Validation results

Avada

13 WARNINGS

Avada

WordPress 6.7 theme

CHANGE BANNER STYLE :

THEME TYPEWordPress theme 6.7
FILE NAMEavadascan.zip
FILE SIZE7544552 bytes
MD5c88cd851ff420161d5f6780deff9711a
SHA10fbd1ff2a90a45e49bdcc2304fffafdeeda68b66
LICENSECustom
FILES INCLUDEDCSS, PHP, XML, Bitmap images, Adobe Illustrator, RTF
VERSION6.2.1
CREATION DATE2020-05-27
LAST FILE UPDATE2020-05-27
LAST VALIDATION2020-05-27 08:50
OTHER VERSIONS
7.9.2 : 0%
7.8.1 : 0%
7.8 : 0%
7.6.1 : 0%
7.5 : 0%
7.4.1 : 0%
7.4 : 0%
7.3.1 : 0%
7.3 : 0%
7.2.1 : 0%
7.11.7 : 0%
7.11.4 : 0%
7.11.3 : 0%
7.11.2 : 0%
7.10.1 : 0%
7.1.1 : 0%
7.1 : 0%
7.0.2 : 0%
7.0.1 : 0%
6.2.3 : 0%
6.2.2 : 0%
6.2.0 : 0%
6.1.2 : 0%
6.1.1 : 0%
6.1.0 : 0%
6.0.3 : 0%
6.0.1 : 0%
6.0 : 0%
5.9.1 : 0%
5.9 : 0%
5.7.2 : 0%
5.7 : 0%
5.6.2 : 0%
5.4.2 : 0%
5.4.1 : 0%
4.0.3 : 0%
3.8.7 : 0%
3.8.3 : 0%

This theme seems to be proprietary. Themecheck doesn't distribute commercial themes.

Critical alerts

Title : Title The <title> tags can only contain a call to wp_title(). Use the wp_title filter to modify the output.
Unwanted files : hidden file(s) or folder(s) .gitattributes .stylelintignore .stylelintrc.json was found.
Presence of iframes : iframes are sometimes used to load unwanted adverts and malicious code on another site Found <iframe width="' . self::$args['width'] . '" height="' . self::$args['height'] . '" frameborder="0" style="border:0" src="https://www.google.com/maps/embed/v1/place?key=' . $api_key . '&language=' . $lang_code . '&q=' . $embed_address . '&maptype=' . self::$args['embed_map_type'] . '&zoom=' . self::$args['zoom'] . '" allowfullscreen> in file class-avada-googlemap.php.
```
Ligne323: $html .= '<iframe width='' . self::$args['width'] . '' height='' . self::$args['heigh
```
Found <iframe ', '<iframe data-privacy-type="' . $type . '" src="" ', $frame ); if ( strpos( $frame, 'class="' ) || strpos( $frame, "class='" ) ) { $frame = str_replace( [ 'class="', "class='" ], 'class="fusion-hidden ', $frame ); } else { $frame = str_replace( '<iframe ', '<iframe class="fusion-hidden" ', $frame ); } $frame_width = false; $frame_height = false; // Get dimensions if set. preg_match( '/width="(.*?)"/', $frame, $width ); if ( isset( $width[1] ) ) { preg_match( '/height="(.*?)"/', $frame, $height ); if ( isset( $height[1] ) ) { $frame_width = $width[1]; $frame_height = $height[1]; } } // Add placeholder. $placeholder = ''; if ( ! strpos( $frame, 'data-fusion-no-placeholder' ) ) { $placeholder = $this-> in file class-avada-privacy-embeds.php. Found <iframe id="fb-preview" name="fb-preview" data-viewport="desktop" title="<?php esc_attr_e( 'Site Preview', 'Avada' ); ?>" name="customize-preview-0" onmousewheel="" src="<?php echo esc_url_raw( $permalink ); ?> in file front-customize.php.
```
Ligne54: <iframe id='fb-preview' name='fb-preview' data-viewport='desktop' title='<?
```

