37
Validation results

Uncode

Uncode

WordPress 6.7 theme
37
This theme seems to be proprietary. Themecheck doesn't distribute commercial themes.
Critical alerts
  1. Presence of iframes : iframes are sometimes used to load unwanted adverts and malicious code on another site Found <iframe width="100%" scrolling="no" frameborder="no" src="' . $iframe_url . '&color='.$accent_color.'&auto_play=false&hide_related=false&show_comments=true&show_user=true&show_reposts=false"> in file helpers.php. 700: $media_oembed = '<iframe width='100%' scrolling='no' frameborder='no' src='' . $iframe_url .Found <iframe width="100%" scrolling="no" frameborder="no" src="' . $iframe_url . '&color='.$accent_color.'&auto_play=false&hide_related=false&show_comments=true&show_user=true&show_reposts=false"> in file elements.php. 201: $content_html = '<iframe width='100%' scrolling='no' frameborder='no' src='' . $iframe_url .
  2. Admin menu : Themes should use add_theme_page() for adding admin pages. File class-tgm-plugin-activation.php : 731: $this->page_hook = add_submenu_page( $args['parent_slug'], $args['page_title'], $args['menu_tiFile init.php : 183: remove_action('admin_notices', array('RevSliderAdmin', 'add_plugins_page_notices'));File media-enhanced.php : 4: add_submenu_page( 'upload.php', esc_html__('Add oEmbed, external IMG, SVG cFile admin.php : 20: add_menu_page( 'UNCODE', UNCODE_NAME, 'edit_theme_options', 'uncode-system-File admin.php : 21: add_submenu_page( 'uncode-system-status', 'UNCODE', esc_html__('System Stat1091: add_submenu_page( 'tools.php', 'Export', 'Export', 'manage_options', 'uncod1646: add_submenu_page( 'uncode-system-status', 'UNCODE', esc_html__( 'Related Po1673: remove_action( 'vc_menu_page_build', 'vc_gitem_add_submenu_page' );File admin.php : 21: add_submenu_page( 'uncode-system-status', 'UNCODE', esc_html__('System Stat1091: add_submenu_page( 'tools.php', 'Export', 'Export', 'manage_options', 'uncod1646: add_submenu_page( 'uncode-system-status', 'UNCODE', esc_html__( 'Related Po1673: remove_action( 'vc_menu_page_build', 'vc_gitem_add_submenu_page' );File admin.php : 21: add_submenu_page( 'uncode-system-status', 'UNCODE', esc_html__('System Stat1091: add_submenu_page( 'tools.php', 'Export', 'Export', 'manage_options', 'uncod1646: add_submenu_page( 'uncode-system-status', 'UNCODE', esc_html__( 'Related Po1673: remove_action( 'vc_menu_page_build', 'vc_gitem_add_submenu_page' );File support.php : 30: add_submenu_page( 'uncode-system-status', esc_html__( 'Support', 'uncode' )
  3. Included plugins : Zip file found Plugins are not allowed in themes. The zip file found was uncode-core.zip uncode-js_composer.zip.
Warning
  1. theme tags : Presence of bad theme tagsFound wrong tag in style.css header.
  2. Text domain : Incorrect use of translation functions.More than one text-domain is being used in this theme. This means the theme will not be compatible with WordPress.org language packs. The domains found are uncode, woocommerce, tgmpa.
  3. Screenshot : Screenshot fileBad screenshot file extension ! File screenshot.png is not an actual JPG file. Detected type was : "image/png".
Tip-off
  1. Static links : Presence of hard-coded linksPossible hard-coded links were found in the file media-enhanced.php.304: <h2><?php esc_html_e('Add oEmbed, external IMG, SVG code, HTML or Shortcode','uncode'); ?> <a href='upload.php?page=add-other' class='add-new-h2'><?php esc_html_e('Add New','u382: <input name='save' type='submit' class='button button-primary button-large' id='publish' data-url='<?php echo get_site_url().'/wp-admin/upload.php?page=add-other'; ?>' value='<?php esc_html_e('Save','uncode'); ?386: <input name='save' type='submit' class='button button-primary button-large' id='publish' data-url='<?php echo get_site_url().'/wp-admin/upload.php?page=add-other&postid='.$_REQUEST['postid'].'&updated=1'; ?