0
Validation results

The7

The7

WordPress 6.7 theme
0
This theme seems to be proprietary. Themecheck doesn't distribute commercial themes.
Critical alerts
  1. Security breaches : Use of base64_decode() Found base64_decode in file text-with-icon.php. 140: $icon_html = wp_kses( rawurldecode( base64_decode( $this->atts['icon'] ) ), array( 'i' => array( 'class' => arrFound base64_decode in file default-button.php. 71: $icon_html = wp_kses( rawurldecode( base64_decode( $this->atts['icon'] ) ), array( 'i' => array( 'class' => arrFound base64_decode in file button.php. 105: $attributes['icon'] = wp_kses( rawurldecode( base64_decode( $attributes['icon'] ) ), array( 'i' => array( 'class' => arrFound base64_decode in file contact-form.php. 79: 'terms_msg' => rawurldecode( base64_decode( $terms_msg ) ),Found base64_decode in file options-framework.php. 952: $import_options = @unserialize( @base64_decode( $input['import_export'] ) );
  2. Security breaches : Use of base64_encode() Found base64_encode in file the7-contact-form-bridge.php. 
     'value' => base64_encode( rawurlencode( wp_kses_post( _x( 'By using this form you agre
    Found base64_encode in file class-the7-option-field-import-export-options.php. 
     $val = base64_encode( serialize( $this->settings ) );
  3. Presence of iframes : iframes are sometimes used to load unwanted adverts and malicious code on another site Found <iframe src="https://www.facebook.com/plugins/like.php?href=' . esc_url( $url ) . '&amp;layout=' . esc_attr( $type ) . '&amp;show_faces=false&amp;action=like&amp;colorscheme=light" scrolling="no" frameborder="0" allowTransparency="true"> in file vc_facebook.php. Found <iframe src="' . esc_url( $src ) . '" frameborder="0" marginwidth="0" marginheight="0" scrolling="no" width="500" height="' . $height . '"> in file map.php. 78: $output = '<div class='' . esc_attr( $classes ) . '' style='' . esc_attr( $style ) . ''><iframe src='' . esc_url( $src ) . '' frameborder='0' marginwidth='0' margiFound <iframe id="the7-customizer-preview" src="%s" frameborder="0"> in file options-framework.php. 566: '<iframe id='the7-customizer-preview' src='%s' frameborder='0'></iframe>',
  4. Malware : Operations on file system file_get_contents was found in the file the7_lessc.inc.php 124: $root = $parser->parse(file_get_contents($realPath));1856: $out = $this->compile(file_get_contents($fname), $fname);fwrite was found in the file the7_lessc.inc.php 711: // fwrite(STDERR,'failed to find block: '.implode(' > ', $path).'\n');file_get_contents was found in the file the7_lessc.inc.php 124: $root = $parser->parse(file_get_contents($realPath));1856: $out = $this->compile(file_get_contents($fname), $fname);file_put_contents was found in the file the7_lessc.inc.php 1861: return file_put_contents($outFname, $out);file_get_contents was found in the file class-the7-demo-content-import-manager.php 697: $this->site_meta = json_decode( file_get_contents( $this->content_dir . 'site-meta.json' ), true );file_get_contents was found in the file parsers.php 73: $success = $dom->loadXML( file_get_contents( $file ) );305: if ( ! xml_parse( $xml, file_get_contents( $file ), true ) ) {file_get_contents was found in the file parsers.php 73: $success = $dom->loadXML( file_get_contents( $file ) );305: if ( ! xml_parse( $xml, file_get_contents( $file ), true ) ) {fopen was found in the file parsers.php 452: $fp = $this->fopen( $file, 'r' );679: function fopen( $filename, $mode = 'r' ) {682: return fopen( $filename, $mode );fclose was found in the file parsers.php 501: $this->fclose($fp);697: function fclose( $fp ) {700: return fclose( $fp );fopen was found in the file parsers.php 452: $fp = $this->fopen( $file, 'r' );679: function fopen( $filename, $mode = 'r' ) {682: return fopen( $filename, $mode );fopen was found in the file parsers.php 452: $fp = $this->fopen( $file, 'r' );679: function fopen( $filename, $mode = 'r' ) {682: return fopen( $filename, $mode );fclose was found in the file parsers.php 501: $this->fclose($fp);697: function fclose( $fp ) {700: return fclose( $fp );fclose was found in the file parsers.php 501: $this->fclose($fp);697: function fclose( $fp ) {700: return fclose( $fp );