Malware : Operations on file system file_get_contents was found in the file class-avada-importer-data.php

Ligne110: $demos = file_get_contents( Avada::$template_dir_path . '/includes/importer/demos.js

file_get_contents was found in the file class-avada-demo-import.php

Ligne961: $theme_options_json    = file_get_contents( $this->theme_options_file );

Ligne997: $widgets_json   = file_get_contents( $widgets_json );

file_get_contents was found in the file class-avada-demo-import.php

Ligne961: $theme_options_json    = file_get_contents( $this->theme_options_file );

Ligne997: $widgets_json   = file_get_contents( $widgets_json );

file_get_contents was found in the file class-avada-scripts.php

Ligne941: $styles .= file_get_contents( Avada::$template_dir_path . '/assets/css/rtl.min.css' );

Ligne946: $cf7_styles = file_get_contents( wpcf7_plugin_path( 'includes/css/styles.css' ) );

Ligne948: $cf7_styles .= file_get_contents( wpcf7_plugin_path( 'includes/css/styles-rtl.css' ) );

file_get_contents was found in the file class-avada-scripts.php

Ligne941: $styles .= file_get_contents( Avada::$template_dir_path . '/assets/css/rtl.min.css' );

Ligne946: $cf7_styles = file_get_contents( wpcf7_plugin_path( 'includes/css/styles.css' ) );

Ligne948: $cf7_styles .= file_get_contents( wpcf7_plugin_path( 'includes/css/styles-rtl.css' ) );

file_get_contents was found in the file class-avada-scripts.php

Ligne941: $styles .= file_get_contents( Avada::$template_dir_path . '/assets/css/rtl.min.css' );

Ligne946: $cf7_styles = file_get_contents( wpcf7_plugin_path( 'includes/css/styles.css' ) );

Ligne948: $cf7_styles .= file_get_contents( wpcf7_plugin_path( 'includes/css/styles-rtl.css' ) );

file_get_contents was found in the file class-avada-migrate.php

Ligne586: $debug_content = file_get_contents( $debug_file_path );

file_put_contents was found in the file class-avada-migrate.php

Ligne589: file_put_contents( $debug_file_path, $debug_content ); // phpcs:ignore Word

file_get_contents was found in the file class-fusion-dynamic-js-compiler.php

Ligne97: // If it failed, try file_get_contents().

Ligne99: $file_content = file_get_contents( $path ); // phpcs:ignore WordPress.WP.AlternativeFunctio

Ligne147: $file_content = file_get_contents( $path ); // phpcs:ignore WordPress.WP.AlternativeFunctio

file_get_contents was found in the file class-fusion-dynamic-js-compiler.php

Ligne97: // If it failed, try file_get_contents().

Ligne99: $file_content = file_get_contents( $path ); // phpcs:ignore WordPress.WP.AlternativeFunctio

Ligne147: $file_content = file_get_contents( $path ); // phpcs:ignore WordPress.WP.AlternativeFunctio

file_get_contents was found in the file class-fusion-dynamic-js-compiler.php

Ligne97: // If it failed, try file_get_contents().

Ligne99: $file_content = file_get_contents( $path ); // phpcs:ignore WordPress.WP.AlternativeFunctio

Ligne147: $file_content = file_get_contents( $path ); // phpcs:ignore WordPress.WP.AlternativeFunctio

fopen was found in the file class.fusionredux_helpers.php

Ligne631: //$fp = fopen( $file, 'r' );

fread was found in the file class.fusionredux_helpers.php

Ligne634: //$file_data = fread( $fp, 8192 );

fclose was found in the file class.fusionredux_helpers.php

Ligne637: //fclose( $fp );

file_get_contents was found in the file class-fusion-dynamic-css.php

Ligne596: // If it failed, try file_get_contents().

Ligne598: $file_contents = file_get_contents( $path ); // phpcs:ignore WordPress.WP.AlternativeFunctio

file_get_contents was found in the file class-fusion-dynamic-css.php

Ligne596: // If it failed, try file_get_contents().

