0
Validation results

X (shared on wplocker.com)

X (shared on wplocker.com)

WordPress 6.7 theme
0
  • THEME TYPEWordPress theme 6.7
  • FILE NAMEx.zip
  • FILE SIZE12271609 bytes
  • MD572fcc0f2bef86e2b2b992724c8e8d327
  • SHA1c2c0bd0e0874a8225ec9bc9339671eb9cae5b2aa
  • LICENSEGNU GPL 2
  • FILES INCLUDEDCSS, PHP, XML, Bitmap images, Adobe Illustrator
  • THEME URIhttp://theme.co/x/
  • VERSION4.0.7
  • AUTHOR URI
  • CREATION DATE2023-10-30
  • LAST FILE UPDATE2023-10-30
  • LAST VALIDATION2023-10-30 02:45
  • OTHER VERSIONS

    7.2.3 : 54%

    6.0.4 : 0%

    3.2.3 : 0%

This theme seems to be proprietary. Themecheck doesn't distribute commercial themes.
Critical alerts
  1. Customizer : Sanitization of Customizer settings Found a Customizer setting that did not have a sanitization callback function in file register.php. Every call to the add_setting() method needs to have a sanitization callback function passed.
  2. Title : Title No reference to add_theme_support( "title-tag" ) was found in the theme.The theme needs to have <title> tags, ideally in the header.php file.The theme needs to have a call to wp_title(), ideally in the header.php file.
  3. Security breaches : Use of base64_encode() Found base64_encode in file class-update-api.php.
     return self::remote_request( array( 'products' => base64_encode( serialize( $slugs ) ) ) );
  4. Presence of iframes : iframes are sometimes used to load unwanted adverts and malicious code on another site Found <iframe width="560" height="315" src="//www.youtube.com/embed/WxfZkMm3wcg" frameborder="0" allowfullscreen> in file data-portfolio-items.php. 203: '_x_portfolio_embed' => '<iframe width='560' height='315' src='//www.youtube.com/embed/WxfZkMm3wcg' Found <iframe src="//player.vimeo.com/video/3514904" width="500" height="281" frameborder="0" webkitallowfullscreen mozallowfullscreen allowfullscreen> in file data-posts.php. 188: '_x_video_embed' => '<iframe src='//player.vimeo.com/video/3514904' width='500' height='281' fra
  5. Malware : Operations on file system file_get_contents was found in the file page-customizer-manager.php 64: $encoded_options = file_get_contents( $_FILES['import']['tmp_name'] );
  6. Admin menu : Themes should use add_theme_page() for adding admin pages. File activation.php : 336: add_submenu_page(File setup.php : 81: add_menu_page( 'X &ndash; Addons: Home', 'Addons', 'manage_options', 'x-addFile setup.php : 82: add_submenu_page( 'x-addons-home', 'X &ndash; Addons: Home', 'Home', 'manag83: add_submenu_page( 'x-addons-home', 'X &ndash; Addons: Customizer Manager', 84: add_submenu_page( 'x-addons-home', 'X &ndash; Addons: Demo Content', 'Demo 85: add_submenu_page( 'x-addons-home', 'X &ndash; Addons: Product Validation', 86: add_submenu_page( 'x-addons-home', 'X &ndash; Addons: Extensions', 'ExtensiFile setup.php : 82: add_submenu_page( 'x-addons-home', 'X &ndash; Addons: Home', 'Home', 'manag83: add_submenu_page( 'x-addons-home', 'X &ndash; Addons: Customizer Manager', 84: add_submenu_page( 'x-addons-home', 'X &ndash; Addons: Demo Content', 'Demo 85: add_submenu_page( 'x-addons-home', 'X &ndash; Addons: Product Validation', 86: add_submenu_page( 'x-addons-home', 'X &ndash; Addons: Extensions', 'ExtensiFile setup.php : 82: add_submenu_page( 'x-addons-home', 'X &ndash; Addons: Home', 'Home', 'manag83: add_submenu_page( 'x-addons-home', 'X &ndash; Addons: Customizer Manager', 84: add_submenu_page( 'x-addons-home', 'X &ndash; Addons: Demo Content', 'Demo 85: add_submenu_page( 'x-addons-home', 'X &ndash; Addons: Product Validation', 86: add_submenu_page( 'x-addons-home', 'X &ndash; Addons: Extensions', 'ExtensiFile setup.php : 82: add_submenu_page( 'x-addons-home', 'X &ndash; Addons: Home', 'Home', 'manag83: add_submenu_page( 'x-addons-home', 'X &ndash; Addons: Customizer Manager', 84: add_submenu_page( 'x-addons-home', 'X &ndash; Addons: Demo Content', 'Demo 85: add_submenu_page( 'x-addons-home', 'X &ndash; Addons: Product Validation', 86: add_submenu_page( 'x-addons-home', 'X &ndash; Addons: Extensions', 'ExtensiFile setup.php : 82: add_submenu_page( 'x-addons-home', 'X &ndash; Addons: Home', 'Home', 'manag83: add_submenu_page( 'x-addons-home', 'X &ndash; Addons: Customizer Manager', 84: add_submenu_page( 'x-addons-home', 'X &ndash; Addons: Demo Content', 'Demo 85: add_submenu_page( 'x-addons-home', 'X &ndash; Addons: Product Validation', 86: add_submenu_page( 'x-addons-home', 'X &ndash; Addons: Extensions', 'Extensi