  5. Admin menu : Themes should use add_theme_page() for adding admin pages. File class-the7-icon-manager.php : 38: $hook_suffix = add_submenu_page(File core-functions.php : 1255: function the7_add_submenu_page_after( $parent_slug, $page_title, $menu_title, $capability1256: $hook = add_submenu_page( $parent_slug, $page_title, $menu_title, $capability, $menFile options-framework.php : 333: $main_page_id = add_menu_page(File options-framework.php : 349: $sub_page_id = add_submenu_page(File class-the7-tgm-plugin-activation.php : 724: $this->page_hook = add_plugins_page( $args['page_title'], $args['menu_title'], $args['capabiliFile class-the7-dev-admin-page.php : 12: add_action( 'admin_menu', array( __CLASS__, 'add_menu_page' ) );18: public static function add_menu_page() {21: $page_slug = add_menu_page(File class-the7-dev-admin-page.php : 12: add_action( 'admin_menu', array( __CLASS__, 'add_menu_page' ) );18: public static function add_menu_page() {21: $page_slug = add_menu_page(File class-the7-demo-content-admin.php : 340: * @use add_management_pageFile class-the7-admin-dashboard.php : 51: add_action( 'admin_menu', array( $this, 'add_menu_page' ) );67: public function add_menu_page() {71: $the7_page = add_menu_page( $dashboard['title'], __( 'The7', 'the7mk2' ), $dashboard['caFile class-the7-admin-dashboard.php : 51: add_action( 'admin_menu', array( $this, 'add_menu_page' ) );67: public function add_menu_page() {71: $the7_page = add_menu_page( $dashboard['title'], __( 'The7', 'the7mk2' ), $dashboard['caFile class-the7-admin-dashboard.php : 90: $hook_suffix = add_submenu_page( $page['dashboard_slug'], $page['title'], $page['title'],
  6. Hidden admin bar : Hidden admin Bar Themes should not hide admin bar. Detected in file : class-the7-options-preview.php.
  7. Included plugins : Zip file found Plugins are not allowed in themes. The zip file found was small-store.zip agency.zip law.zip business-one-page.zip app.zip hotel.zip nutritionist.zip dance.zip church.zip ecommerce-book.zip coffee.zip photo.zip product.zip main.zip personal-creative.zip weed.zip beauty-studio.zip yoga.zip minimal-creative.zip g-creative.zip software-company.zip marketing-agency.zip restaurant.zip shop.zip web-master.zip psy.zip one-page.zip creative.zip modern-business.zip construction.zip dental.zip wedding.zip medical.zip digital-agency.zip hosting.zip business.zip cv.zip dev-studio.zip news.zip coming-soon-02.zip corporate.zip coming-soon-01.zip landing.zip digital-artist.zip expedition.zip conference.zip g-business.zip event-agency.zip go_pricing.zip ultimate_vc_addons.zip dt-the7-core.zip revslider.zip js_composer.zip convertplug.zip.
Warning
  1. theme tags : Presence of bad theme tagsFound wrong tag multipurpose in style.css header.Found wrong tag responsive in style.css header.Found wrong tag retina ready in style.css header.Found wrong tag SEO ready in style.css header.Found wrong tag mobile friendly in style.css header.Found wrong tag iOS in style.css header.Found wrong tag material design in style.css header.Found wrong tag clean in style.css header.Found wrong tag minimal in style.css header.Found wrong tag business in style.css header.Found wrong tag corporate in style.css header.Found wrong tag creative in style.css header.Found wrong tag one page site in style.css header.Found wrong tag micro site in style.css header.
