Security snapshot
Across 5 system-fonts WordPress sites indexed by TLDWP, compared to the all-WordPress average.
Security metrics currently cover 6 matching records in the cached metrics snapshot.
What stands out
TLDWP currently associates 5 indexed WordPress sites with system-fonts, equivalent to 0% of the current WordPress dataset.
The largest measured difference is sensitive-file exposure: 16.7% versus 1.8% overall (+14.9 percentage points).
Username enumeration is 33.3% vs 38.5% overall (-5.2 pp); HTTPS adoption is 100% vs 96.2% overall (+3.8 pp); Header-grade F is 83.3% vs 82.5% overall (+0.8 pp).
These are observational associations among sites where TLDWP detected system-fonts, not evidence that the technology, provider, or domain attribute caused a security outcome. See the overall WordPress security baseline.
System Fonts
System Fonts enqueues a stylesheet that lets you use the native font on each operating system and defines a system-ui css @font-face that you can use on the customizer, your theme’s settings or your own code. Usage example The Twenty Seventeen theme uses this css selector for the body text: body, button, input, select, textarea { font-family: "Libre Franklin", "Helvetica Neue", helvetica, arial, sans-serif; } We are going to replace it with the default system font. I…
| Domain | Exposures | Headers | Last Checked |
|---|---|---|---|
| g*v*-*s*s.org (WP 6.7.7) | F | Sep 8, 2026 | |
| e*t*e*l*t*.nl (WP 5.8.15) | F | Aug 27, 2026 | |
| a*e*r*a*a*o*.com (WP 5.4.21) | B | Aug 26, 2026 | |
| e*h*i*e.com | F | Aug 21, 2026 | |
| e*c*e*d*.com | F | Aug 19, 2026 | |
| s*n*u*.com (WP 7.0.4) | F | Aug 15, 2026 |