0
Validation results

X

X

WordPress 6.7 theme
0
  • THEME TYPEWordPress theme 6.7
  • FILE NAMEthemes.zip
  • FILE SIZE5305507 bytes
  • MD58324d06b37e784ff120dcdadb3f945bb
  • SHA183ce377cbfd72fadfc5b10bd79ef0c8097af6ee9
  • LICENSEGNU GPL 2
  • FILES INCLUDEDCSS, PHP, Bitmap images
  • THEME URIhttp://theme.co/x/
  • VERSION3.2.3
  • AUTHOR URI
  • CREATION DATE2019-06-14
  • LAST FILE UPDATE2019-06-14
  • LAST VALIDATION2019-06-14 17:35
  • OTHER VERSIONS

    7.2.3 : 54%

    6.0.4 : 0%

    4.0.7 : 0%

This theme seems to be proprietary. Themecheck doesn't distribute commercial themes.
Critical alerts
  1. Customizer : Sanitization of Customizer settings Found a Customizer setting that did not have a sanitization callback function in file framework/functions/global/admin/customizer/register.php. Every call to the add_setting() method needs to have a sanitization callback function passed.
  2. Title : Title No reference to add_theme_support( "title-tag" ) was found in the theme.The theme needs to have <title> tags, ideally in the header.php file.The theme needs to have a call to wp_title(), ideally in the header.php file.
  3. Security breaches : Use of base64_encode() Found base64_encode in file framework/functions/global/admin/addons/class-update-api.php.
     return self::remote_request( array( 'products' => base64_encode( serialize( $slugs ) ) ) );
  4. Presence of iframes : iframes are sometimes used to load unwanted adverts and malicious code on another site Found <iframe src="//player.vimeo.com/video/3514904" width="500" height="281" frameborder="0" webkitallowfullscreen mozallowfullscreen allowfullscreen> in file framework/functions/global/admin/addons/demo/data-posts.php. 188: '_x_video_embed' => '<iframe src='//player.vimeo.com/video/3514904' width='500' height='281' fraFound <iframe width="560" height="315" src="//www.youtube.com/embed/WxfZkMm3wcg" frameborder="0" allowfullscreen> in file framework/functions/global/admin/addons/demo/data-portfolio-items.php. 203: '_x_portfolio_embed' => '<iframe width='560' height='315' src='//www.youtube.com/embed/WxfZkMm3wcg'
  5. Malware : Operations on file system file_get_contents was found in the file framework/functions/global/admin/addons/page-customizer-manager.php 64: $encoded_options = file_get_contents( $_FILES['import']['tmp_name'] );
  6. Admin menu : Themes should use add_theme_page() for adding admin pages. File framework/functions/global/admin/addons/setup.php : 77: add_menu_page( 'X &ndash; Addons: Home', 'Addons', 'manage_options', 'x-addFile framework/functions/global/admin/addons/setup.php : 78: add_submenu_page( 'x-addons-home', 'X &ndash; Addons: Home', 'Home', 'manag79: add_submenu_page( 'x-addons-home', 'X &ndash; Addons: Customizer Manager', 80: add_submenu_page( 'x-addons-home', 'X &ndash; Addons: Demo Content', 'Demo 81: add_submenu_page( 'x-addons-home', 'X &ndash; Addons: Product Validation', 82: add_submenu_page( 'x-addons-home', 'X &ndash; Addons: Extensions', 'ExtensiFile framework/functions/global/admin/addons/setup.php : 78: add_submenu_page( 'x-addons-home', 'X &ndash; Addons: Home', 'Home', 'manag79: add_submenu_page( 'x-addons-home', 'X &ndash; Addons: Customizer Manager', 80: add_submenu_page( 'x-addons-home', 'X &ndash; Addons: Demo Content', 'Demo 81: add_submenu_page( 'x-addons-home', 'X &ndash; Addons: Product Validation', 82: add_submenu_page( 'x-addons-home', 'X &ndash; Addons: Extensions', 'ExtensiFile framework/functions/global/admin/addons/setup.php : 78: add_submenu_page( 'x-addons-home', 'X &ndash; Addons: Home', 'Home', 'manag79: add_submenu_page( 'x-addons-home', 'X &ndash; Addons: Customizer Manager', 80: add_submenu_page( 'x-addons-home', 'X &ndash; Addons: Demo Content', 'Demo 81: add_submenu_page( 'x-addons-home', 'X &ndash; Addons: Product Validation', 82: add_submenu_page( 'x-addons-home', 'X &ndash; Addons: Extensions', 'ExtensiFile framework/functions/global/admin/addons/setup.php : 78: add_submenu_page( 'x-addons-home', 'X &ndash; Addons: Home', 'Home', 'manag79: add_submenu_page( 'x-addons-home', 'X &ndash; Addons: Customizer Manager', 80: add_submenu_page( 'x-addons-home', 'X &ndash; Addons: Demo Content', 'Demo 81: add_submenu_page( 'x-addons-home', 'X &ndash; Addons: Product Validation', 82: add_submenu_page( 'x-addons-home', 'X &ndash; Addons: Extensions', 'ExtensiFile framework/functions/global/admin/addons/setup.php : 78: add_submenu_page( 'x-addons-home', 'X &ndash; Addons: Home', 'Home', 'manag79: add_submenu_page( 'x-addons-home', 'X &ndash; Addons: Customizer Manager', 80: add_submenu_page( 'x-addons-home', 'X &ndash; Addons: Demo Content', 'Demo 81: add_submenu_page( 'x-addons-home', 'X &ndash; Addons: Product Validation', 82: add_submenu_page( 'x-addons-home', 'X &ndash; Addons: Extensions', 'ExtensiFile framework/functions/global/admin/tmg/activation.php : 329: add_submenu_page(
  7. Deprecated functions : screen_icon screen_icon found in file framework/functions/global/admin/tmg/activation.php. Deprecated since version 3.8.365: <?php screen_icon( apply_filters( 'tgmpa_default_screen_icon', 'themes' ) ); ?>1493: screen_icon( apply_filters( 'tgmpa_default_screen_icon', 'themes' ) );