  7. Deprecated functions : screen_icon screen_icon found in file activation.php. Deprecated since version 3.8.372: <?php screen_icon( apply_filters( 'tgmpa_default_screen_icon', 'themes' ) ); ?>1497: screen_icon( apply_filters( 'tgmpa_default_screen_icon', 'themes' ) );
  8. Deprecated functions : get_currentuserinfo get_currentuserinfo found in file form-edit-address.php. Deprecated since version 4.5. Use wp_get_current_user instead.17: get_currentuserinfo();
  9. Included plugins : Zip file found Plugins are not allowed in themes. The zip file found was ._revslider.zip ._cornerstone.zip ._x-shortcodes.zip ._js_composer.zip revslider.zip x-shortcodes.zip js_composer.zip cornerstone.zip.
Warning
  1. theme tags : Presence of bad theme tagsFound wrong tag in style.css header.
  2. Text domain : Incorrect use of translation functions.Wrong installation directory for the theme name. The directory name must match the slug of the theme. This theme's correct slug and text-domain is x-shared-on-wplocker-com.
  3. Text domain : Incorrect use of translation functions.Found a translation function that is missing a text-domain. Function __, with the arguments '__x__' in file cart-totals.php.Found a translation function that is missing a text-domain. Function __, with the arguments '__x__' in file shipping-calculator.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'This theme requires the following plugin: %1$s.', 'This theme requires the following plugins: %1$s.' in file registration.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'This theme recommends the following plugin: %1$s.', 'This theme recommends the following plugins: %1$s.' in file registration.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'Sorry, but you do not have the correct permissions to install the %s plugin. Contact the administrator of this site for help on getting the plugin installed.', 'Sorry, but you do not have the correct permissions to install the %s plugins. Contact the administrator of this site for help on getting the plugins installed.' in file registration.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'The following required plugin is currently inactive: %1$s.', 'The following required plugins are currently inactive: %1$s.' in file registration.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'The following recommended plugin is currently inactive: %1$s.', 'The following recommended plugins are currently inactive: %1$s.' in file registration.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'Sorry, but you do not have the correct permissions to activate the %s plugin. Contact the administrator of this site for help on getting the plugin activated.', 'Sorry, but you do not have the correct permissions to activate the %s plugins. Contact the administrator of this site for help on getting the plugins activated.' in file registration.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'The following plugin needs to be updated to its latest version to ensure maximum compatibility with this theme: %1$s.', 'The following plugins need to be updated to their latest version to ensure maximum compatibility with this theme: %1$s.' in file registration.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'Sorry, but you do not have the correct permissions to update the %s plugin. Contact the administrator of this site for help on getting the plugin updated.', 'Sorry, but you do not have the correct permissions to update the %s plugins. Contact the administrator of this site for help on getting the plugins updated.' in file registration.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'Begin installing plugin', 'Begin installing plugins' in file registration.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'Activate installed plugin', 'Activate installed plugins' in file registration.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'This theme requires the following plugin: %1$s.', 'This theme requires the following plugins: %1$s.' in file activation.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'This theme recommends the following plugin: %1$s.', 'This theme recommends the following plugins: %1$s.' in file activation.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'Sorry, but you do not have the correct permissions to install the %s plugin. Contact the administrator of this site for help on getting the plugin installed.', 'Sorry, but you do not have the correct permissions to install the %s plugins. Contact the administrator of this site for help on getting the plugins installed.' in file activation.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'The following required plugin is currently inactive: %1$s.', 'The following required plugins are currently inactive: %1$s.' in file activation.