0
Validation results

Woohoo | Shared By VestaThemes.com

Woohoo | Shared By VestaThemes.com

WordPress 6.5.2 theme
0
  • THEME TYPEWordPress theme 6.5.2
  • FILE NAMEwoohooSECOND.zip
  • FILE SIZE18691872 bytes
  • MD5605f2d53771d341eed9524e79830daeb
  • SHA1ee60b8e6212151fb468ab132a31d6efdee51e98f
  • LICENSECustom
  • FILES INCLUDEDCSS, PHP, HTML, XML, Bitmap images, Adobe Illustrator
  • VERSION2.3.1
  • TAGStwo-columns, buddypress, left-sidebar, right-sidebar, grid-layout, custom-menu, editor-style, featured-images, full-width-template, microformats, rtl-language-support, sticky-post, threaded-comments, translation-ready, blog, e-commerce, news
  • CREATION DATE2019-09-25
  • LAST FILE UPDATE2019-09-25
  • LAST VALIDATION2019-09-25 22:14
This theme seems to be proprietary. Themecheck doesn't distribute commercial themes.
Critical alerts
  1. Security breaches : Use of base64_decode() Found base64_decode in file fremework-demo-content.php. 516: $options = unserialize( @base64_decode( $file_contents ) );Found base64_decode in file framework-options.php. 2560: update_option('bdayh_setting', @base64_decode( $_POST['advanced_import'] ) );Found base64_decode in file OAuth.php. 203: $decoded_sig = base64_decode($signature);
  2. Security breaches : Use of base64_encode() Found base64_encode in file textarea.php.
     $text_code = @base64_encode( get_option( 'bdayh_setting' ) );
    Found base64_encode in file framework-options.php.
     echo @base64_encode( get_option( 'bdayh_setting' ) );
    Found base64_encode in file OAuth.php.
     return base64_encode(hash_hmac('sha1', $base_string, $key, true));
     return base64_encode($signature);
    Found base64_encode in file bdaia-widget-social-counter.php.
     $toSend 		= @base64_encode($credentials);
    Found base64_encode in file bdaia-widget-twittes.php.
     $toSend = @base64_encode($credentials);
  3. Presence of iframes : iframes are sometimes used to load unwanted adverts and malicious code on another site Found <iframe class="post-style10-iframe" width="100%" height="214" src="'.$protocol.'://www.youtube.com/embed/' . $woohoo_video_id . '?&wmode=opaque&autoplay=1" frameborder="0" allowfullscreen> in file single-style10.php. 82: if ( $woohoo_video_type == 'youtube' && $woohoo_video_id ) echo '<textarea class='embed-code' style='display: none'><iframe class='post-style10-iframe' width='100%' height='214' src=''.$protoFound <iframe width="600" height="560" src="'.$protocol.'://www.youtube.com/embed/'.$video_id.'?'.$auto_play.'feature=oembed&wmode=opaque&vq=hd720" frameborder="0" allowfullscreen> in file functions-theme.php. 2231: if ( $video_type == 'youtube' && $video_id ) echo '<iframe width='600' height='560' src=''.$protocol.'://www.youtube.com/embedFound <iframe width="100%" height="100%" src="https://www.youtube.com/embed/' . $video_id . '?&amp;enablejsapi=1" frameborder="0" allowfullscreen> in file bdaia-playlist.php. 77: if ( $video_type == 'youtube' && $video_id ) echo '<iframe width='100%' height='100%' src='https://www.youtube.com/embed/' . $Found <iframe src="<?php echo $protocol; ?> in file bdaia-widget-facebook.php. 26: <iframe src='<?php echo $protocol; ?>://www.facebook.com/plugins/likebox.ph
  4. Malware : Network operations curl_init was found in the file class.php 141: $curlObj = curl_init();curl_exec was found in the file class.php 164: $returnData = curl_exec( $curlObj );curl_init was found in the file framework-notifier.php 125: if( function_exists('curl_init') ) {127: $ch = @curl_init($notifier_file_url);curl_exec was found in the file framework-notifier.php 133: $cache = curl_exec($ch);curl_init was found in the file twitteroauth.php 200: $ci = @curl_init();curl_exec was found in the file twitteroauth.php 227: $response = @curl_exec($ci);
  5. Admin menu : Themes should use add_theme_page() for adding admin pages. File framework-options.php : 2710: add_menu_page( 'Woohoo', 'Woohoo', 'manage_options', 'bdaia_welcome', 'wooh
Warning
  1. core scripts deregistered : Core scripts deregistrationFound wp_deregister_script in functions-theme.php. Themes must not deregister core scripts. 783: wp_deregister_script( 'js-cookie' );786: //wp_deregister_script( 'bp-jquery-cookie' );
  2. Text domain : Incorrect use of translation functions.Wrong installation directory for the theme name. The directory name must match the slug of the theme. This theme's correct slug and text-domain is woohoo-shared-by-vestathemes-com.
