Validation results

Kayn Pro

13 WARNINGS

Kayn Pro

WordPress 6.7 theme

CHANGE BANNER STYLE :

THEME TYPEWordPress theme 6.7
FILE NAMEkayn-pro-premium-latest.zip
FILE SIZE3227072 bytes
MD5ff0757e0e5aa5b6799a844f741e6ec4c
SHA1296b6b0690b71714e1b13fe79607e963c37914b8
LICENSEGNU GPL 3
FILES INCLUDEDCSS, PHP, XML, Bitmap images, Adobe Illustrator
THEME URIhttps://wp-royal.com/themes/item-kayn-pro/
VERSION1.3
AUTHOR URIhttp://wp-royal.com/
TAGSportfolio, blog, e-commerce, one-column, two-columns, three-columns, left-sidebar, right-sidebar, custom-background, custom-colors, custom-header, custom-menu, custom-logo, featured-images, footer-widgets, rtl-language-support, sticky-post, theme-options,
CREATION DATE2019-06-02
LAST FILE UPDATE2019-06-02
LAST VALIDATION2019-06-02 12:41

This theme seems to be proprietary. Themecheck doesn't distribute commercial themes.

Critical alerts

Security breaches : Use of base64_decode() Found base64_decode in file updates.php. 134: $license = maybe_unserialize(base64_decode($license));Found base64_decode in file api-helpers.php. 5072: if( !function_exists('openssl_decrypt') ) return base64_decode($data);5080: list($encrypted_data, $iv) = explode('::', base64_decode($data), 2);

Security breaches : Use of base64_encode() Found base64_encode in file updates.php.

 $value = base64_encode(maybe_serialize($data));

Found base64_encode in file api-helpers.php.

 if( !function_exists('openssl_encrypt') ) return base64_encode($data);

 return base64_encode($encrypted_data . '::' . $iv);

