0
Validation results

The7

The7

WordPress 6.7 theme
0
This theme seems to be proprietary. Themecheck doesn't distribute commercial themes.
Critical alerts
  1. Security breaches : Use of base64_decode() Found base64_decode in file button.php. 105: $attributes['icon'] = wp_kses( rawurldecode( base64_decode( $attributes['icon'] ) ), array( 'i' => array( 'class' => arrFound base64_decode in file text-with-icon.php. 151: $icon_html = wp_kses( rawurldecode( base64_decode( $this->atts['icon'] ) ), array( 'i' => array( 'class' => arrFound base64_decode in file default-button.php. 83: $icon_html = wp_kses( rawurldecode( base64_decode( $this->atts['icon'] ) ), array( 'i' => array( 'class' => arrFound base64_decode in file contact-form.php. 79: 'terms_msg' => rawurldecode( base64_decode( $terms_msg ) ),Found base64_decode in file options-framework.php. 952: $import_options = @unserialize( @base64_decode( $input['import_export'] ) );
  2. Security breaches : Use of base64_encode() Found base64_encode in file the7-contact-form-bridge.php. 
     'value' => base64_encode( rawurlencode( wp_kses_post( _x( 'By using this form you agre
    Found base64_encode in file class-the7-option-field-import-export-options.php. 
     $val = base64_encode( serialize( $this->settings ) );
  3. Presence of iframes : iframes are sometimes used to load unwanted adverts and malicious code on another site Found <iframe src="https://www.facebook.com/plugins/like.php?href=' . esc_url( $url ) . '&amp;layout=' . esc_attr( $type ) . '&amp;show_faces=false&amp;action=like&amp;colorscheme=light" scrolling="no" frameborder="0" allowTransparency="true"> in file vc_facebook.php. Found <iframe src="' . esc_url( $src ) . '" frameborder="0" marginwidth="0" marginheight="0" scrolling="no" width="500" height="' . $height . '"> in file map.php. 78: $output = '<div class='' . esc_attr( $classes ) . '' style='' . esc_attr( $style ) . ''><iframe src='' . esc_url( $src ) . '' frameborder='0' marginwidth='0' margiFound <iframe id="the7-customizer-preview" src="%s" frameborder="0"> in file options-framework.php. 566: '<iframe id='the7-customizer-preview' src='%s' frameborder='0'></iframe>',
  4. Malware : Operations on file system file_get_contents was found in the file class-the7-demo-content-import-manager.php 697: $this->site_meta = json_decode( file_get_contents( $this->content_dir . 'site-meta.json' ), true );file_get_contents was found in the file parsers.php 73: $success = $dom->loadXML( file_get_contents( $file ) );305: if ( ! xml_parse( $xml, file_get_contents( $file ), true ) ) {file_get_contents was found in the file parsers.php 73: $success = $dom->loadXML( file_get_contents( $file ) );305: if ( ! xml_parse( $xml, file_get_contents( $file ), true ) ) {fopen was found in the file parsers.php 452: $fp = $this->fopen( $file, 'r' );679: function fopen( $filename, $mode = 'r' ) {682: return fopen( $filename, $mode );fclose was found in the file parsers.php 501: $this->fclose($fp);697: function fclose( $fp ) {700: return fclose( $fp );fopen was found in the file parsers.php 452: $fp = $this->fopen( $file, 'r' );679: function fopen( $filename, $mode = 'r' ) {682: return fopen( $filename, $mode );fopen was found in the file parsers.php 452: $fp = $this->fopen( $file, 'r' );679: function fopen( $filename, $mode = 'r' ) {682: return fopen( $filename, $mode );fclose was found in the file parsers.php 501: $this->fclose($fp);697: function fclose( $fp ) {700: return fclose( $fp );fclose was found in the file parsers.php 501: $this->fclose($fp);697: function fclose( $fp ) {700: return fclose( $fp );file_get_contents was found in the file the7_lessc.inc.php 124: $root = $parser->parse(file_get_contents($realPath));1856: $out = $this->compile(file_get_contents($fname), $fname);fwrite was found in the file the7_lessc.inc.php 711: // fwrite(STDERR,'failed to find block: '.implode(' > ', $path).'\n');file_get_contents was found in the file the7_lessc.inc.php 124: $root = $parser->parse(file_get_contents($realPath));1856: $out = $this->compile(file_get_contents($fname), $fname);file_put_contents was found in the file the7_lessc.inc.php 1861: return file_put_contents($outFname, $out);