Ligne598: $file_contents = file_get_contents( $path ); // phpcs:ignore WordPress.WP.AlternativeFunctio

file_get_contents was found in the file class-fusion-media-query-scripts.php

Ligne59: $styles .= file_get_contents( $path ); // phpcs:ignore WordPress.WP.AlternativeFunctio

file_get_contents was found in the file class-fusion-font-awesome.php

Ligne298: // If it failed, try file_get_contents().

Ligne300: $file_contents = file_get_contents( FUSION_LIBRARY_PATH . '/assets/fonts/fontawesome/v4-shim

file_get_contents was found in the file class-fusion-font-awesome.php

Ligne298: // If it failed, try file_get_contents().

Ligne300: $file_contents = file_get_contents( FUSION_LIBRARY_PATH . '/assets/fonts/fontawesome/v4-shim

file_get_contents was found in the file avada-functions.php

Ligne829: $try_file_get_contents = false;

Ligne857: // Try file_get_contents if body is empty.

Ligne860: $body = file_get_contents( $url );

fopen was found in the file avada-functions.php

Ligne859: if ( function_exists( 'ini_get' ) && ini_get( 'allow_url_fopen' ) ) {

Ligne883: $fp = fopen( $file_path, 'w' ); // phpcs:ignore WordPress.WP.AlternativeFunctions

Ligne885: // Return if fopen failed.

fwrite was found in the file avada-functions.php

Ligne881: // If the attempt to write to the file failed, then fallback to fwrite.

Ligne890: $written = fwrite( $fp, $body ); // phpcs:ignore WordPress.WP.AlternativeFunctions

fclose was found in the file avada-functions.php

Ligne891: fclose( $fp ); // phpcs:ignore WordPress.WP.AlternativeFunctions

Admin menu : Themes should use add_theme_page() for adding admin pages. File class-avada-avadaredux.php :

Ligne263: add_submenu_page( 'themes.php', __( 'Avada Options have moved!', 'Avada' ),

File class-avada-layout-bbpress.php :

Ligne49: add_action( 'bbp_template_before_search', [ $this, 'add_search_page_search_form' ] );

Ligne135: public function add_search_page_search_form() {

File welcome.php :

Ligne163: $page = 'add_management_page';

File framework.php :

Ligne1345: // wrappers and need to be appened to using add_submenu_page.

Ligne1396: $this->page = call_user_func( 'add_submenu_page', $page_parent, $page_title, $menu_title, $page_permission

Ligne1454: call_user_func( 'add_submenu_page', $this->args['page_slug'], $section['title'], $section['t

File framework.php :

Ligne1345: // wrappers and need to be appened to using add_submenu_page.

Ligne1396: $this->page = call_user_func( 'add_submenu_page', $page_parent, $page_title, $menu_title, $page_permission

Ligne1454: call_user_func( 'add_submenu_page', $this->args['page_slug'], $section['title'], $section['t

File framework.php :

Ligne1422: $this->page = call_user_func( 'add_menu_page', $this->args['page_title'], $this->args['menu_title'], $this

File framework.php :

Ligne1345: // wrappers and need to be appened to using add_submenu_page.

Ligne1396: $this->page = call_user_func( 'add_submenu_page', $page_parent, $page_title, $menu_title, $page_permission

Ligne1454: call_user_func( 'add_submenu_page', $this->args['page_slug'], $section['title'], $section['t

File class-fusion-patcher-admin-screen.php :

Ligne137: add_submenu_page( // phpcs:ignore WPThemeReview.PluginTerritory.NoAddAdminP

File class-avada-admin.php :

Ligne537: $avada_menu_page_creation_method    = 'add_menu_page';

File class-avada-admin.php :

Ligne538: $avada_submenu_page_creation_method = 'add_submenu_page';

Hidden admin bar : Hidden admin Bar Themes should not hide admin bar. Detected in file : class-fusion-app.php.