  8. Deprecated functions : get_currentuserinfo get_currentuserinfo found in file woocommerce/myaccount/form-edit-address.php. Deprecated since version 4.5. Use wp_get_current_user instead.17: get_currentuserinfo();
  9. Included plugins : Zip file found Plugins are not allowed in themes. The zip file found was x-shortcodes.zip revslider.zip js_composer.zip.
Warning
  1. theme tags : Presence of bad theme tagsFound wrong tag in style.css header.
  2. Text domain : Incorrect use of translation functions.Found a translation function that is missing a text-domain. Function __, with the arguments '__x__' in file woocommerce/cart/shipping-calculator.php.Found a translation function that is missing a text-domain. Function __, with the arguments '__x__' in file woocommerce/cart/cart-totals.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'There is a new version of %1$s available. <a href="%2$s" class="thickbox" title="%3$s">View version %4$s details</a>.' in file framework/functions/global/admin/addons/class-plugin-updater.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'There is a new version of %1$s available. <a href="%2$s" class="thickbox" title="%3$s">View version %4$s details</a>. %5$s' in file framework/functions/global/admin/addons/class-plugin-updater.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'There is a new version of %1$s available. <a href="%2$s" class="thickbox" title="%3$s">View version %4$s details</a> or <a href="%5$s">update now</a>.' in file framework/functions/global/admin/addons/class-plugin-updater.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'This theme requires the following plugin: %1$s.', 'This theme requires the following plugins: %1$s.' in file framework/functions/global/admin/tmg/registration.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'This theme recommends the following plugin: %1$s.', 'This theme recommends the following plugins: %1$s.' in file framework/functions/global/admin/tmg/registration.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'Sorry, but you do not have the correct permissions to install the %s plugin. Contact the administrator of this site for help on getting the plugin installed.', 'Sorry, but you do not have the correct permissions to install the %s plugins. Contact the administrator of this site for help on getting the plugins installed.' in file framework/functions/global/admin/tmg/registration.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'The following required plugin is currently inactive: %1$s.', 'The following required plugins are currently inactive: %1$s.' in file framework/functions/global/admin/tmg/registration.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'The following recommended plugin is currently inactive: %1$s.', 'The following recommended plugins are currently inactive: %1$s.' in file framework/functions/global/admin/tmg/registration.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'Sorry, but you do not have the correct permissions to activate the %s plugin. Contact the administrator of this site for help on getting the plugin activated.', 'Sorry, but you do not have the correct permissions to activate the %s plugins. Contact the administrator of this site for help on getting the plugins activated.' in file framework/functions/global/admin/tmg/registration.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'The following plugin needs to be updated to its latest version to ensure maximum compatibility with this theme: %1$s.', 'The following plugins need to be updated to their latest version to ensure maximum compatibility with this theme: %1$s.' in file framework/functions/global/admin/tmg/registration.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'Sorry, but you do not have the correct permissions to update the %s plugin. Contact the administrator of this site for help on getting the plugin updated.', 'Sorry, but you do not have the correct permissions to update the %s plugins. Contact the administrator of this site for help on getting the plugins updated.' in file framework/functions/global/admin/tmg/registration.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'Begin installing plugin', 'Begin installing plugins' in file framework/functions/global/admin/tmg/registration.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'Activate installed plugin', 'Activate installed plugins' in file framework/functions/global/admin/tmg/registration.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'This theme requires the following plugin: %1$s.', 'This theme requires the following plugins: %1$s.' in file framework/functions/global/admin/tmg/activation.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'This theme recommends the following plugin: %1$s.', 'This theme recommends the following plugins: %1$s.' in file framework/functions/global/admin/tmg/activation.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'Sorry, but you do not have the correct permissions to install the %s plugin. Contact the administrator of this site for help on getting the plugin installed.', 'Sorry, but you do not have the correct permissions to install the %s plugins. Contact the administrator of this site for help on getting the plugins installed.' in file framework/functions/global/admin/tmg/activation.