  2. Text domain : Incorrect use of translation functions.Wrong installation directory for the theme name. The directory name must match the slug of the theme. This theme's correct slug and text-domain is the7.
  3. Text domain : Incorrect use of translation functions.Found a translation function that is missing a text-domain. Function __, with the arguments 'Remove Image' in file Tax-meta-class.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Upload Image' in file Tax-meta-class.php.Found a translation function that is missing a text-domain. Function _x, with the arguments 'Layout 1', 'dt-the7-core' in file the7-text-with-icon-bridge.php.Found a translation function that is missing a text-domain. Function _x, with the arguments 'Layout 2', 'dt-the7-core' in file the7-text-with-icon-bridge.php.Found a translation function that is missing a text-domain. Function _x, with the arguments 'Layout 3', 'dt-the7-core' in file the7-text-with-icon-bridge.php.Found a translation function that is missing a text-domain. Function _x, with the arguments 'Layout 4', 'dt-the7-core' in file the7-text-with-icon-bridge.php.Found a translation function that is missing a text-domain. Function _x, with the arguments 'Layout 5', 'dt-the7-core' in file the7-text-with-icon-bridge.php.Found a translation function that is missing a text-domain. Function __, with the arguments "Social Icon Item" in file the7-social-icon-bridge.php.Found a translation function that is missing a text-domain. Function __, with the arguments "Icon" in file the7-icon-bridge.php.Found a translation function that has an incorrect number of arguments. Function _x, with the arguments '', ' ', vc inline dummy, 'the7mk2' in file single-soc-icon.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'the7mk2' in file class-the7-demo-content-import-manager.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'the7mk2' in file class-the7-demo-content-import-manager.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'the7mk2' in file posts-defaults.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Function is deprecated, use %s instead.' in file deprecated-functions.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Function is deprecated, use %s instead.' in file deprecated-functions.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Function is deprecated, do not use.' in file deprecated-functions.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Function is deprecated, do not use.' in file deprecated-functions.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Function is deprecated, use %s instead.' in file deprecated-functions.php.Found a translation function that is missing a text-domain. Function _e, with the arguments 'The7 BETA tester:' in file the7-status.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Solid' in file options-page-titles.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Dotted' in file options-page-titles.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Dashed' in file options-page-titles.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Double' in file options-page-titles.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Solid' in file options-page-titles.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Dotted' in file options-page-titles.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Dashed' in file options-page-titles.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Double' in file options-page-titles.php.More than one text-domain is being used in this theme. This means the theme will not be compatible with WordPress.org language packs. The domains found are the7mk2, woocommerce, categories, ,, dt-the7-core, tax-meta, vc inline dummy, js_composer, tgmpa, wordpress-importer.
  4. Plugin territory : Plugin territory functionalitiesThe theme uses the register_taxonomy() function, which is plugin-territory functionality.The theme uses the add_shortcode() function. Custom post-content shortcodes are plugin-territory functionality.
  5. Hidden admin bar : Hidden admin Bar in CSSThemes should not hide admin bar. Detected in file admin-bar.min.css.
  6. Custom elements : Presence of custom headerNo reference to custom header was found in the theme.
  7. Custom elements : Presence of custom backgroundNo reference to custom background was found in the theme.
  8. I18N implementation : Proper use of _e(Possible variable $str found in translation function in the7_lessc.inc.php. Translation function calls should not contain PHP variables. Possible variable $arg found in translation function in the7_lessc.inc.php. Translation function calls should not contain PHP variables. Possible variable $items found in translation function in the7_lessc.inc.php. Translation function calls should not contain PHP variables. Possible variable $string found in translation function in the7_lessc.inc.php. Translation function calls should not contain PHP variables. Possible variable $val found in translation function in the7_lessc.inc.php. Translation function calls should not contain PHP variables. Possible variable $newUnit found in translation function in the7_lessc.inc.php. Translation function calls should not contain PHP variables. Possible variable $res found in translation function in the7_lessc.inc.php. Translation function calls should not contain PHP variables. Possible variable $key found in translation function in the7_lessc.inc.php. Translation function calls should not contain PHP variables. Possible variable $part found in translation function in the7_lessc.inc.php. Translation function calls should not contain PHP variables. Possible variable $this found in translation function in the7_lessc.inc.php. Translation function calls should not contain PHP variables.