  3. PHP short tags : Presence of PHP short tagsPHP short tags were found in file index.php. "This practice is discouraged because they are only available if enabled with short_open_tag php.ini configuration file directive, or if PHP was configured with the --enable-short-tags option" (php.net), which is not the case on many servers.17: <div style='border:1px solid #e91b23; width:100%;margin-left:2%;margin-top:1%;'> <? echo get_new_royalslider(1);
  4. Custom elements : Presence of custom headerNo reference to custom header was found in the theme.
  5. Custom elements : Presence of custom backgroundNo reference to custom background was found in the theme.
  6. Editor style : Presence of editor styleNo reference to add_editor_style() was found in the theme. It is recommended that the theme implements editor styling, so as to make the editor content match the resulting post output in the theme, for a better user experience.
  7. Screenshot : Screenshot fileBad screenshot file extension ! File screenshot.png is not an actual JPG file. Detected type was : "image/png".
Tip-off
  1. favicon presence : Favicon managementPossible Favicon found in functions-theme.php. Favicons are handled by the Site Icon setting in the customizer since version 4.3.
  2. Optional files : Presence of rtl stylesheet rtl.cssThis theme does not contain optional file rtl.php.
  3. Optional files : Presence of front page template file front-page.phpThis theme does not contain optional file front-page.php.
  4. Optional files : Presence of home template file home.phpThis theme does not contain optional file home.php.
  5. Optional files : Presence of term template file taxonomy.phpThis theme does not contain optional file taxonomy.php.
  6. Optional files : Presence of date/time template file date.phpThis theme does not contain optional file date.php.
  7. Optional files : Presence of attachment template file attachment.phpThis theme does not contain optional file attachment.php.
  8. Optional files : Presence of image template file image.phpThis theme does not contain optional file image.php.
  9. Use of includes : Use of include or requireThe theme appears to use include or require : foxpush.php 5: require_once ( get_template_directory() . '/foxpush/class.php' If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : functions-theme.php 4: require_once (get_template_directory().'/custom-functions.php' 5: require_once (get_template_directory().'/framework/admin/framework-mega.php6: require_once (get_template_directory().'/framework/admin/framework-category7: require_once (get_template_directory().'/framework/admin/framework-tgm.php'8: require_once (get_template_directory().'/framework/functions/functions-typo9: require_once (get_template_directory().'/framework/functions/functions-widg10: require_once (get_template_directory().'/framework/functions/functions-soci11: require_once (get_template_directory().'/framework/functions/functions-logi12: require_once (get_template_directory().'/framework/functions/functions-post13: require_once (get_template_directory().'/framework/functions/functions-brea14: require_once (get_template_directory().'/framework/functions/functions-rati15: require_once (get_template_directory().'/framework/functions/functions-view16: require_once (get_template_directory().'/framework/ajax/ralated/related-fun17: require_once (get_template_directory().'/framework/shorty/shorty.php' 18: require_once (get_template_directory().'/framework/functions/functions-medi19: require_once (get_template_directory().'/framework/global/bdaia-post-sharin23: require_once ( get_template_directory().'/framework/wp-admin/metaboxes/meta26: require_once ( get_template_directory().'/framework/builder-page/bdaia-buil181: require_once ( get_template_directory() . '/framework/admin/framework-notif285: include_once( ABSPATH . 'wp-admin/includes/plugin.php' );289: if( woohoo_get_option( 'bd_LiveSearch' ) ) require_once (get_template_directory().'/framework/global/search-ajax.php')297: require_once( get_template_directory() . '/framework/plugins/mailchimp-wp.p421: require_once (get_template_directory().'/framework/custom/css.php');448: require_once (get_template_directory().'/framework/custom/js.php');1194: require_once ( get_template_directory().'/framework/functions/functions-pag If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : functions-typo.php 4: require_once (get_template_directory().'/framework/admin/framework-gfonts.p If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : functions-widgets.php 4: include ( get_template_directory().'