  5. Admin menu : Themes should use add_theme_page() for adding admin pages. File class-the7-dev-admin-page.php : 12: add_action( 'admin_menu', array( __CLASS__, 'add_menu_page' ) );18: public static function add_menu_page() {21: $page_slug = add_menu_page(File class-the7-dev-admin-page.php : 12: add_action( 'admin_menu', array( __CLASS__, 'add_menu_page' ) );18: public static function add_menu_page() {21: $page_slug = add_menu_page(File class-the7-demo-content-admin.php : 340: * @use add_management_pageFile class-the7-tgm-plugin-activation.php : 724: $this->page_hook = add_plugins_page( $args['page_title'], $args['menu_title'], $args['capabiliFile class-the7-admin-dashboard.php : 53: add_action( 'admin_menu', array( $this, 'add_menu_page' ) );69: public function add_menu_page() {73: $the7_page = add_menu_page( $dashboard['title'], __( 'The7', 'the7mk2' ), $dashboard['caFile class-the7-admin-dashboard.php : 53: add_action( 'admin_menu', array( $this, 'add_menu_page' ) );69: public function add_menu_page() {73: $the7_page = add_menu_page( $dashboard['title'], __( 'The7', 'the7mk2' ), $dashboard['caFile class-the7-admin-dashboard.php : 93: $hook_suffix = add_submenu_page( $page['dashboard_slug'], $page['title'], $page['title'], File class-the7-icon-manager.php : 38: $hook_suffix = add_submenu_page(File core-functions.php : 1264: function the7_add_submenu_page_after( $parent_slug, $page_title, $menu_title, $capability1265: $hook = add_submenu_page( $parent_slug, $page_title, $menu_title, $capability, $menFile options-framework.php : 333: $main_page_id = add_menu_page(File options-framework.php : 349: $sub_page_id = add_submenu_page(
  6. Hidden admin bar : Hidden admin Bar Themes should not hide admin bar. Detected in file : class-the7-options-preview.php.
  7. Included plugins : Zip file found Plugins are not allowed in themes. The zip file found was digital-agency.zip law.zip photo.zip coming-soon-01.zip modern-business.zip event-agency.zip minimal-creative.zip product.zip weed.zip news.zip dev-studio.zip landing.zip creative.zip dance.zip restaurant.zip one-page.zip coffee.zip main.zip medical.zip conference.zip digital-artist.zip expedition.zip dental.zip business-one-page.zip corporate.zip psy.zip cv.zip construction.zip hosting.zip shop.zip software-company.zip hotel.zip g-business.zip coming-soon-02.zip marketing-agency.zip church.zip beauty-studio.zip small-store.zip web-master.zip g-creative.zip personal-creative.zip app.zip agency.zip ecommerce-book.zip business.zip revslider.zip dt-the7-core.zip go_pricing.zip convertplug.zip ultimate_vc_addons.zip js_composer.zip layerslider.zip.
Warning
  1. theme tags : Presence of bad theme tagsFound wrong tag multipurpose in style.css header.Found wrong tag responsive in style.css header.Found wrong tag retina ready in style.css header.Found wrong tag SEO ready in style.css header.Found wrong tag mobile friendly in style.css header.Found wrong tag iOS in style.css header.Found wrong tag material design in style.css header.Found wrong tag clean in style.css header.Found wrong tag minimal in style.css header.Found wrong tag business in style.css header.Found wrong tag corporate in style.css header.Found wrong tag creative in style.css header.Found wrong tag one page site in style.css header.Found wrong tag micro site in style.css header.
  2. Text domain : Incorrect use of translation functions.Wrong installation directory for the theme name. The directory name must match the slug of the theme. This theme's correct slug and text-domain is the7.
  3. Text domain : Incorrect use of translation functions.Found a translation function that is missing a text-domain. Function _x, with the arguments 'Layout 1', 'dt-the7-core' in file the7-text-with-icon-bridge.php.Found a translation function that is missing a text-domain. Function _x, with the arguments 'Layout 2', 'dt-the7-core' in file the7-text-with-icon-bridge.php.Found a translation function that is missing a text-domain. Function _x, with the arguments 'Layout 3', 'dt-the7-core' in file the7-text-with-icon-bridge.php.Found a translation function that is missing a text-domain. Function _x, with the arguments 'Layout 4', 'dt-the7-core' in file the7-text-with-icon-bridge.php.Found a translation function that is missing a text-domain. Function _x, with the arguments 'Layout 5', 'dt-the7-core' in file the7-text-with-icon-bridge.php.Found a translation function that is missing a text-domain. Function __, with the arguments "Icon" in file the7-icon-bridge.php.Found a translation function that is missing a text-domain. Function __, with the arguments "Social Icon Item" in file the7-social-icon-bridge.php.Found a translation function that has an incorrect number of arguments. Function _x, with the arguments '', ' ', vc inline dummy, 'the7mk2' in file single-soc-icon.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'the7mk2' in file class-the7-demo-content-import-manager.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'the7mk2' in file class-the7-demo-content-import-manager.