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'The following required plugin is currently inactive: %1$s.', 'The following required plugins are currently inactive: %1$s.' in file framework/functions/global/admin/tmg/activation.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'The following recommended plugin is currently inactive: %1$s.', 'The following recommended plugins are currently inactive: %1$s.' in file framework/functions/global/admin/tmg/activation.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'Sorry, but you do not have the correct permissions to activate the %s plugin. Contact the administrator of this site for help on getting the plugin activated.', 'Sorry, but you do not have the correct permissions to activate the %s plugins. Contact the administrator of this site for help on getting the plugins activated.' in file framework/functions/global/admin/tmg/activation.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'The following plugin needs to be updated to its latest version to ensure maximum compatibility with this theme: %1$s.', 'The following plugins need to be updated to their latest version to ensure maximum compatibility with this theme: %1$s.' in file framework/functions/global/admin/tmg/activation.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'Sorry, but you do not have the correct permissions to update the %s plugin. Contact the administrator of this site for help on getting the plugin updated.', 'Sorry, but you do not have the correct permissions to update the %s plugins. Contact the administrator of this site for help on getting the plugins updated.' in file framework/functions/global/admin/tmg/activation.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'Begin installing plugin', 'Begin installing plugins' in file framework/functions/global/admin/tmg/activation.php.Found a translation function that is missing a text-domain. Function _n_noop, with the arguments 'Activate installed plugin', 'Activate installed plugins' in file framework/functions/global/admin/tmg/activation.php.Found a translation function that is missing a text-domain. Function _e, with the arguments '__x__' in file framework/functions/global/admin/tmg/activation.php.More than one text-domain is being used in this theme. This means the theme will not be compatible with WordPress.org language packs. The domains found are __x__, woocommerce, buddypress, bbpress.
  3. Plugin territory : Plugin territory functionalitiesThe theme uses the register_post_type() function, which is plugin-territory functionality.
  4. Hidden admin bar : Hidden admin Bar in CSSThemes should not hide admin bar. Detected in file framework/css/site/buddypress/icon.css.
  5. Custom elements : Presence of custom headerNo reference to custom header was found in the theme.
  6. Custom elements : Presence of custom backgroundNo reference to custom background was found in the theme.
  7. Deprecated functions : screen_iconscreen_icon found in file framework/functions/global/admin/tmg/activation.php. Deprecated since version 3.8.365: <?php screen_icon( apply_filters( 'tgmpa_default_screen_icon', 'themes' ) ); ?>1493: screen_icon( apply_filters( 'tgmpa_default_screen_icon', 'themes' ) );
  8. Editor style : Presence of editor styleNo reference to add_editor_style() was found in the theme. It is recommended that the theme implements editor styling, so as to make the editor content match the resulting post output in the theme, for a better user experience.
  9. I18N implementation : Proper use of _e(Possible variable $this found in translation function in framework/functions/global/admin/tmg/activation.php. Translation function calls should not contain PHP variables.
  10. I18N implementation : Proper use of ___all(Possible variable $cvalue found in translation function in woocommerce/cart/shipping-calculator.php. Translation function calls should not contain PHP variables.
  11. CSS files : Presence of .gallery-caption class.gallery-caption css class is needed in theme css.
  12. Screenshot : Screenshot fileScreenshot size is 600x450px. Screenshot size should be 1200x900, to account for HiDPI displays. Any 4:3 image size is acceptable, but 1200x900 is preferred.Bad screenshot file extension ! File screenshot.png is not an actual JPG file. Detected type was : "image/png".
Tip-off
  1. favicon presence : Favicon managementPossible Favicon found in framework/functions/global/content.php. Favicons are handled by the Site Icon setting in the customizer since version 4.3.