/includes/widgets/bdaia-widget-social-c5: include ( get_template_directory().'/includes/widgets/bdaia-widget-social-l6: include ( get_template_directory().'/includes/widgets/bdaia-widget-box1.php7: include ( get_template_directory().'/includes/widgets/bdaia-widget-box2.php8: include ( get_template_directory().'/includes/widgets/bdaia-widget-box3.php9: include ( get_template_directory().'/includes/widgets/bdaia-widget-box4.php10: include ( get_template_directory().'/includes/widgets/bdaia-widget-box5.php11: include ( get_template_directory().'/includes/widgets/bdaia-widget-box6.php12: include ( get_template_directory().'/includes/widgets/bdaia-widget-box7.php13: include ( get_template_directory().'/includes/widgets/bdaia-widget-box8.php14: include ( get_template_directory().'/includes/widgets/bdaia-widget-tabs.php15: include ( get_template_directory().'/includes/widgets/bdaia-widget-timeline16: include ( get_template_directory().'/includes/widgets/bdaia-widget-facebook17: include ( get_template_directory().'/includes/widgets/bdaia-widget-google.p18: include ( get_template_directory().'/includes/widgets/bdaia-widget-login.ph19: include ( get_template_directory().'/includes/widgets/bdaia-widget-twittes.20: include ( get_template_directory().'/includes/widgets/bdaia-widget-e3.php' 21: include ( get_template_directory().'/includes/widgets/bdaia-widget-comments22: include ( get_template_directory().'/includes/widgets/bdaia-widget-html.php If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : metaboxes-options.php 16: require_once( get_template_directory().'/framework/wp-admin/wpalchemy/MetaB If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : bdaia-builder.php 186: require_once ( get_template_directory().'/framework/builder-page/inc/pb-blo187: require_once ( get_template_directory().'/framework/builder-page/inc/pb-blo188: require_once ( get_template_directory().'/framework/builder-page/inc/pb-sli189: require_once ( get_template_directory().'/framework/builder-page/inc/pb-tex190: require_once ( get_template_directory().'/framework/builder-page/inc/pb-fp.191: require_once ( get_template_directory().'/framework/builder-page/inc/pb-pc.192: require_once ( get_template_directory().'/framework/builder-page/inc/pb-bo. If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : shorty.php 14: require_once ( get_template_directory().'/framework/shorty/includes/block1-15: require_once ( get_template_directory().'/framework/shorty/includes/block2-16: require_once ( get_template_directory().'/framework/shorty/includes/block3-17: require_once ( get_template_directory().'/framework/shorty/includes/block4-18: require_once ( get_template_directory().'/framework/shorty/includes/block5-19: require_once ( get_template_directory().'/framework/shorty/includes/block6-20: require_once ( get_template_directory().'/framework/shorty/includes/block7-21: require_once ( get_template_directory().'/framework/shorty/includes/block8-22: require_once ( get_template_directory().'/framework/shorty/includes/block9-23: require_once ( get_template_directory().'/framework/shorty/includes/block1024: require_once ( get_template_directory().'/framework/shorty/includes/block1125: require_once ( get_template_directory().'/framework/shorty/includes/block1326: require_once ( get_template_directory().'/framework/shorty/includes/block2327: require_once ( get_template_directory().'/framework/shorty/includes/block2428: require_once ( get_template_directory().'/framework/shorty/includes/blog-fu29: require_once ( get_template_directory().'/framework/shorty/includes/slider-30: require_once ( get_template_directory().'/framework/shorty/includes/timelin If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : framework-mega.php 16: $file = include ( get_template_directory(). '/framework/admin/html/icon.html' ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : framework-mega copy.php 16: $file = include ( get_template_directory(). '/framework/admin/html/icon.html' ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : framework-functions.php 16: require_once (get_template_directory().'/framework/admin/functions/post_sid17: require_once (get_template_directory().'/framework/admin/functions/post_lay18: require_once (get_template_directory().'/framework/admin/functions/pattrens19: require_once (get_template_directory().'/framework/admin/functions/theme_co20: require_once (get_template_directory().'/framework/admin/functions/bgop.php21: require_once (get_template_directory().'/framework/admin/functions/tybo.php22: require_once (get_template_directory().'