0
Validation results

The7

The7

WordPress 6.7 theme
0
This theme seems to be proprietary. Themecheck doesn't distribute commercial themes.
Critical alerts
  1. Security breaches : Use of base64_decode() Found base64_decode in file default-button.php. 80: $attributes['icon'] = wp_kses( rawurldecode( base64_decode( $attributes['icon'] ) ), array( 'i' => array( 'class' => arrFound base64_decode in file button.php. 105: $attributes['icon'] = wp_kses( rawurldecode( base64_decode( $attributes['icon'] ) ), array( 'i' => array( 'class' => arrFound base64_decode in file options-framework.php. 707: $import_options = @unserialize( @base64_decode( $input['import_export'] ) );
  2. Security breaches : Use of base64_encode() Found base64_encode in file options-interface.php. 
     $val = base64_encode( serialize( $settings ) );
  3. Presence of iframes : iframes are sometimes used to load unwanted adverts and malicious code on another site Found <iframe src="//www.facebook.com/plugins/like.php?href=' . $url . '&amp;layout=' . $type . '&amp;show_faces=false&amp;action=like&amp;colorscheme=light" scrolling="no" frameborder="0" allowTransparency="true"> in file vc_facebook.php. Found <iframe src="' . esc_url( $src ) . '" frameborder="0" marginwidth="0" marginheight="0" scrolling="no" width="500" height="' . $height . '"> in file map.php. 82: $output = '<div class='' . esc_attr( $classes ) . '' style='' . esc_attr( $style ) . ''><iframe src='' . esc_url( $src ) . '' frameborder='0' marginwidth='0' margi
  4. Malware : Operations on file system file_get_contents was found in the file lessc.inc.php 121: $root = $parser->parse(file_get_contents($realPath));1851: $out = $this->compile(file_get_contents($fname), $fname);fwrite was found in the file lessc.inc.php 708: // fwrite(STDERR,'failed to find block: '.implode(' > ', $path).'\n');file_get_contents was found in the file lessc.inc.php 121: $root = $parser->parse(file_get_contents($realPath));1851: $out = $this->compile(file_get_contents($fname), $fname);file_put_contents was found in the file lessc.inc.php 1856: return file_put_contents($outFname, $out);file_get_contents was found in the file class-the7-demo-content-import-manager.php 507: $this->site_meta = json_decode( file_get_contents( $this->content_dir . 'site-meta.json' ), true );file_get_contents was found in the file parsers.php 66: $success = $dom->loadXML( file_get_contents( $file ) );296: if ( ! xml_parse( $xml, file_get_contents( $file ), true ) ) {file_get_contents was found in the file parsers.php 66: $success = $dom->loadXML( file_get_contents( $file ) );296: if ( ! xml_parse( $xml, file_get_contents( $file ), true ) ) {fopen was found in the file parsers.php 442: $fp = $this->fopen( $file, 'r' );668: function fopen( $filename, $mode = 'r' ) {671: return fopen( $filename, $mode );fclose was found in the file parsers.php 491: $this->fclose($fp);686: function fclose( $fp ) {689: return fclose( $fp );fopen was found in the file parsers.php 442: $fp = $this->fopen( $file, 'r' );668: function fopen( $filename, $mode = 'r' ) {671: return fopen( $filename, $mode );fopen was found in the file parsers.php 442: $fp = $this->fopen( $file, 'r' );668: function fopen( $filename, $mode = 'r' ) {671: return fopen( $filename, $mode );fclose was found in the file parsers.php 491: $this->fclose($fp);686: function fclose( $fp ) {689: return fclose( $fp );fclose was found in the file parsers.php 491: $this->fclose($fp);686: function fclose( $fp ) {689: return fclose( $fp );
  5. Admin menu : Themes should use add_theme_page() for adding admin pages. File options-framework.php : 270: $main_page_id = add_menu_page(File options-framework.php : 287: $sub_page_id = add_submenu_page(File class-tgm-plugin-activation.php : 724: $this->page_hook = add_plugins_page( $args['page_title'], $args['menu_title'], $args['capabiliFile class-the7-dev-admin-page.php : 12: add_action( 'admin_menu', array( __CLASS__, 'add_menu_page' ) );18: public static function add_menu_page() {21: $page_slug = add_menu_page(File class-the7-dev-admin-page.php : 12: add_action( 'admin_menu', array( __CLASS__, 'add_menu_page' ) );18: public static function add_menu_page() {21: $page_slug = add_menu_page(File class-the7-demo-content-admin.php : 249: * @use add_management_pageFile class-the7-admin-dashboard.php : 38: add_action( 'admin_menu', array( $this, 'add_menu_page' ) );45: public function add_menu_page() {49: $the7_page = add_menu_page(File class-the7-admin-dashboard.php : 38: add_action( 'admin_menu', array( $this, 'add_menu_page' ) );45: public function add_menu_page() {49: $the7_page = add_menu_page(File class-the7-admin-dashboard.php : 67: $hook_suffix = add_submenu_page(
  6. Deprecated functions : screen_icon screen_icon found in file wordpress-importer.php. Deprecated since version 3.8.1126: screen_icon();
Warning
  1. theme tags : Presence of bad theme tagsFound wrong tag multipurpose in style.css header.Found wrong tag responsive in style.css header.Found wrong tag retina ready in style.css header.Found wrong tag SEO ready in style.css header.Found wrong tag mobile friendly in style.css header.Found wrong tag iOS in style.css header.Found wrong tag material design in style.css header.Found wrong tag clean in style.css header.Found wrong tag minimal in style.css header.Found wrong tag business in style.css header.Found wrong tag corporate in style.css header.Found wrong tag creative in style.css header.Found wrong tag one page site in style.css header.Found wrong tag micro site in style.css header.
