0
Validation results

PenNews

PenNews

WordPress 6.7 theme
0
  • THEME TYPEWordPress theme 6.7
  • FILE NAMEpennews.zip
  • FILE SIZE7790038 bytes
  • MD5b3a46b0002c1ba64179a89a318e9a903
  • SHA1b290fc8f19cd05d24178633ee779f9d86c54e537
  • LICENSEGNU GPL 3
  • FILES INCLUDEDCSS, PHP, Bitmap images
  • THEME URIhttp://pennews.pencidesign.com/
  • VERSION6.6.8
  • AUTHOR URI
  • TAGStwo-columns, custom-menu, featured-images, post-formats, sticky-post, threaded-comments, translation-ready, editor-style
  • CREATION DATE2024-11-12
  • LAST FILE UPDATE2024-11-12
  • LAST VALIDATION2024-11-12 21:50
  • OTHER VERSIONS

    6.6.0 : 34%

    6.5.9 : 34%

    6.5.1 : 53%

    6.5 : 0%

This theme seems to be proprietary. Themecheck doesn't distribute commercial themes.
Critical alerts
  1. Security breaches : Use of base64_decode() Found base64_decode in file instagram.php. 57: $cleaned = $parts[0] . '.' . base64_decode( $parts[1] ) . '.' . base64_decode( $last_part );
  2. Presence of iframes : iframes are sometimes used to load unwanted adverts and malicious code on another site Found <iframe frameborder="0" width="100%" height="560" src="' . self::get_http() . '://www.dailymotion.com/embed/video/' . $dailymotion_video_id . '"> in file video-format.php. 214: $output .= '<iframe frameborder='0' width='100%' height='560' src='' . self::get_http()
  3. Malware : Operations on file system file_get_contents was found in the file video-format.php 258: if ( $vimeo_video_id && function_exists( 'penci_file_get_contents' ) ) {259: $hash = unserialize( file_get_contents( 'http://vimeo.com/api/v2/video/$vimeo_video_id.php' ) );
  4. Malware : Network operations curl_init was found in the file require-activation.php 314: $curl = curl_init( $url );curl_exec was found in the file require-activation.php 322: $envatoRes = curl_exec( $curl );
  5. Admin menu : Themes should use add_theme_page() for adding admin pages. File instagram.php : 6: add_action( 'admin_menu', [ $this, 'add_settings_page' ], 90 );11: public function add_settings_page() {File instagram.php : 12: add_submenu_page(File adsense.php : 6: add_action( 'admin_menu', array( $this, 'add_submenu_page' ), 15 );47: public function add_submenu_page() {48: add_submenu_page( 'pennews_dashboard_welcome',File adsense.php : 6: add_action( 'admin_menu', array( $this, 'add_submenu_page' ), 15 );47: public function add_submenu_page() {48: add_submenu_page( 'pennews_dashboard_welcome',File require-activation.php : 46: add_action( 'admin_menu', array( $this, 'add_submenu_page' ), 15 );77: function add_submenu_page() {79: add_submenu_page( 'pennews_dashboard_welcome',86: add_submenu_page( 'pennews_dashboard_welcome',99: add_submenu_page( 'pennews_dashboard_welcome',File require-activation.php : 46: add_action( 'admin_menu', array( $this, 'add_submenu_page' ), 15 );77: function add_submenu_page() {79: add_submenu_page( 'pennews_dashboard_welcome',86: add_submenu_page( 'pennews_dashboard_welcome',99: add_submenu_page( 'pennews_dashboard_welcome',File require-activation.php : 46: add_action( 'admin_menu', array( $this, 'add_submenu_page' ), 15 );77: function add_submenu_page() {79: add_submenu_page( 'pennews_dashboard_welcome',86: add_submenu_page( 'pennews_dashboard_welcome',99: add_submenu_page( 'pennews_dashboard_welcome',File require-activation.php : 46: add_action( 'admin_menu', array( $this, 'add_submenu_page' ), 15 );77: function add_submenu_page() {79: add_submenu_page( 'pennews_dashboard_welcome',86: add_submenu_page( 'pennews_dashboard_welcome',99: add_submenu_page( 'pennews_dashboard_welcome',File resizable-width.php : 8: add_action( 'admin_menu', array( $this, 'add_submenu_page' ), 15 );12: public function add_submenu_page() {13: add_submenu_page( 'pennews_dashboard_welcome',File resizable-width.php : 8: add_action( 'admin_menu', array( $this, 'add_submenu_page' ), 15 );12: public function add_submenu_page() {13: add_submenu_page( 'pennews_dashboard_welcome',File twitter.php : 6: add_action( 'admin_menu', [ $this, 'add_settings_page' ], 90 );11: public function add_settings_page() {File twitter.php : 12: add_submenu_page( 'pennews_dashboard_welcome', esc_html__( 'Connect TwitterFile class-penci-dashboard.php : 78: add_menu_page( $wel_page_title, $wel_page_title_html, 'manage_options', 'peFile class-penci-dashboard.php : 81: add_submenu_page( 'pennews_dashboard_welcome', esc_html__( 'System status',83: add_submenu_page( 'pennews_dashboard_welcome', esc_html__( 'Custom fonts', File class-penci-dashboard.php : 81: add_submenu_page( 'pennews_dashboard_welcome', esc_html__( 'System status',83: add_submenu_page( 'pennews_dashboard_welcome', esc_html__( 'Custom fonts', File class-tgm-plugin-activation.php : 741: $this->page_hook = call_user_func( 'add_submenu_page', $args['parent_slug'], $args['page_title'], $args['menu_t