Warning

core scripts deregistered : Core scripts deregistration
Found wp_deregister_script in enqueue.php. Themes must not deregister core scripts.
```
Ligne215: wp_deregister_script( 'jquerySelect3' );
```
Found wp_deregister_script in framework.php. Themes must not deregister core scripts.
```
Ligne563: wp_deregister_script( 'wpb_ace' );
```
theme tags : Presence of bad theme tagsFound wrong tag in style.css header.
Text domain : Incorrect use of translation functions.Wrong installation directory for the theme name. The directory name must match the slug of the theme. This theme's correct slug and text-domain is avada.
Text domain : Incorrect use of translation functions.Found a translation function that is missing a text-domain. Function esc_attr_e, with the arguments in file list-widget.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'Avada' in file avada-tgm.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'Avada' in file avada-tgm.php.Found a translation function that is missing a text-domain. Function esc_html__, with the arguments 'Import Page Options. You can import via file or copy and paste from JSON data.' in file class-fusion-panel.php.Found a translation function that is missing a text-domain. Function esc_html__, with the arguments 'Export your Page Options. You can either export as a file or copy the data.' in file class-fusion-panel.php.Found a translation function that is missing a text-domain. Function esc_html__, with the arguments 'Import Theme Options. You can import via file, copy and paste or select an Avada demo.' in file class-fusion-panel.php.Found a translation function that is missing a text-domain. Function esc_html__, with the arguments 'Export your Theme Options. You can either export as a file or copy the data.' in file class-fusion-panel.php.Found a translation function that is missing a text-domain. Function esc_html__, with the arguments '%1$s %2$s' in file demos.php.Found a translation function that is missing a text-domain. Function esc_attr_e, with the arguments 'Move Row' in file sortable-text.php.Found a translation function that is missing a text-domain. Function esc_attr_e, with the arguments 'Remove Row' in file sortable-text.php.Found a translation function that is missing a text-domain. Function esc_attr_e, with the arguments 'Move Row' in file sortable-text.php.Found a translation function that is missing a text-domain. Function esc_attr_e, with the arguments 'Remove Row' in file sortable-text.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Allowed Files' in file class-fusion-custom-icon-set.php.Found a translation function that is missing a text-domain. Function esc_attr_e, with the arguments 'Select File' in file class-fusion-custom-icon-set.php.Found a translation function that has an incorrect number of arguments. Function __, with the arguments 'FusionRedux localization utilities', themecheck, 'Avada' in file full_package.php.Found a translation function that has an incorrect number of arguments. Function __, with the arguments 'FusionRedux Resting Diles', themecheck, 'Avada' in file full_package.php.Found a translation function that has an incorrect number of arguments. Function __, with the arguments 'FusionRedux Code Styles', themecheck, 'Avada' in file full_package.php.Found a translation function that has an incorrect number of arguments. Function __, with the arguments 'FusionRedux Unit Testing', themecheck, 'Avada' in file full_package.php.Found a translation function that has an incorrect number of arguments. Function __, with the arguments 'FusionRedux Plugin File', themecheck, 'Avada' in file full_package.php.Found a translation function that has an incorrect number of arguments. Function __, with the arguments 'FusionRedux Boostrap Tests', themecheck, 'Avada' in file full_package.php.Found a translation function that has an incorrect number of arguments. Function __, with the arguments 'CI Testing FIle', themecheck, 'Avada' in file full_package.php.Found a translation function that has an incorrect number of arguments. Function __, with the arguments 'PHP Unit Testing', themecheck, 'Avada' in file full_package.php.Found a translation function that is missing a text-domain. Function esc_html__, with the arguments 'Avada requires at least WordPress version %1$s. You are running version %2$s. Please upgrade and try again.' in file bootstrap-compat.php.Found a translation function that is missing a text-domain. Function esc_html__, with the arguments 'Avada requires at least PHP version %1$s. You are running version %2$s. Please upgrade and try again.' in file bootstrap-compat.php.Found a translation function that is missing a text-domain. Function esc_html__, with the arguments 'This will be used in the font-family dropdown.' in file typography.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Livraison ' in file functions.php.More than one text-domain is being used in this theme. This means the theme will not be compatible with WordPress.org language packs. The domains found are Avada, the-events-calendar, tribe-events-calendar-pro, woocommerce, bbpress, smile, fusion-builder, themecheck, fusion-core, sermon-manager.
Plugin territory : Plugin territory functionalitiesThe theme uses the register_post_type() function, which is plugin-territory functionality.
Unwanted directories : GIT revision control directoryA.git was found.
PHP short tags : Presence of PHP short tags
PHP short tags were found in file parsedown.php. "This practice is discouraged because they are only available if enabled with short_open_tag php.ini configuration file directive, or if PHP was configured with the --enable-short-tags option" (php.net), which is not the case on many servers.
```
Ligne765: if (preg_match('/^\[(.+?)\]:[ ]*<?(\S+?)>?(?:[ ]+['\'(](.+)['\')])?[ ]*$/', $Line['text'], $matches))
```
Line endings consistency : Both DOS and UNIX style line endingsFound a mix of \r\n and \n line endings in file deprecated.php.
Hidden admin bar : Hidden admin Bar in CSSThemes should not hide admin bar. Detected in file max-shbp-18.css.
Editor style : Presence of editor styleNo reference to add_editor_style() was found in the theme. It is recommended that the theme implements editor styling, so as to make the editor content match the resulting post output in the theme, for a better user experience.
I18N implementation : Proper use of _e(Possible variable $link_to_all found in translation function in list-widget.php. Translation function calls should not contain PHP variables.
I18N implementation : Proper use of esc_attr_e(Possible variable $link_to_all found in translation function in list-widget.php. Translation function calls should not contain PHP variables.
Screenshot : Screenshot fileScreenshot size is 880x660px. Screenshot size should be 1200x900, to account for HiDPI displays. Any 4:3 image size is acceptable, but 1200x900 is preferred.