Malware : Operations on file system file_get_contents was found in the file json.php 153: $json = file_get_contents('{$path}/{$file}');fopen was found in the file json.php 226: $f = fopen('{$path}/{$file}', 'w');fwrite was found in the file json.php 227: fwrite($f, acf_json_encode( $field_group ));fclose was found in the file json.php 228: fclose($f);file_get_contents was found in the file class-acf-admin-tool-import.php 129: $json = file_get_contents( $file['tmp_name'] );file_get_contents was found in the file settings-info.php 163: $items = file_get_contents( acf_get_path('readme.txt') );file_get_contents was found in the file parsers.php 66: $success = $dom->loadXML( file_get_contents( $file ) );269: if ( ! xml_parse( $xml, file_get_contents( $file ), true ) ) {file_get_contents was found in the file parsers.php 66: $success = $dom->loadXML( file_get_contents( $file ) );269: if ( ! xml_parse( $xml, file_get_contents( $file ), true ) ) {fopen was found in the file parsers.php 417: $fp = $this->fopen( $file, 'r' );643: function fopen( $filename, $mode = 'r' ) {646: return fopen( $filename, $mode );fclose was found in the file parsers.php 466: $this->fclose($fp);661: function fclose( $fp ) {664: return fclose( $fp );fopen was found in the file parsers.php 417: $fp = $this->fopen( $file, 'r' );643: function fopen( $filename, $mode = 'r' ) {646: return fopen( $filename, $mode );fopen was found in the file parsers.php 417: $fp = $this->fopen( $file, 'r' );643: function fopen( $filename, $mode = 'r' ) {646: return fopen( $filename, $mode );fclose was found in the file parsers.php 466: $this->fclose($fp);661: function fclose( $fp ) {664: return fclose( $fp );fclose was found in the file parsers.php 466: $this->fclose($fp);661: function fclose( $fp ) {664: return fclose( $fp );file_get_contents was found in the file royal-importer.php 97: $widgets_wie = file_get_contents( $file_path );
Malware : Network operations curl_init was found in the file FreemiusWordPress.php 43: 'curl_init',519: * @param resource $handle A cURL handle returned by curl_init()521: * @return resource $handle A cURL handle returned by curl_init() with CURLOPT_IPRESOLVE set to616: 'curl_init',curl_init was found in the file FreemiusWordPress.php 43: 'curl_init',519: * @param resource $handle A cURL handle returned by curl_init()521: * @return resource $handle A cURL handle returned by curl_init() with CURLOPT_IPRESOLVE set to616: 'curl_init',
Admin menu : Themes should use add_theme_page() for adding admin pages. File class-fs-admin-menu-manager.php : 768: * This is a replication of `add_menu_page()` to avoid Theme Check warning.File class-fs-admin-menu-manager.php : 871: * This is a replication of `add_submenu_page()` to avoid Theme Check warning.File options-page.php : 158: * add_sub_page170: function add_sub_page( $page ) {342: * alias of acf_options_page()->add_sub_page()356: return acf_options_page()->add_sub_page( $page );File admin-options-page.php : 67: $slug = add_menu_page( $page['page_title'], $page['menu_title'], $page['capability'File admin-options-page.php : 72: $slug = add_submenu_page( $page['parent_slug'], $page['page_title'], $page['menu_tiFile admin-settings-updates.php : 162: $page = add_submenu_page('edit.php?post_type=acf-field-group', __('Updates','acf'),File install-network.php : 88: $page = add_submenu_page('index.php', __('Upgrade Database','acf'), __('Upgrade DatFile admin-tools.php : 116: $page = add_submenu_page('edit.php?post_type=acf-field-group', __('Tools','acf'), _File admin.php : 113: add_menu_page(__('Custom Fields','acf'), __('Custom Fields','acf'), $cap, $File admin.php : 117: add_submenu_page($slug, __('Field Groups','acf'), __('Field Groups','acf'),118: add_submenu_page($slug, __('Add New','acf'), __('Add New','acf'), $cap, 'poFile admin.php : 117: add_submenu_page($slug, __('Field Groups','acf'), __('Field Groups','acf'),118: add_submenu_page($slug, __('Add New','acf'), __('Add New','acf'), $cap, 'poFile settings-addons.php : 51: $page = add_submenu_page('edit.php?post_type=acf-field-group', __('Add-ons','acf'),File settings-info.php : 50: add_submenu_page('edit.php?post_type=acf-field-group', __('Info','acf'), __File install.php : 70: $page = add_submenu_page('index.php', __('Upgrade Database','acf'), __('Upgrade Dat
Deprecated functions : wp_get_http wp_get_http found in file wordpress-importer.php. Deprecated since version 4.4. Use WP_Http instead.906: $headers = wp_get_http( $url, $upload['file'] );
Deprecated functions : get_bloginfo get_bloginfo('wpurl') was found in the file contact.php. Use site_url() instead.73: // 'wp_admin_css' => get_bloginfo('wpurl') . '/wp-admin/load-styles.php?c=1&load=buttons,wp-admi

