q2 2026 | 4.0 |
| Q3 2026 | 5.0 |
Average rating rose from 4.3 to 5.0 between Q3 2024 and Q3 2026.
| 5 star | 1024 |
|---|---|
| 4 star | 34 |
| 3 star | 12 |
| 2 star | 11 |
| 1 star | 67 |
- Premium Only Plugin · 1 star · 18 Apr 2025
- Requires API key · 1 star · 20 Mar 2025
- Useless · 1 star · 26 Jan 2025
Momentum
- Active installs
- 200,000+
- Downloads, last full week
- 5,187
| 4 May 2026 | 717 |
|---|---|
| 11 May 2026 | 3,325 |
| 18 May 2026 | 3,287 |
| 25 May 2026 | 3,152 |
| 1 Jun 2026 | 2,967 |
| 8 Jun 2026 | 3,045 |
| 15 Jun 2026 | 2,875 |
| 22 Jun 2026 | 71,023 |
| 29 Jun 2026 | 17,903 |
| 6 Jul 2026 | 21,631 |
| 13 Jul 2026 | 8,454 |
| 20 Jul 2026 | 7,751 |
| 27 Jul 2026 | 6,793 |
| 3 Aug 2026 | 6,372 |
| 10 Aug 2026 | 5,173 |
| 17 Aug 2026 | 91,690 |
| 24 Aug 2026 | 14,116 |
| 31 Aug 2026 | 10,344 |
| 7 Sep 2026 | 7,285 |
| 14 Sep 2026 | 6,999 |
| 21 Sep 2026 | 6,422 |
| 28 Sep 2026 | 5,915 |
| 5 Oct 2026 | 5,495 |
| 12 Oct 2026 | 4,730 |
| 19 Oct 2026 | 6,954 |
| 26 Oct 2026 | 5,187 |
Weekly downloads over the last 4 weeks are 56% below the 26-week average.
Healthier alternatives
Same job, rated Healthy, higher Canary Score. Never sponsored.
Facts
- Full name
- Use Any Font | Custom Font Uploader
- Version
- 6.4.1
- Author
- Dinesh Karki
- Added
- 2 Dec 2012
- Last updated
- 3 Sep 2026
- Active installs
- 200,000+
- Requires WordPress
- 4.0
- Tested up to
- 7.1.4
- Requires PHP
- 7.0
- Category
- Design & Themes > Themes & Templates
- Tags
- typography, custom fonts, Font Manager, google fonts, font uploader
Other plugins by this author: WP Armour, Any Mobile Theme Switcher, Jquery Validation For Contact Form 7, Block Plugin Update
Questions about Use Any Font
Is Use Any Font still maintained?
Yes. Last release 3 Sep 2026, 6 releases in the last 24 months.
Who owns Use Any Font, and has it changed hands?
Changed. Author or contributor list changed (seen 5 Nov 2026).
Was Use Any Font removed from wordpress.org?
No. Listed on wordpress.org as of 5 Nov 2026.
Is Use Any Font safe?
4 known vulnerabilities, all fixed (latest in 6.3.09). Not on the exploited list.
Is the latest Use Any Font update safe to install?
No ownership change before 6.4.1. No one-star spike after it.