0
Validation results

Marketo

Marketo

WordPress 6.7 theme
0
This theme seems to be proprietary. Themecheck doesn't distribute commercial themes.
Critical alerts
  1. Security breaches : Use of base64_decode() Found base64_decode in file OAuth.php. 202: $decoded_sig = base64_decode($signature);
  2. Security breaches : Use of base64_encode() Found base64_encode in file OAuth.php.
     return base64_encode(hash_hmac('sha1', $base_string, $key, true));
     return base64_encode($signature);
  3. Presence of iframes : iframes are sometimes used to load unwanted adverts and malicious code on another site Found <iframe id="elementskit-menu-builder-iframe" src="" frameborder="0"> in file options-menu-item.php. 175: <iframe id='elementskit-menu-builder-iframe' src='' frameborder='0'></ifram
  4. Malware : Operations on file system file_get_contents was found in the file tweet.php 37: echo file_get_contents($cache_path . $cache_key);file_put_contents was found in the file tweet.php 92: if(CACHE_ENABLED) file_put_contents($cache_path . $cache_key, $tweets);file_get_contents was found in the file OAuth.php 272: file_get_contents(self::$POST_INPUT)
  5. Malware : Network operations curl_init was found in the file twitteroauth.php 195: $ci = curl_init();curl_exec was found in the file twitteroauth.php 221: $response = curl_exec($ci);
Warning
  1. Text domain : Incorrect use of translation functions.Found a translation function that has an incorrect number of arguments. Function esc_html__, with the arguments 'Copyrights By Xpeedstudio - ', , 'marketo' in file footer-settings.php.Found a translation function that is missing a text-domain. Function __, with the arguments in file xs-post-class.php.Found a translation function that is missing a text-domain. Function __, with the arguments in file xs-post-class.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Add New ' in file xs-post-class.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Edit ' in file xs-post-class.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'New ' in file xs-post-class.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'View ' in file xs-post-class.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Search ' in file xs-post-class.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Parent ' in file xs-post-class.php.Found a translation function that is missing a text-domain. Function __, with the arguments in file xs-post-class.php.Found a translation function that is missing a text-domain. Function __, with the arguments in file xs-post-class.php.Found a translation function that is missing a text-domain. Function __, with the arguments in file xs-post-class.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Add New ' in file xs-post-class.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Edit ' in file xs-post-class.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Update ' in file xs-post-class.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Add or remove ' in file xs-post-class.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Search ' in file xs-post-class.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Popular ' in file xs-post-class.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'All ' in file xs-post-class.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Parent ' in file xs-post-class.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Choose from the most used ' in file xs-post-class.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Parent ' in file xs-post-class.php.Found a translation function that is missing a text-domain. Function __, with the arguments in file xs-post-class.php.Found a translation function that is missing a text-domain. Function esc_html_e, with the arguments 'Megamenu enabled' in file options-menu-item.php.Found a translation function that is missing a text-domain. Function esc_html_e, with the arguments 'Megamenu disabled' in file options-menu-item.php.Found a translation function that is missing a text-domain. Function esc_html_e, with the arguments 'Edit megamenu content' in file options-menu-item.php.Found a translation function that is missing a text-domain. Function esc_html_e, with the arguments 'Use mobile submenu as:' in file options-menu-item.php.Found a translation function that is missing a text-domain. Function esc_html_e, with the arguments 'builder content' in file options-menu-item.php.Found a translation function that is missing a text-domain. Function esc_html_e, with the arguments 'wp submenu list' in file options-menu-item.php.More than one text-domain is being used in this theme. This means the theme will not be compatible with WordPress.org language packs. The domains found are marketo, woocommerce, tgmpa, Y, , found, found in trash, Name, elementskit, ekit-megamenu.
  2. Plugin territory : Plugin territory functionalitiesThe theme uses the register_post_type() function, which is plugin-territory functionality.
  3. Custom elements : Presence of custom headerNo reference to custom header was found in the theme.
  4. Custom elements : Presence of custom backgroundNo reference to custom background was found in the theme.
  5. Editor style : Presence of editor styleNo reference to add_editor_style() was found in the theme. It is recommended that the theme implements editor styling, so as to make the editor content match the resulting post output in the theme, for a better user experience.