  2. Static links : Presence of hard-coded linksPossible hard-coded links were found in the file buddypress/members/single/profile/change-avatar.php.8: <p><?php _e( 'Your avatar will be used on your profile and throughout the site. If there is a <a href='http://gravatar.com'>Gravatar</a> associated with your account email we wil58: <p><?php _e( 'Your avatar will be used on your profile and throughout the site. To change your avatar, please create an account with <a href='http://gravatar.com'>Gravatar</a> using the same email address as you used 8: <p><?php _e( 'Your avatar will be used on your profile and throughout the site. If there is a <a href='http://gravatar.com'>Gravatar</a> associated with your account email we wil58: <p><?php _e( 'Your avatar will be used on your profile and throughout the site. To change your avatar, please create an account with <a href='http://gravatar.com'>Gravatar</a> using the same email address as you used Possible hard-coded links were found in the file framework/functions/global/plugins/visual-composer.php.5065: $message = '<div class='messagebox_text'><p>' . __( 'The layout you are trying to use on this page does not conform to Visual Composer&#39;s layout guidelines. For more information on this situation and how to avoid this error going forward, please see our <a href='http://theme.co/x/member/kb/solutions-to-potential-setup-issues-visual-comp
  3. Optional files : Presence of rtl stylesheet rtl.cssThis theme does not contain optional file rtl.php.
  4. Optional files : Presence of front page template file front-page.phpThis theme does not contain optional file front-page.php.
  5. Optional files : Presence of category template file category.phpThis theme does not contain optional file category.php.
  6. Optional files : Presence of tag template file tag.phpThis theme does not contain optional file tag.php.
  7. Optional files : Presence of term template file taxonomy.phpThis theme does not contain optional file taxonomy.php.
  8. Optional files : Presence of author template file author.phpThis theme does not contain optional file author.php.
  9. Optional files : Presence of date/time template file date.phpThis theme does not contain optional file date.php.
  10. Optional files : Presence of archive template file archive.phpThis theme does not contain optional file archive.php.
  11. Optional files : Presence of search results template file search.phpThis theme does not contain optional file search.php.
  12. Optional files : Presence of attachment template file attachment.phpThis theme does not contain optional file attachment.php.
  13. Optional files : Presence of image template file image.phpThis theme does not contain optional file image.php.
  14. Use of includes : Use of include or requireThe theme appears to use include or require : framework/functions/global/admin/addons/demo/setup.php 61: require_once( 'helper.php' );91: require_once( 'xcs.php' );102: require_once( 'data-pages.php' );103: require_once( 'data-posts.php' );104: require_once( 'data-portfolio-items.php' ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : framework/functions/global/admin/addons/demo/ajax-handler.php 49: require_once( 'setup.php' ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : framework/functions/global/admin/addons/setup.php 61: require_once( $addn_path . '/class-update-api.php' );62: require_once( $addn_path . '/class-theme-updater.php' );63: require_once( $addn_path . '/class-plugin-updater.php' );64: require_once( $addn_path . '/page-home.php' );65: require_once( $addn_path . '/page-customizer-manager.php' );66: require_once( $addn_path . '/page-demo-content.php' );67: require_once( $addn_path . '/page-product-validation.php' );68: require_once( $addn_path . '/page-extensions.php' );69: require_once( $addn_path . '/demo/ajax-handler.php' ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : framework/functions/global/admin/addons/class-plugin-updater.php 147: include_once( ABSPATH . '/wp-admin/includes/plugin.php' ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : framework/functions/global/admin/tmg/activation.php 986: require_once( ABSPATH . 'wp-admin/includes/class-wp-list-table.php' ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : framework/functions/global/admin/customizer/output.php 24: require_once( $outp_path . '/variables.php' );30: require_once( $outp_path . '/' . x_get_stack() . '.php' );31: require_once( $outp_path . '/base.php' );32: require_once( $outp_path . '/masthead.php' );33: require_once( $outp_path . '/buttons.php' );34: require_once( $outp_path . '/widgets.php' );35: require_once( $outp_path . '/bbpress.php' );36: require_once( $outp_path . '/buddypress.php' );37: require_once( $outp_path . '/gravity-forms.php' ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : framework/functions/global/admin/customizer/setup.php 32: require_once( $cstm_path . '/controls.php' );33: require_once( $cstm_path . '/fonts.php' );34: require_once( $cstm_path . '/register.php' );35: require_once( $cstm_path . '/output.php' );36: require_once( $cstm_path . '/transients.php' );37: require_once( $cstm_path . '/preloader.php' ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : framework/functions/global/admin/meta/setup.php 345: require_once( $meta_path . '/entries.php' );346: require_once( $meta_path . '/taxonomies.php' ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : framework/functions/global/admin/migration.php 168: include_once( ABSPATH . '/wp-admin/includes/plugin.php' ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : framework/functions/global/admin/thumbnails/setup.php 26: require_once( $thmb_path . '/width.php' );27: require_once( $thmb_path . '/height.php' ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
Other checked themes