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'The following recommended plugin is currently inactive: %1$s.', 'The following recommended plugins are currently inactive: %1$s.' in file activation.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'Sorry, but you do not have the correct permissions to activate the %s plugin. Contact the administrator of this site for help on getting the plugin activated.', 'Sorry, but you do not have the correct permissions to activate the %s plugins. Contact the administrator of this site for help on getting the plugins activated.' in file activation.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'The following plugin needs to be updated to its latest version to ensure maximum compatibility with this theme: %1$s.', 'The following plugins need to be updated to their latest version to ensure maximum compatibility with this theme: %1$s.' in file activation.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'Sorry, but you do not have the correct permissions to update the %s plugin. Contact the administrator of this site for help on getting the plugin updated.', 'Sorry, but you do not have the correct permissions to update the %s plugins. Contact the administrator of this site for help on getting the plugins updated.' in file activation.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'Begin installing plugin', 'Begin installing plugins' in file activation.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'Activate installed plugin', 'Activate installed plugins' in file activation.php.Found a translation function that is missing a text-domain. Function _e, with the arguments '__x__' in file activation.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'There is a new version of %1$s available. <a href="%2$s" class="thickbox" title="%3$s">View version %4$s details</a>.' in file class-plugin-updater.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'There is a new version of %1$s available. <a href="%2$s" class="thickbox" title="%3$s">View version %4$s details</a>. %5$s' in file class-plugin-updater.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'There is a new version of %1$s available. <a href="%2$s" class="thickbox" title="%3$s">View version %4$s details</a> or <a href="%5$s">update now</a>.' in file class-plugin-updater.php.More than one text-domain is being used in this theme. This means the theme will not be compatible with WordPress.org language packs. The domains found are __x__, woocommerce, buddypress, bbpress.
  4. Plugin territory : Plugin territory functionalitiesThe theme uses the register_post_type() function, which is plugin-territory functionality.
  5. Hidden admin bar : Hidden admin Bar in CSSThemes should not hide admin bar. Detected in file integrity-light.css.
  6. Custom elements : Presence of custom headerNo reference to custom header was found in the theme.
  7. Custom elements : Presence of custom backgroundNo reference to custom background was found in the theme.
  8. Deprecated functions : screen_iconscreen_icon found in file activation.php. Deprecated since version 3.8.372: <?php screen_icon( apply_filters( 'tgmpa_default_screen_icon', 'themes' ) ); ?>1497: screen_icon( apply_filters( 'tgmpa_default_screen_icon', 'themes' ) );
  9. Editor style : Presence of editor styleNo reference to add_editor_style() was found in the theme. It is recommended that the theme implements editor styling, so as to make the editor content match the resulting post output in the theme, for a better user experience.
  10. I18N implementation : Proper use of _e(Possible variable $this found in translation function in activation.php. Translation function calls should not contain PHP variables.
  11. I18N implementation : Proper use of ___all(Possible variable $cvalue found in translation function in shipping-calculator.php. Translation function calls should not contain PHP variables.
  12. CSS files : Presence of .gallery-caption class.gallery-caption css class is needed in theme css.
  13. Screenshot : Screenshot fileScreenshot size is 600x450px. Screenshot size should be 1200x900, to account for HiDPI displays. Any 4:3 image size is acceptable, but 1200x900 is preferred.Bad screenshot file extension ! File screenshot.png is not an actual JPG file. Detected type was : "image/png".
Tip-off
  1. favicon presence : Favicon managementPossible Favicon found in meta.php. Favicons are handled by the Site Icon setting in the customizer since version 4.3.