Tip-off

Optional files : Presence of rtl stylesheet rtl.cssThis theme does not contain optional file rtl.php.
Optional files : Presence of front page template file front-page.phpThis theme does not contain optional file front-page.php.
Optional files : Presence of home template file home.phpThis theme does not contain optional file home.php.
Optional files : Presence of category template file category.phpThis theme does not contain optional file category.php.
Optional files : Presence of tag template file tag.phpThis theme does not contain optional file tag.php.
Optional files : Presence of term template file taxonomy.phpThis theme does not contain optional file taxonomy.php.
Optional files : Presence of date/time template file date.phpThis theme does not contain optional file date.php.
Optional files : Presence of attachment template file attachment.phpThis theme does not contain optional file attachment.php.
Optional files : Presence of image template file image.phpThis theme does not contain optional file image.php.
Use of includes : Use of include or require
The theme appears to use include or require : custom-functions.php
```
Ligne89: // We use include() instead of get_template_part() to pass the $name.
```
```
Ligne102: // We use include() instead of get_template_part() to pass the $id.
```
```
Ligne115: // We use include() instead of get_template_part() to pass the $term.
```
If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
The theme appears to use include or require : class-fusion-settings.php
```
Ligne653: include_once 'class-fusion-multilingual.php';
```
If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
The theme appears to use include or require : field_button_set.php
```
Ligne46: *              ['format']      string Formatting options for paginate fields. Options include ('currency','nice','niceShort','timeAgoInWords' or a valid Date() f
```
If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
The theme appears to use include or require : framework.php
```
Ligne411: // 	require_once 'core/dashboard.php';
```
```
Ligne415: // 		require_once 'core/newsflash.php';
```
If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
The theme appears to use include or require : class-fusion-cache.php
```
Ligne207: include_once 'class-fusion-settings.php';
```
```
Ligne232: include_once 'class-fusion-settings.php';
```
If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
The theme appears to use include or require : metaboxes.php
```
Ligne364: include 'options/options_es.php';
```
```
Ligne373: include 'options/options_slide.php';
```
If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.

Other checked themes

WordPress 6.7 theme

VIEW ALL THEMES