  9. I18N implementation : Proper use of ___all(Possible variable $file_name found in translation function in class-the7-demo-content-import-manager.php. Translation function calls should not contain PHP variables. Possible variable $file_name found in translation function in class-the7-demo-content-import-manager.php. Translation function calls should not contain PHP variables. Possible variable $action found in translation function in posts-defaults.php. Translation function calls should not contain PHP variables.
  10. I18N implementation : Proper use of _x(Possible variable $title found in translation function in single-soc-icon.php. Translation function calls should not contain PHP variables. Possible variable $value found in translation function in options-sanitize.php. Translation function calls should not contain PHP variables.
  11. Featured image : Use of the_post_thumbnail() instead of custom fields for thumbnailsNo reference to the_post_thumbnail was found in the theme.
Tip-off
  1. favicon presence : Favicon managementPossible Favicon found in html-helpers.php. Favicons are handled by the Site Icon setting in the customizer since version 4.3.Possible Favicon found in deprecated-functions.php. Favicons are handled by the Site Icon setting in the customizer since version 4.3.
  2. Static links : Presence of hard-coded linksPossible hard-coded links were found in the file bottom-bar.php.42: echo '&nbsp;Dream-Theme &mdash; truly <a href='http://dream-theme.com' target='_blank'>premium WordPress themes</a>';Possible hard-coded links were found in the file the7-text-with-icon-bridge.php.368: 'description' => 'f.e. <code>&lt;i class='fa fa-arrow-circle-right'&gt;&lt;/i&gt;</code> <a href='http://fontawesome.io/icons/' target='_blank'>http://fontawesome.io/icons/<Possible hard-coded links were found in the file the7-default-button-bridge.php.317: 'description' => 'f.e. <code>&lt;i class='fa fa-arrow-circle-right'&gt;&lt;/i&gt;</code> <a href='http://fontawesome.io/icons/' target='_blank'>http://fontawesome.io/icons/<Possible hard-coded links were found in the file options-framework.php.1038: $error = _x( 'Theme options cannot be saved. Not enough memory available. Please try to increase <a href='http://support.dream-theme.com/knowledgebase/allowed-memory-size-error/' tiPossible hard-coded links were found in the file status.php.54: <a href='http://support.dream-theme.com/knowledgebase/allowed-memory-size-error/' taPossible hard-coded links were found in the file html-notice-soft-warning.php.4: <p><strong>Hey!</strong> We have noticed that you were using this purchase code on <?php echo $domains_count ?> website addresses. Please don't forget that according to <a href='https://themeforest.net/licenses/standard' target='_blank'>Envato Standard Possible hard-coded links were found in the file html-notice-registration.php.14: <p><?php printf( __( 'Also be advised that according to %1$sThemeForest Standard Licenses%2$s each site/project built with The7 requires a separate license, which can be purchased %3$shere%4$s.', 'the7mk2' ), '<a href='https://themeforest.net/licenses/standard' target='_blank'>', '</a>', '<a hPossible hard-coded links were found in the file the7-dashboard.php.30: printf( __( 'If you don’t have a license yet, you can purchase it %1$shere%2$s.', 'the7mk2' ), '<a href='https://themeforest.net/item/the7-responsive-multipurpose-wordpress-theme/572: <li><a href='http://guide.the7.io/start/' target='_blank' class='the7-dashboard-icons-ro72: <li><a href='http://guide.the7.io/start/' target='_blank' class='the7-dashboard-icons-ro73: <li><a href='http://guide.the7.io/' target='_blank' class='the7-dashboard-icons-graduati74: <li><a href='http://support.dream-theme.com' target='_blank' class='the7-dashboard-iconsPossible hard-coded links were found in the file theme-registration-form.php.24: $link = '<a href='https://themeforest.net/licenses/standard' target='_blank'>' . _x( 'LicensePossible hard-coded links were found in the file options-contact-form.php.163: 'desc' => sprintf( _x( 'Enter valid API keys below to enable Google ReCaptcha v2 (checkbox) on all The7 contact forms (widgets and shortcodes). %s.', 'theme-options', 'the7mk2' ), '<a href='https://developers.google.com/recaptcha/intro' target='_blank'>' . _x( 'Doc
  3. Optional files : Presence of rtl stylesheet rtl.cssThis theme does not contain optional file rtl.php.
  4. Optional files : Presence of front page template file front-page.phpThis theme does not contain optional file front-page.php.