Warning

theme tags : Presence of bad theme tagsFound wrong tag custom-logo in style.css header.
Text domain : Incorrect use of translation functions.Wrong installation directory for the theme name. The directory name must match the slug of the theme. This theme's correct slug and text-domain is kayn-pro.
Text domain : Incorrect use of translation functions.Found a translation function that has an incorrect number of arguments. Function _n, with the arguments '%s requires at least %s selection', '%s requires at least %s selections', min, 'acf' in file class-acf-field-gallery.php.Found a translation function that is missing a text-domain. Function __, with the arguments in file api-helpers.php.Found a translation function that has an incorrect number of arguments. Function _n, with the arguments '%s requires at least %s selection', '%s requires at least %s selections', min, 'acf' in file class-acf-field-relationship.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Upgrade Sites' in file install-network.php.Found a translation function that is missing a text-domain. Function _e, with the arguments 'btn' in file settings-addons.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Apply' in file admin-field-groups.php.Found a translation function that is missing a text-domain. Function _e, with the arguments 'Bulk Actions' in file admin-field-groups.php.Found a translation function that is missing a text-domain. Function esc_attr__, with the arguments in file shortcodes.php.Found a translation function that is missing a text-domain. Function __, with the arguments "Your site’s most recent Portfolio Posts." in file royal-portfolio.php.Found a translation function that is missing a text-domain. Function esc_attr__, with the arguments in file functions.php.More than one text-domain is being used in this theme. This means the theme will not be compatible with WordPress.org language packs. The domains found are kayn-pro, kayn, acf, min, wordpress-importer.
Plugin territory : Plugin territory functionalitiesThe theme uses the register_post_type() function, which is plugin-territory functionality.The theme uses the add_shortcode() function. Custom post-content shortcodes are plugin-territory functionality.
Line endings consistency : Both DOS and UNIX style line endingsFound a mix of \r\n and \n line endings in file functions.php.
Editor style : Presence of editor styleNo reference to add_editor_style() was found in the theme. It is recommended that the theme implements editor styling, so as to make the editor content match the resulting post output in the theme, for a better user experience.
I18N implementation : Proper use of _e(Possible variable $atts found in translation function in class-acf-field-gallery.php. Translation function calls should not contain PHP variables. Possible variable $div found in translation function in class-acf-field-flexible-content.php. Translation function calls should not contain PHP variables. Possible variable $atts found in translation function in class-acf-field-flexible-content.php. Translation function calls should not contain PHP variables. Possible variable $atts found in translation function in class-acf-field-clone.php. Translation function calls should not contain PHP variables. Possible variable $div found in translation function in class-acf-field-repeater.php. Translation function calls should not contain PHP variables. Possible variable $atts found in translation function in api-input.php. Translation function calls should not contain PHP variables. Possible variable $atts found in translation function in api-input.php. Translation function calls should not contain PHP variables. Possible variable $atts found in translation function in api-input.php. Translation function calls should not contain PHP variables. Possible variable $wrapper found in translation function in api-field.php. Translation function calls should not contain PHP variables. Possible variable $args found in translation function in form-front.php. Translation function calls should not contain PHP variables. Possible variable $div found in translation function in class-acf-field-taxonomy.php. Translation function calls should not contain PHP variables. Possible variable $div found in translation function in class-acf-field-time_picker.php. Translation function calls should not contain PHP variables. Possible variable $atts found in translation function in class-acf-field-tab.php. Translation function calls should not contain PHP variables. Possible variable $wrap found in translation function in class-acf-field-wysiwyg.php. Translation function calls should not contain PHP variables. Possible variable $div found in translation function in class-acf-field-file.php. Translation function calls should not contain PHP variables. Possible variable $atts found in translation function in class-acf-field-accordion.php. Translation function calls should not contain PHP variables. Possible variable $atts found in translation function in class-acf-field-google-map.php. Translation function calls should not contain PHP variables. Possible variable $div found in translation function in class-acf-field-link.php. Translation function calls should not contain PHP variables. Possible variable $div found in translation function in class-acf-field-date_picker.php. Translation function calls should not contain PHP variables. Possible variable $atts found in translation function in class-acf-field-relationship.php. Translation function calls should not contain PHP variables. Possible variable $atts found in translation function in class-acf-field-group.php. Translation function calls should not contain PHP variables. Possible variable $div found in translation function in class-acf-field-image.php. Translation function calls should not contain PHP variables. Possible variable $atts found in translation function in class-acf-field-oembed.php. Translation function calls should not contain PHP variables. Possible variable $div found in translation function in class-acf-field-date_time_picker.php. Translation function calls should not contain PHP variables. Possible variable $addon found in translation function in settings-addons.php. Translation function calls should not contain PHP variables.
I18N implementation : Proper use of ___all(Possible variable $string found in translation function in api-helpers.php. Translation function calls should not contain PHP variables. Possible variable $post_pagination found in translation function in shortcodes.php. Translation function calls should not contain PHP variables. Possible variable $post_pagination found in translation function in functions.php. Translation function calls should not contain PHP variables.
I18N implementation : Proper use of _x(Possible variable $text found in translation function in l10n.php. Translation function calls should not contain PHP variables.
I18N implementation : Proper use of esc_attr___all(Possible variable $post_pagination found in translation function in shortcodes.php. Translation function calls should not contain PHP variables. Possible variable $post_pagination found in translation function in functions.php. Translation function calls should not contain PHP variables.
I18N implementation : Proper use of esc_attr_e(Possible variable $atts found in translation function in class-acf-field-gallery.php. Translation function calls should not contain PHP variables. Possible variable $div found in translation function in class-acf-field-flexible-content.php. Translation function calls should not contain PHP variables. Possible variable $atts found in translation function in class-acf-field-flexible-content.php. Translation function calls should not contain PHP variables. Possible variable $atts found in translation function in class-acf-field-clone.php. Translation function calls should not contain PHP variables. Possible variable $div found in translation function in class-acf-field-repeater.php. Translation function calls should not contain PHP variables. Possible variable $atts found in translation function in api-input.php. Translation function calls should not contain PHP variables. Possible variable $wrapper found in translation function in api-field.php. Translation function calls should not contain PHP variables. Possible variable $args found in translation function in form-front.php. Translation function calls should not contain PHP variables. Possible variable $div found in translation function in class-acf-field-taxonomy.php. Translation function calls should not contain PHP variables. Possible variable $div found in translation function in class-acf-field-time_picker.php. Translation function calls should not contain PHP variables. Possible variable $atts found in translation function in class-acf-field-tab.php. Translation function calls should not contain PHP variables. Possible variable $wrap found in translation function in class-acf-field-wysiwyg.php. Translation function calls should not contain PHP variables. Possible variable $div found in translation function in class-acf-field-file.php. Translation function calls should not contain PHP variables. Possible variable $atts found in translation function in class-acf-field-accordion.php. Translation function calls should not contain PHP variables. Possible variable $atts found in translation function in class-acf-field-google-map.php. Translation function calls should not contain PHP variables. Possible variable $div found in translation function in class-acf-field-link.php. Translation function calls should not contain PHP variables. Possible variable $div found in translation function in class-acf-field-date_picker.php. Translation function calls should not contain PHP variables. Possible variable $atts found in translation function in class-acf-field-relationship.php. Translation function calls should not contain PHP variables. Possible variable $atts found in translation function in class-acf-field-group.php. Translation function calls should not contain PHP variables. Possible variable $div found in translation function in class-acf-field-image.php. Translation function calls should not contain PHP variables. Possible variable $atts found in translation function in class-acf-field-oembed.php. Translation function calls should not contain PHP variables. Possible variable $div found in translation function in class-acf-field-date_time_picker.php. Translation function calls should not contain PHP variables.
Date and time implementation : Use of date_i18n()At least one hard coded date was found in the file class-acf-field-date_picker.php. Function get_option( 'date_format' ) should be used instead.
Screenshot : Screenshot fileBad screenshot file extension ! File screenshot.png is not an actual JPG file. Detected type was : "image/png".