Warning
  1. Text domain : Incorrect use of translation functions.Found a translation function that has an incorrect number of arguments. Function esc_html__, with the arguments 'Custom Size of h', on content posts and pages, 'pennews' in file 01-general.php.More than one text-domain is being used in this theme. This means the theme will not be compatible with WordPress.org language packs. The domains found are pennews, soledad, penci-framework, snorlax, tgmpa, on content posts and pages.
  2. Plugin territory : Plugin territory functionalitiesThe theme uses the add_shortcode() function. Custom post-content shortcodes are plugin-territory functionality.
  3. I18N implementation : Proper use of ___all(Possible variable $parent_version found in translation function in welcome.php. Translation function calls should not contain PHP variables. 24: echo '<span style='display: block; font-size: 22px; font-weight: 500; margin-top: 10px;'>' . esc_html__( sprintf( __( 'Inherit from %1$s Parent Theme - Version %2$s', 'pennews'Possible variable $theme_data found in translation function in welcome.php. Translation function calls should not contain PHP variables. Possible variable $i found in translation function in 01-general.php. Translation function calls should not contain PHP variables.
  4. I18N implementation : Proper use of esc_html___all(Possible variable $parent_version found in translation function in welcome.php. Translation function calls should not contain PHP variables. 24: echo '<span style='display: block; font-size: 22px; font-weight: 500; margin-top: 10px;'>' . esc_html__( sprintf( __( 'Inherit from %1$s Parent Theme - Version %2$s', 'Possible variable $theme_data found in translation function in welcome.php. Translation function calls should not contain PHP variables. Possible variable $i found in translation function in 01-general.php. Translation function calls should not contain PHP variables.
  5. Screenshot : Screenshot fileScreenshot size is 880x660px. Screenshot size should be 1200x900, to account for HiDPI displays. Any 4:3 image size is acceptable, but 1200x900 is preferred.Bad screenshot file extension ! File screenshot.png is not an actual PNG file. Detected type was : "image/jpeg".
Tip-off
  1. Static links : Presence of hard-coded linksPossible hard-coded links were found in the file require-activation.php.189: <?php _e( 'You can put your purchase code to the field below to activate the theme.<br>Check <a href='https://help.market.envato.com/hc/en-us/articles/202822600-Where-Is-My-Purc205: <a href='<?php echo esc_url( 'https://help.market.envato.com/hc/en-us/articles/202822600-Where-Is-My-PurcPossible hard-coded links were found in the file white-label.php.152: 'desc' => __( 'Fill the icon class you want to display here. Check list icons <a href='https://fontawesome.com/v4.7.0/icons/' target='_blank'>here</a>. Example fiPossible hard-coded links were found in the file 01-general.php.458: 'description' => 'Please go to <a href='https://smashballoon.com/custom-facebook-feed/access-token/' target='_blank468: 'description' => 'Please go to <a href='https://developers.google.com/youtube/v3/getting-started?hl=en' target='_bl
  2. Optional files : Presence of rtl stylesheet rtl.cssThis theme does not contain optional file rtl.php.
  3. Optional files : Presence of front page template file front-page.phpThis theme does not contain optional file front-page.php.
  4. Optional files : Presence of home template file home.phpThis theme does not contain optional file home.php.
  5. Optional files : Presence of term template file taxonomy.phpThis theme does not contain optional file taxonomy.php.
  6. Optional files : Presence of attachment template file attachment.phpThis theme does not contain optional file attachment.php.
  7. Optional files : Presence of image template file image.phpThis theme does not contain optional file image.php.
  8. Use of includes : Use of include or requireThe theme appears to use include or require : single-loadmore.php 369: require( $include );371: require( $template_path . $file );374: require( ABSPATH . WPINC . '/theme-compat/comments.php' ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
Other checked themes