  5. Optional files : Presence of home template file home.phpThis theme does not contain optional file home.php.
  6. Optional files : Presence of category template file category.phpThis theme does not contain optional file category.php.
  7. Optional files : Presence of tag template file tag.phpThis theme does not contain optional file tag.php.
  8. Optional files : Presence of author template file author.phpThis theme does not contain optional file author.php.
  9. Optional files : Presence of attachment template file attachment.phpThis theme does not contain optional file attachment.php.
  10. Use of includes : Use of include or requireThe theme appears to use include or require : vc-extensions.php 840: include( $path . $font_data['include'] . '/' . $font_data['config'] ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : meta-box.php 15: require_once( PRESSCORE_EXTENSIONS_DIR . '/custom-meta-boxes/override-field21: require_once( THE7_RWMB_DIR . 'meta-box.php' );27: require_once( PRESSCORE_EXTENSIONS_DIR . '/custom-meta-boxes/metabox-fields If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : class-the7-demo-content.php 113: require_once 'class-the7-demo-content-loader.php';118: require_once 'interface-the7-demo-content-plugins-checker.php';119: require_once 'class-the7-demo-content-tgmpa.php';120: require_once 'class-the7-demo-content-import-manager.php';121: require_once 'class-the7-demo-content-remote-server-api.php';122: require_once 'class-the7-demo-content-phpstatus.php';123: require_once 'class-the7-demo-content-remote-content.php'; If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : class-the7-demo-content-import-manager.php 679: include_once 'class-the7-demo-content-vc-importer.php'; If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : class-the7-demo-content-admin.php 352: include 'partials/demos.php'; If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : class-compatibility-woocommerce.php 26: 27: 30: 31: 32: 33: 34: If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : mod-the7-compatibility.php 50: If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : theme-update.php 268: include( dirname( __FILE__ ) . '/views/html-notice-registration.php' ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : the7-update-utility-functions.php 153: include( PRESSCORE_SHORTCODES_INCLUDES_DIR . '/class-the7-shortcode-id-crut157: include( PRESSCORE_DIR . '/vendor/lessphp/the7_lessc.inc.php' ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : the7-update-functions.php 199: include( PRESSCORE_SHORTCODES_INCLUDES_DIR . '/class-the7-shortcode-id-crut If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : class-the7-background-updater.php 13: include_once( dirname( __FILE__ ) . '/libraries/wp-async-request.php' );17: include_once( dirname( __FILE__ ) . '/libraries/wp-background-process.php' If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : class-the7-install.php 172: include_once( dirname( __FILE__ ) . '/class-the7-background-updater.php' );173: include_once( dirname( __FILE__ ) . '/the7-update-functions.php' );212: include( dirname( __FILE__ ) . '/views/html-notice-update.php' );216: include( dirname( __FILE__ ) . '/views/html-notice-updating.php' );220: include( dirname( __FILE__ ) . '/views/html-notice-updated.php' );321: require_once( $patches_dir . 'interface-the7-db-patch.php' ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : blog-categories.php 13: require_once 'widgets-posts-categories.class.php'; If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : custom-menu-2.php 13: require_once 'widgets-custom-menu.class.php'; If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : custom-menu-1.php 13: require_once 'widgets-custom-menu.class.php'; If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : load-meta-boxes.php 10: require 'meta-boxes/taxonomy-meta-box.php'; If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
Other checked themes
99

WordPress 6.7 theme

56

WordPress 6.7 theme

97

WordPress 6.7 theme