  2. Static links : Presence of hard-coded linksPossible hard-coded links were found in the file change-avatar.php.13: <p><?php _e( 'Your profile photo will be used on your profile and throughout the site. If there is a <a href='http://gravatar.com'>Gravatar</a> associated with your account email we wil69: <p><?php _e( 'Your profile photo will be used on your profile and throughout the site. To change your profile photo, please create an account with <a href='http://gravatar.com'>Gravatar</a> using the same email address as you used 13: <p><?php _e( 'Your profile photo will be used on your profile and throughout the site. If there is a <a href='http://gravatar.com'>Gravatar</a> associated with your account email we wil69: <p><?php _e( 'Your profile photo will be used on your profile and throughout the site. To change your profile photo, please create an account with <a href='http://gravatar.com'>Gravatar</a> using the same email address as you used Possible hard-coded links were found in the file page-home.php.33: <div class='about-text'><?php echo apply_filters( 'x_addons_home_subheading', ( x_is_validated() ) ? '<strong>X is now installed (woo-hoo).</strong> Read on to learn more about various member center resources and other helpful tools. There are many important parts to each update, so be sure to <a href='https://theme.co/changelog/' target='_blank'>check out the release notes an49: <p>The <a href='https://theme.co/community/kb/' target='_blank'>Knowledge Base</a> is where59: <p>New to WordPress? Don't worry, we've all been there. If you're still working your way through the foundational elements of WordPress, you will be pleased to know that we have <a href='https://theme.co/community/kb/' target='_blank'>dozens of high definition v68: <p>Recreate your favorite looks from our demos with a few simple clicks. <a href='<?php echo x_addons_get_link_demo_content(); ?>' target='_blank'>Demo content</a> is available to help you achieve this in no time at all. This includes WordPress import data, markup, Customizer import data, and more! You can read about demo content <a href='https://theme.co/community/kb/demo-content/' target='_blank'>here</a> in th88: <p>Once you have registered for access to the member center, go generate your <a href='https://theme.co/community/my-account/' target='_blank'>product API key</a> under the 'Licenses' section. This key is used for automatic updates (<a href='https://theme.co/community/kb/product-validation/' target='_blank'>tutorial54: <p>X is so much more than a theme. It's also a collection of resources from some of the world's top <a href='https://theme.co/community/experts/' target='_blank'>Internet marketers</a>55: <p>While we've built many of the items discussed by these experts directly into the theme, we're also able to bring you <a href='https://theme.co/community/training/' target='_blank'>incredible training</49: <p>The <a href='https://theme.co/community/kb/' target='_blank'>Knowledge Base</a> is where59: <p>New to WordPress? Don't worry, we've all been there. If you're still working your way through the foundational elements of WordPress, you will be pleased to know that we have <a href='https://theme.co/community/kb/' target='_blank'>dozens of high definition v68: <p>Recreate your favorite looks from our demos with a few simple clicks. <a href='<?php echo x_addons_get_link_demo_content(); ?>' target='_blank'>Demo content</a> is available to help you achieve this in no time at all. This includes WordPress import data, markup, Customizer import data, and more! You can read about demo content <a href='https://theme.co/community/kb/demo-content/' target='_blank'>here</a> in th88: <p>Once you have registered for access to the member center, go generate your <a href='https://theme.co/community/my-account/' target='_blank'>product API key</a> under the 'Licenses' section. This key is used for automatic updates (<a href='https://theme.co/community/kb/product-validation/' target='_blank'>tutorial63: <p>If you're planning on doing any amount of customization outside of the settings afforded in the Customizer, <a href='https://theme.co/community/child-themes/' target='_blank'>child themes</a> 68: <p>Recreate your favorite looks from our demos with a few simple clicks. <a href='<?php echo x_addons_get_link_demo_content(); ?>' target='_blank'>Demo content</a> is available to help you achieve this in no time at all. This includes WordPress import data, markup, Customizer import data, and more! You can read about demo content <a href='https://theme.co/community/kb/demo-content/' target='_blank'>here</a> in th72: <p>Got a question? We're here to help! The member center is where we handle all official support via our <a href='https://theme.co/community/forums/group/support-center/' target='_blank'>fo73: <p>If you haven't done so already, make sure to <a href='https://theme.co/go/register.php' target='_blank'>register for access</a> t84: <p>To get started, <a href='https://theme.co/go/register.php' target='_blank'>register for access</a> t73: <p>If you haven't done so already, make sure to <a href='https://theme.co/go/register.php' target='_blank'>register for access</a> t84: <p>To get started, <a href='https://theme.co/go/register.php' target='_blank'>register for access</a> t88: <p>Once you have registered for access to the member center, go generate your <a href='https://theme.co/community/my-account/' target='_blank'>product API key</a>95: <a href='https://theme.co/x/go/register.php' class='button button-primary x-addons-hPossible hard-coded links were found in the file visual-composer.php.5162: $message = '<div class='messagebox_text'><p>' . __( 'The layout you are trying to use on this page does not conform to Visual Composer&#39;s layout guidelines. For more information on this situation and how to avoid this error going forward, please see our <a href='http://theme.co/x/member/kb/solutions-to-potential-setup-issues-visual-comp