/framework/admin/functions/sellist.23: require_once (get_template_directory().'/framework/admin/functions/color.ph24: require_once (get_template_directory().'/framework/admin/functions/images.p25: require_once (get_template_directory().'/framework/admin/functions/tags_inp26: require_once (get_template_directory().'/framework/admin/functions/cats_inp27: require_once (get_template_directory().'/framework/admin/functions/radio_in28: require_once (get_template_directory().'/framework/admin/functions/select.p29: require_once (get_template_directory().'/framework/admin/functions/upload_i30: require_once (get_template_directory().'/framework/admin/functions/ui_slide31: require_once (get_template_directory().'/framework/admin/functions/textarea32: require_once (get_template_directory().'/framework/admin/functions/subtitle33: require_once (get_template_directory().'/framework/admin/functions/subtitle34: require_once (get_template_directory().'/framework/admin/functions/msg_info35: require_once (get_template_directory().'/framework/admin/functions/checkbox36: require_once (get_template_directory().'/framework/admin/functions/txt.php'37: require_once (get_template_directory().'/framework/admin/functions/text_inp38: require_once (get_template_directory().'/framework/admin/functions/blog_sty39: require_once (get_template_directory().'/framework/admin/functions/column.p40: require_once (get_template_directory().'/framework/admin/functions/blocks.p41: require_once (get_template_directory().'/framework/admin/functions/translat42: require_once (get_template_directory().'/framework/admin/functions/web-noti If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : framework-setting.php 4: require_once (get_template_directory().'/framework/admin/options/general.ph5: require_once (get_template_directory().'/framework/admin/options/header.php6: require_once (get_template_directory().'/framework/admin/options/post-setti7: require_once (get_template_directory().'/framework/admin/options/page-setti8: require_once (get_template_directory().'/framework/admin/options/template-s9: require_once (get_template_directory().'/framework/admin/options/sidebars.p10: require_once (get_template_directory().'/framework/admin/options/footer.php11: require_once (get_template_directory().'/framework/admin/options/ads.php' )12: require_once (get_template_directory().'/framework/admin/options/portfolio.13: require_once (get_template_directory().'/framework/admin/options/socialShar14: require_once (get_template_directory().'/framework/admin/options/socialLink15: require_once (get_template_directory().'/framework/admin/options/translatio16: require_once (get_template_directory().'/framework/admin/options/themeStyli17: require_once (get_template_directory().'/framework/admin/options/customDesi18: require_once (get_template_directory().'/framework/admin/options/typography19: require_once (get_template_directory().'/framework/admin/options/custom-js.20: require_once (get_template_directory().'/framework/admin/options/custom-css21: require_once (get_template_directory().'/framework/admin/options/twitter.ph22: require_once (get_template_directory().'/framework/admin/options/web-notifi23: require_once (get_template_directory().'/framework/admin/options/backup.php If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : fremework-demo-content.php 9: require_once( get_template_directory() . '/framework/admin/framework-note.p If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : translations.php 12: require_once ( get_template_directory() . '/framework/admin/framework-defau If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : framework-options.php 4: include (get_template_directory().'/framework/admin/framework-default.php')5: include (get_template_directory().'/framework/admin/framework-updates.php')8: require_once (get_template_directory() . '/framework/admin/framework-settin9: require_once (get_template_directory() . '/framework/admin/framework-functi67: include (get_template_directory().'/framework/admin/framework-default.php')2593: include ( get_template_directory().'/framework/admin/framework-default.php'2730: require_once( get_template_directory() . '/framework/admin/fremework-welcom2733: require_once( get_template_directory() . '/framework/admin/fremework-demo-c2736: require_once( get_template_directory() . '/framework/admin/framework-form.p If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : twitteroauth.php 11: require_once('OAuth.php'); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
Other checked themes