  2. Text domain : Incorrect use of translation functions.Wrong installation directory for the theme name. The directory name must match the slug of the theme. This theme's correct slug and text-domain is the7.
  3. Text domain : Incorrect use of translation functions.Found a translation function that is missing a text-domain. Function __, with the arguments "Social Icon Item" in file js_composer_bridge.php.Found a translation function that has an incorrect number of arguments. Function _x, with the arguments '', ' ', vc inline dummy, 'the7mk2' in file single-soc-icon.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Remove Image' in file Tax-meta-class.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Upload Image' in file Tax-meta-class.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'the7mk2' in file class-the7-demo-content-import-manager.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Browser width based' in file mod-wc-options.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Post width based' in file mod-wc-options.php.Found a translation function that has an incorrect number of arguments. Function __, with the arguments 'Number of columns', theme-options, 'the7mk2' in file mod-wc-options.php.Found a translation function that has an incorrect number of arguments. Function __, with the arguments 'Column minimum width', theme-options, 'the7mk2' in file mod-wc-options.php.Found a translation function that has an incorrect number of arguments. Function __, with the arguments 'Desired columns number', theme-options, 'the7mk2' in file mod-wc-options.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'the7mk2' in file posts-defaults.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Solid' in file options-page-titles.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Dotted' in file options-page-titles.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Dashed' in file options-page-titles.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Double' in file options-page-titles.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Solid' in file options-page-titles.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Dotted' in file options-page-titles.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Dashed' in file options-page-titles.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Double' in file options-page-titles.php.More than one text-domain is being used in this theme. This means the theme will not be compatible with WordPress.org language packs. The domains found are the7mk2, woocommerce, vc inline dummy, js_composer, rwmb, tax-meta, tgmpa, wordpress-importer, theme-options, the7mk3.
  4. Plugin territory : Plugin territory functionalitiesThe theme uses the register_taxonomy() function, which is plugin-territory functionality.The theme uses the add_shortcode() function. Custom post-content shortcodes are plugin-territory functionality.
  5. Hidden admin bar : Hidden admin Bar in CSSThemes should not hide admin bar. Detected in file admin-stylesheet.css.
  6. Custom elements : Presence of custom headerNo reference to custom header was found in the theme.
  7. Custom elements : Presence of custom backgroundNo reference to custom background was found in the theme.
  8. Deprecated functions : screen_iconscreen_icon found in file wordpress-importer.php. Deprecated since version 3.8.1126: screen_icon();
  9. I18N implementation : Proper use of _e(Possible variable $str found in translation function in lessc.inc.php. Translation function calls should not contain PHP variables. Possible variable $arg found in translation function in lessc.inc.php. Translation function calls should not contain PHP variables. Possible variable $items found in translation function in lessc.inc.php. Translation function calls should not contain PHP variables. Possible variable $string found in translation function in lessc.inc.php. Translation function calls should not contain PHP variables. Possible variable $val found in translation function in lessc.inc.php. Translation function calls should not contain PHP variables. Possible variable $newUnit found in translation function in lessc.inc.php. Translation function calls should not contain PHP variables. Possible variable $res found in translation function in lessc.inc.php. Translation function calls should not contain PHP variables. Possible variable $key found in translation function in lessc.inc.php. Translation function calls should not contain PHP variables. Possible variable $part found in translation function in lessc.inc.php. Translation function calls should not contain PHP variables. Possible variable $this found in translation function in lessc.inc.php. Translation function calls should not contain PHP variables.
  10. I18N implementation : Proper use of ___all(Possible variable $file_name found in translation function in class-the7-demo-content-import-manager.php. Translation function calls should not contain PHP variables. Possible variable $action found in translation function in posts-defaults.php. Translation function calls should not contain PHP variables.
  11. I18N implementation : Proper use of _x(Possible variable $title found in translation function in single-soc-icon.php. Translation function calls should not contain PHP variables. Possible variable $value found in translation function in options-sanitize.php. Translation function calls should not contain PHP variables. Possible variable $opts found in translation function in options-buttons.php. Translation function calls should not contain PHP variables.