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'the7mk2' in file posts-defaults.php.Found a translation function that has an incorrect number of arguments. Function __, with the arguments 'Hey, we\'ve noticed that you do not have "silence bundled plugins purchase notifications" options enabled. If they are bothering you, <a href="%s">click here to enable it</a>. You can always change this setting under The7 > My The7, in the "Bundled Plugins" box.', admin, 'the7mk2' in file admin-functions.php.Found a translation function that is missing a text-domain. Function _e, with the arguments 'The7 BETA tester:' in file the7-status.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Function is deprecated, use %s instead.' in file deprecated-functions.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Function is deprecated, use %s instead.' in file deprecated-functions.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Function is deprecated, do not use.' in file deprecated-functions.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Function is deprecated, do not use.' in file deprecated-functions.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Function is deprecated, use %s instead.' in file deprecated-functions.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Remove Image' in file Tax-meta-class.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Upload Image' in file Tax-meta-class.php.More than one text-domain is being used in this theme. This means the theme will not be compatible with WordPress.org language packs. The domains found are the7mk2, woocommerce, dt-the7-core, js_composer, vc inline dummy, wordpress-importer, tgmpa, admin, categories, ,, tax-meta.
  4. Plugin territory : Plugin territory functionalitiesThe theme uses the register_taxonomy() function, which is plugin-territory functionality.The theme uses the add_shortcode() function. Custom post-content shortcodes are plugin-territory functionality.
  5. Hidden admin bar : Hidden admin Bar in CSSThemes should not hide admin bar. Detected in file admin-bar.min.css.
  6. Custom elements : Presence of custom headerNo reference to custom header was found in the theme.
  7. Custom elements : Presence of custom backgroundNo reference to custom background was found in the theme.
  8. I18N implementation : Proper use of _e(Possible variable $str found in translation function in the7_lessc.inc.php. Translation function calls should not contain PHP variables. Possible variable $arg found in translation function in the7_lessc.inc.php. Translation function calls should not contain PHP variables. Possible variable $items found in translation function in the7_lessc.inc.php. Translation function calls should not contain PHP variables. Possible variable $string found in translation function in the7_lessc.inc.php. Translation function calls should not contain PHP variables. Possible variable $val found in translation function in the7_lessc.inc.php. Translation function calls should not contain PHP variables. Possible variable $newUnit found in translation function in the7_lessc.inc.php. Translation function calls should not contain PHP variables. Possible variable $res found in translation function in the7_lessc.inc.php. Translation function calls should not contain PHP variables. Possible variable $key found in translation function in the7_lessc.inc.php. Translation function calls should not contain PHP variables. Possible variable $part found in translation function in the7_lessc.inc.php. Translation function calls should not contain PHP variables. Possible variable $this found in translation function in the7_lessc.inc.php. Translation function calls should not contain PHP variables.
  9. I18N implementation : Proper use of ___all(Possible variable $file_name found in translation function in class-the7-demo-content-import-manager.php. Translation function calls should not contain PHP variables. Possible variable $file_name found in translation function in class-the7-demo-content-import-manager.php. Translation function calls should not contain PHP variables. Possible variable $action found in translation function in posts-defaults.php. Translation function calls should not contain PHP variables.
  10. I18N implementation : Proper use of _x(Possible variable $title found in translation function in single-soc-icon.php. Translation function calls should not contain PHP variables. Possible variable $value found in translation function in options-sanitize.php. Translation function calls should not contain PHP variables.
  11. Featured image : Use of the_post_thumbnail() instead of custom fields for thumbnailsNo reference to the_post_thumbnail was found in the theme.