>' vaPossible hard-coded links were found in the file class-theme-registration.php.129: $message = __( 'According to the Envato License Terms, you have exceeded the maximum number of activations permitted for a single Purchase Code. Please purchase an additional license. <a href='https://support.undsgn.com/hc/en-us/articles/360000849998' target='_blank'>137: $message = __( 'There is a problem contacting the Undsgn server for the Purchase Code verification. Please disable any firewall service, deactivate any possible server authentication, verify you have an updated cURL module, verify if your host is blocking connections to external domains and make sure to whitelist 'api.undsgn.com'. Please consult <a href=\'https://support.undsgn.com/hc/en-us/articles/115004287985\' target=\'_blank\'>this page</a> and if the problem persists, <a href=\'https://support.undsgn.com/hc/en-us/articles/360000836318\' target=\'_blank154: $message = sprintf( __( 'There was an unexpected problem with your Purchase Code verification. <a href='https://support.undsgn.com/hc/en-us/articles/360000836318' target='_blank'>Possible hard-coded links were found in the file api-functions.php.207: return new WP_Error( 'uncode_premium_plugin_activation_error', wp_kses_post( __( '<span class='uncode-premium-plugin-activation-error'>The Envato Purchase Code seems to be invalid. Please try to unregister and register the product again. If the issue persists <a href='https://support.undsgn.com/hc/en-us/articles/360000836318' target='_blank'>210: return new WP_Error( 'uncode_premium_plugin_activation_error', sprintf( wp_kses_post( __( '<span class='uncode-premium-plugin-activation-error'>Purchase code verification failed. <a href='https://support.undsgn.com/hc/en-us/articles/360000836318' target='_blank'>207: return new WP_Error( 'uncode_premium_plugin_activation_error', wp_kses_post( __( '<span class='uncode-premium-plugin-activation-error'>The Envato Purchase Code seems to be invalid. Please try to unregister and register the product again. If the issue persists <a href='https://support.undsgn.com/hc/en-us/articles/360000836318' target='_blank'>210: return new WP_Error( 'uncode_premium_plugin_activation_error', sprintf( wp_kses_post( __( '<span class='uncode-premium-plugin-activation-error'>Purchase code verification failed. <a href='https://support.undsgn.com/hc/en-us/articles/360000836318' target='_blank'>
  2. Optional files : Presence of rtl stylesheet rtl.cssThis theme does not contain optional file rtl.php.
  3. Optional files : Presence of front page template file front-page.phpThis theme does not contain optional file front-page.php.
  4. Optional files : Presence of home template file home.phpThis theme does not contain optional file home.php.
  5. Optional files : Presence of category template file category.phpThis theme does not contain optional file category.php.
  6. Optional files : Presence of tag template file tag.phpThis theme does not contain optional file tag.php.
  7. Optional files : Presence of term template file taxonomy.phpThis theme does not contain optional file taxonomy.php.
  8. Optional files : Presence of author template file author.phpThis theme does not contain optional file author.php.
  9. Optional files : Presence of date/time template file date.phpThis theme does not contain optional file date.php.
  10. Optional files : Presence of attachment template file attachment.phpThis theme does not contain optional file attachment.php.
  11. Optional files : Presence of image template file image.phpThis theme does not contain optional file image.php.
  12. Use of includes : Use of include or requireThe theme appears to use include or require : admin.php 7: require_once 'admin-pages/uncode-panel-functions.php';10: require_once 'admin-pages/support.php';15: require_once 'admin-pages/welcome.php';829: require_once ('edit_custom_walker.php');974: require_once (ABSPATH . '/wp-admin/includes/file.php');1114: require_once( UNCODE_EXPORT_TEMPLATE );1116: require_once( 'export/uncode_export_template.php' ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : loader.php 10: require_once 'api-functions.php';13: require_once 'class-api-license.php';14: require_once 'class-theme-registration.php';15: require_once 'class-updater.php'; If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : class-updater.php 47: require_once( ABSPATH . 'wp-admin/includes/plugin.php' ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : welcome.php 158: require_once (ABSPATH . '/wp-admin/includes/file.php'); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : core-utilities.php 267: require(get_template_directory() . '/core/inc/style-custom.css.php'); // Ge284: require_once (ABSPATH . '/wp-admin/includes/file.php'); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
Other checked themes
38

WordPress 6.7 theme

37

WordPress 6.7 theme

15

WordPress 6.7 theme