  6. I18N implementation : Proper use of ___all(Possible variable $plural_label found in translation function in xs-post-class.php. Translation function calls should not contain PHP variables. Possible variable $singular_label found in translation function in xs-post-class.php. Translation function calls should not contain PHP variables. Possible variable $singular_label found in translation function in xs-post-class.php. Translation function calls should not contain PHP variables. Possible variable $singular_label found in translation function in xs-post-class.php. Translation function calls should not contain PHP variables. Possible variable $singular_label found in translation function in xs-post-class.php. Translation function calls should not contain PHP variables. Possible variable $singular_label found in translation function in xs-post-class.php. Translation function calls should not contain PHP variables. Possible variable $plural_label found in translation function in xs-post-class.php. Translation function calls should not contain PHP variables. Possible variable $plural_label found in translation function in xs-post-class.php. Translation function calls should not contain PHP variables. Possible variable $plural_label found in translation function in xs-post-class.php. Translation function calls should not contain PHP variables. Possible variable $singular_label found in translation function in xs-post-class.php. Translation function calls should not contain PHP variables. Possible variable $plural_label found in translation function in xs-post-class.php. Translation function calls should not contain PHP variables. Possible variable $plural_label found in translation function in xs-post-class.php. Translation function calls should not contain PHP variables. Possible variable $singular_label found in translation function in xs-post-class.php. Translation function calls should not contain PHP variables. Possible variable $singular_label found in translation function in xs-post-class.php. Translation function calls should not contain PHP variables. Possible variable $singular_label found in translation function in xs-post-class.php. Translation function calls should not contain PHP variables. Possible variable $singular_label found in translation function in xs-post-class.php. Translation function calls should not contain PHP variables. Possible variable $singular_label found in translation function in xs-post-class.php. Translation function calls should not contain PHP variables. Possible variable $plural_label found in translation function in xs-post-class.php. Translation function calls should not contain PHP variables. Possible variable $plural_label found in translation function in xs-post-class.php. Translation function calls should not contain PHP variables. Possible variable $plural_label found in translation function in xs-post-class.php. Translation function calls should not contain PHP variables. Possible variable $plural_label found in translation function in xs-post-class.php. Translation function calls should not contain PHP variables. Possible variable $singular_label found in translation function in xs-post-class.php. Translation function calls should not contain PHP variables. Possible variable $plural_label found in translation function in xs-post-class.php. Translation function calls should not contain PHP variables. Possible variable $singular_label found in translation function in xs-post-class.php. Translation function calls should not contain PHP variables. Possible variable $singular_label found in translation function in xs-post-class.php. Translation function calls should not contain PHP variables.
  7. Date and time implementation : Use of the_time()At least one hard coded date was found in the file helpers.php. Function get_option( 'date_format' ) should be used instead.
  8. Screenshot : Screenshot fileBad screenshot file extension ! File screenshot.png is not an actual JPG file. Detected type was : "image/png".
Tip-off
  1. Static links : Presence of hard-coded linksPossible hard-coded links were found in the file xs-subscribe.php.52: 'description' => 'Check this how to find <a href='https://support.xpeedstudio.com/knowledgebase/how-to-get-a-mailchimp-form-aPossible hard-coded links were found in the file tweet.php.7: echo 'You need a consumer key and secret keys. Get one from <a href='https://apps.twitter.com/'>apps.twitter.com</a>';
  2. Optional files : Presence of rtl stylesheet rtl.cssThis theme does not contain optional file rtl.php.
  3. Optional files : Presence of front page template file front-page.phpThis theme does not contain optional file front-page.php.
  4. Optional files : Presence of home template file home.phpThis theme does not contain optional file home.php.
  5. Optional files : Presence of category template file category.phpThis theme does not contain optional file category.php.
  6. Optional files : Presence of tag template file tag.phpThis theme does not contain optional file tag.php.
  7. Optional files : Presence of term template file taxonomy.phpThis theme does not contain optional file taxonomy.php.
  8. Optional files : Presence of author template file author.phpThis theme does not contain optional file author.php.
  9. Optional files : Presence of date/time template file date.phpThis theme does not contain optional file date.php.
  10. Optional files : Presence of attachment template file attachment.phpThis theme does not contain optional file attachment.php.
  11. Optional files : Presence of image template file image.phpThis theme does not contain optional file image.php.
  12. Use of includes : Use of include or requireThe theme appears to use include or require : theme-demos.php 182: require_once( ABSPATH . 'wp-load.php' );183: require_once( ABSPATH . 'wp-includes/functions.php' );184: require_once( ABSPATH . 'wp-admin/includes/file.php' ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : xs-assistance.php 74: require_once (plugin_dir_path($this->file). 'post-type/xs-post-class.php');80: require_once (plugin_dir_path($this->file). 'init.php');81: require_once (plugin_dir_path( $this->file ) . '/elements/init.php');82: require_once (plugin_dir_path($this->file). 'modules/init.php'); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : init.php 13: // include 'custom-css/init.php';33: require_once('sticky-content/init.php');34: require_once('vertical-menu/vertical-menu.php'); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : init.php 30: require_once($this->dir . 'extend-controls.php'); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : tweet.php 2: require_once('twitteroauth/twitteroauth.php'); // Path to twitteroauth libr3: require_once('config.php'); // Path to config file If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : twitteroauth.php 10: require_once('OAuth.php'); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : options.php 71: return require_once(\ElementsKit::module_dir() . 'controls/icon-list.php');80: require_once('views/options-menu-item.php');93: require_once('views/options-megamenu.php'); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : init.php 35: require_once($this->dir . 'api.php');36: require_once($this->dir . 'walker-nav-menu.php'); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
Other checked themes