Tip-off
  1. favicon presence : Favicon managementPossible Favicon found in deprecated-functions.php. Favicons are handled by the Site Icon setting in the customizer since version 4.3.Possible Favicon found in html-helpers.php. Favicons are handled by the Site Icon setting in the customizer since version 4.3.
  2. Optional files : Presence of rtl stylesheet rtl.cssThis theme does not contain optional file rtl.php.
  3. Optional files : Presence of front page template file front-page.phpThis theme does not contain optional file front-page.php.
  4. Optional files : Presence of home template file home.phpThis theme does not contain optional file home.php.
  5. Optional files : Presence of category template file category.phpThis theme does not contain optional file category.php.
  6. Optional files : Presence of tag template file tag.phpThis theme does not contain optional file tag.php.
  7. Optional files : Presence of author template file author.phpThis theme does not contain optional file author.php.
  8. Optional files : Presence of attachment template file attachment.phpThis theme does not contain optional file attachment.php.
  9. Use of includes : Use of include or requireThe theme appears to use include or require : vc-extensions.php 840: include( $path . $font_data['include'] . '/' . $font_data['config'] ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : custom-menu-1.php 13: require_once 'widgets-custom-menu.class.php'; If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : custom-menu-2.php 13: require_once 'widgets-custom-menu.class.php'; If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : blog-categories.php 13: require_once 'widgets-posts-categories.class.php'; If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : class-the7-woocommerce-compatibility.php 17: 18: 21: 22: 23: 24: 25: If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : mod-the7-compatibility.php 50: If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : class-the7-install.php 176: include_once( dirname( __FILE__ ) . '/class-the7-background-updater.php' );177: include_once( dirname( __FILE__ ) . '/the7-update-functions.php' );216: include( dirname( __FILE__ ) . '/views/html-notice-update.php' );220: include( dirname( __FILE__ ) . '/views/html-notice-updating.php' );224: include( dirname( __FILE__ ) . '/views/html-notice-updated.php' );325: require_once( $patches_dir . 'interface-the7-db-patch.php' ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : class-the7-background-updater.php 13: include_once( dirname( __FILE__ ) . '/libraries/wp-async-request.php' );17: include_once( dirname( __FILE__ ) . '/libraries/wp-background-process.php' If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : the7-update-utility-functions.php 153: include( PRESSCORE_SHORTCODES_INCLUDES_DIR . '/class-the7-shortcode-id-crut157: include( PRESSCORE_DIR . '/vendor/lessphp/the7_lessc.inc.php' ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : the7-update-functions.php 199: include( PRESSCORE_SHORTCODES_INCLUDES_DIR . '/class-the7-shortcode-id-crut If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : theme-update.php 268: include( dirname( __FILE__ ) . '/views/html-notice-registration.php' ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : class-the7-demo-content-admin.php 352: include 'partials/demos.php'; If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : class-the7-demo-content.php 113: require_once 'class-the7-demo-content-loader.php';118: require_once 'interface-the7-demo-content-plugins-checker.php';119: require_once 'class-the7-demo-content-tgmpa.php';120: require_once 'class-the7-demo-content-import-manager.php';121: require_once 'class-the7-demo-content-remote-server-api.php';122: require_once 'class-the7-demo-content-phpstatus.php';123: require_once 'class-the7-demo-content-remote-content.php'; If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : class-the7-demo-content-import-manager.php 679: include_once 'class-the7-demo-content-vc-importer.php'; If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : load-meta-boxes.php 10: require 'meta-boxes/taxonomy-meta-box.php'; If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : meta-box.php 15: require_once( PRESSCORE_EXTENSIONS_DIR . '/custom-meta-boxes/override-field21: require_once( THE7_RWMB_DIR . 'meta-box.php' );27: require_once( PRESSCORE_EXTENSIONS_DIR . '/custom-meta-boxes/metabox-fields If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
Other checked themes
78

WordPress 6.7 theme

97

WordPress 6.7 theme

17

WordPress 6.7 theme