Tip-off

Static links : Presence of hard-coded linksPossible hard-coded links were found in the file class-freemius.php.20415: sprintf($this->get_text_inline( 'Due to the new %sEU General Data Protection Regulation (GDPR)%s compliance requirements it is required that you provide your explicit consent, again, confirming that you are onboard 🙂', 'due-to-gdpr-compliance-requirements' ), '<a href='https://eugdpr.org/' target='_blank' rel='noopener noreferrer'>', '</a>') .Possible hard-coded links were found in the file functions.php.182: echo '<em>If you are having Trouble getting a License Key, please <a href='https://wp-royal.com/contact/?ref=kayn-pro-backend-theme-license/' target='
Optional files : Presence of rtl stylesheet rtl.cssThis theme does not contain optional file rtl.php.
Optional files : Presence of front page template file front-page.phpThis theme does not contain optional file front-page.php.
Optional files : Presence of home template file home.phpThis theme does not contain optional file home.php.
Optional files : Presence of category template file category.phpThis theme does not contain optional file category.php.
Optional files : Presence of tag template file tag.phpThis theme does not contain optional file tag.php.
Optional files : Presence of term template file taxonomy.phpThis theme does not contain optional file taxonomy.php.
Optional files : Presence of author template file author.phpThis theme does not contain optional file author.php.
Optional files : Presence of date/time template file date.phpThis theme does not contain optional file date.php.
Optional files : Presence of archive template file archive.phpThis theme does not contain optional file archive.php.
Optional files : Presence of search results template file search.phpThis theme does not contain optional file search.php.
Optional files : Presence of attachment template file attachment.phpThis theme does not contain optional file attachment.php.
Optional files : Presence of image template file image.phpThis theme does not contain optional file image.php.
Use of includes : Use of include or requireThe theme appears to use include or require : acf.php 110: include_once( ACF_PATH . 'includes/api/api-helpers.php'); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : api-helpers.php 254: include_once( $path );444: include( $path );628: * @param $include (array)3206: //require_once( ABSPATH . '/wp-load.php' ); // WP should already be loaded3207: require_once( ABSPATH . '/wp-admin/includes/media.php' ); // video function3208: require_once( ABSPATH . '/wp-admin/includes/file.php' );3209: require_once( ABSPATH . '/wp-admin/includes/image.php' );4562: include_once( ABSPATH . 'wp-admin/includes/plugin.php' ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.

Other checked themes

WordPress 6.7 theme

VIEW ALL THEMES