  12. Featured image : Use of the_post_thumbnail() instead of custom fields for thumbnailsNo reference to the_post_thumbnail was found in the theme.
  13. Screenshot : Screenshot fileBad screenshot file extension ! File screenshot.png is not an actual JPG file. Detected type was : "image/png".
Tip-off
  1. favicon presence : Favicon managementPossible Favicon found in core-functions.php. Favicons are handled by the Site Icon setting in the customizer since version 4.3.
  2. Optional files : Presence of rtl stylesheet rtl.cssThis theme does not contain optional file rtl.php.
  3. Optional files : Presence of front page template file front-page.phpThis theme does not contain optional file front-page.php.
  4. Optional files : Presence of home template file home.phpThis theme does not contain optional file home.php.
  5. Optional files : Presence of category template file category.phpThis theme does not contain optional file category.php.
  6. Optional files : Presence of tag template file tag.phpThis theme does not contain optional file tag.php.
  7. Optional files : Presence of author template file author.phpThis theme does not contain optional file author.php.
  8. Optional files : Presence of attachment template file attachment.phpThis theme does not contain optional file attachment.php.
  9. Use of includes : Use of include or requireThe theme appears to use include or require : lessify.inc.php 13: If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : vc_row.php 11: include 'dt_vc_row.php'; If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : vc-extensions.php 767: include( $path . $font_data['include'] . '/' . $font_data['config'] ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : tax_to_term_meta.php 17: * require_once('Tax-meta-class/migration/tax_to_term_meta.php'); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : less-functions.php 17: require_once 'class-lessphp-functions.php'; If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : meta-box.php 15: require_once( PRESSCORE_EXTENSIONS_DIR . '/custom-meta-boxes/override-field21: require_once( RWMB_DIR . 'meta-box.php' );27: require_once( PRESSCORE_EXTENSIONS_DIR . '/custom-meta-boxes/metabox-fields If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : tgmpa.php 33: include_once 'class-tgm-plugin-activation.php';34: include_once 'class-the7-tgmpa.php';35: include_once 'class-the7-plugins-list-table.php'; If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : class-the7-demo-content.php 113: require_once 'class-the7-demo-content-loader.php';118: require_once 'interface-the7-demo-content-plugins-checker.php';119: require_once 'class-the7-demo-content-tgmpa.php';120: require_once 'class-the7-demo-content-import-manager.php';121: require_once 'class-the7-demo-content-remote-server-api.php';122: require_once 'class-the7-demo-content-phpstatus.php';123: require_once 'class-the7-demo-content-remote-content.php'; If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : class-the7-demo-content-import-manager.php 471: include_once 'class-the7-demo-content-revslider-importer.php';490: include_once 'class-the7-demo-content-vc-importer.php'; If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : class-the7-demo-content-admin.php 239: include 'partials/notices/status.php';266: include 'partials/demos.php'; If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : demos.php 53: include 'demos/theme-not-activated.php';55: include 'demos/import.php'; If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : class-compatibility-woocommerce.php 32: 33: 36: 37: 38: 39: 40: If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : mod-the7-compatibility.php 50: If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : theme-update.php 27: include_once( dirname( __FILE__ ) . '/class-the7-install.php' );264: include( dirname( __FILE__ ) . '/views/html-notice-registration.php' ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : class-the7-background-updater.php 13: include_once( dirname( __FILE__ ) . '/libraries/wp-async-request.php' );17: include_once( dirname( __FILE__ ) . '/libraries/wp-background-process.php' 84: include_once( dirname( __FILE__ ) . '/the7-update-functions.php' ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : class-the7-install.php 54: include_once( dirname( __FILE__ ) . '/class-the7-background-updater.php' );77: include( dirname( __FILE__ ) . '/views/html-notice-update.php' );81: include( dirname( __FILE__ ) . '/views/html-notice-updating.php' );85: include( dirname( __FILE__ ) . '/views/html-notice-updated.php' );166: require_once( $patches_dir . 'interface-the7-db-patch.php' ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : blog-categories.php 13: require_once 'widgets-posts-categories.class.php'; If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : custom-menu-2.php 13: require_once 'widgets-custom-menu.class.php'; If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : custom-menu-1.php 13: require_once 'widgets-custom-menu.class.php'; If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : admin-notices.php 10: include_once( PRESSCORE_EXTENSIONS_DIR . '/class-the7-admin-notices.php' ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : load-meta-boxes.php 10: require 'meta-boxes/taxonomy-meta-box.php'; If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
Other checked themes
76

WordPress 6.7 theme

36

WordPress 6.7 theme

95

WordPress 6.7 theme