  3. Optional files : Presence of rtl stylesheet rtl.cssThis theme does not contain optional file rtl.php.
  4. Optional files : Presence of front page template file front-page.phpThis theme does not contain optional file front-page.php.
  5. Optional files : Presence of category template file category.phpThis theme does not contain optional file category.php.
  6. Optional files : Presence of tag template file tag.phpThis theme does not contain optional file tag.php.
  7. Optional files : Presence of term template file taxonomy.phpThis theme does not contain optional file taxonomy.php.
  8. Optional files : Presence of author template file author.phpThis theme does not contain optional file author.php.
  9. Optional files : Presence of date/time template file date.phpThis theme does not contain optional file date.php.
  10. Optional files : Presence of archive template file archive.phpThis theme does not contain optional file archive.php.
  11. Optional files : Presence of search results template file search.phpThis theme does not contain optional file search.php.
  12. Optional files : Presence of attachment template file attachment.phpThis theme does not contain optional file attachment.php.
  13. Optional files : Presence of image template file image.phpThis theme does not contain optional file image.php.
  14. Use of includes : Use of include or requireThe theme appears to use include or require : activation.php 990: require_once( ABSPATH . 'wp-admin/includes/class-wp-list-table.php' ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : migration.php 221: include_once( ABSPATH . '/wp-admin/includes/plugin.php' ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : setup.php 345: require_once( $meta_path . '/entries.php' );346: require_once( $meta_path . '/taxonomies.php' ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : ajax-handler.php 49: require_once( 'setup.php' ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : setup.php 64: require_once( 'helper.php' );94: require_once( 'xcs.php' );105: require_once( 'data-pages.php' );106: require_once( 'data-posts.php' );107: require_once( 'data-portfolio-items.php' ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : class-plugin-updater.php 147: include_once( ABSPATH . '/wp-admin/includes/plugin.php' ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : setup.php 65: require_once( $addn_path . '/class-update-api.php' );66: require_once( $addn_path . '/class-theme-updater.php' );67: require_once( $addn_path . '/class-plugin-updater.php' );68: require_once( $addn_path . '/page-home.php' );69: require_once( $addn_path . '/page-customizer-manager.php' );70: require_once( $addn_path . '/page-demo-content.php' );71: require_once( $addn_path . '/page-product-validation.php' );72: require_once( $addn_path . '/page-extensions.php' );73: require_once( $addn_path . '/demo/ajax-handler.php' ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : setup.php 26: require_once( $thmb_path . '/width.php' );27: require_once( $thmb_path . '/height.php' ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : output.php 24: require_once( $outp_path . '/variables.php' );30: require_once( $outp_path . '/' . $x_stack . '.php' );31: require_once( $outp_path . '/base.php' );32: require_once( $outp_path . '/masthead.php' );33: require_once( $outp_path . '/buttons.php' );34: require_once( $outp_path . '/widgets.php' );35: require_once( $outp_path . '/bbpress.php' );36: require_once( $outp_path . '/buddypress.php' );37: require_once( $outp_path . '/woocommerce.php' );38: require_once( $outp_path . '/gravity-forms.php' ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : setup.php 32: require_once( $cstm_path . '/controls.php' );33: require_once( $cstm_path . '/fonts.php' );34: require_once( $cstm_path . '/register.php' );35: require_once( $cstm_path . '/output.php' );36: require_once( $cstm_path . '/transients.php' );37: require_once( $cstm_path . '/preloader.php' ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
Other checked themes