0
Validation results

XStore

XStore

WordPress 6.7 theme
0
This theme seems to be proprietary. Themecheck doesn't distribute commercial themes.
Critical alerts
  1. Security breaches : Modification of PHP server settings Found ini_set in file theme-options.php. 5451: ini_set( 'max_execution_time', 900 );
  2. Presence of iframes : iframes are sometimes used to load unwanted adverts and malicious code on another site Found <iframe width="100%" height="560" src="' . $embed . '" frameborder="0" allowfullscreen> in file template-elements.php. 1504: <iframe width='100%' height='560' src='' . $embed . '' frameborder='0' allo
  3. Malware : Operations on file system file_get_contents was found in the file system-requirements.php 75: 'f_get_contents' => function_exists( 'file_get_contents' ),238: <td>file_get_contents( ):</td>file_get_contents was found in the file theme-options.php 11: $base_options = file_get_contents($base_options);file_put_contents was found in the file theme-options.php 5470: file_put_contents($filename, $css); 5473: file_put_contents($filename, $css); file_put_contents was found in the file theme-options.php 5470: file_put_contents($filename, $css); 5473: file_put_contents($filename, $css); file_put_contents was found in the file envato-setup-export.php 200: //file_put_contents( get_home_path() . '/../theme/plugins/envato_setup/conten201: //file_put_contents( get_home_path() . '/../theme/plugins/envato_setup/conten202: //file_put_contents( get_home_path() . '/../theme/plugins/envato_setup/conten203: //file_put_contents( get_home_path() . '/../theme/plugins/envato_setup/conten204: //file_put_contents( get_home_path() . '/../theme/plugins/envato_setup/contenfile_put_contents was found in the file envato-setup-export.php 200: //file_put_contents( get_home_path() . '/../theme/plugins/envato_setup/conten201: //file_put_contents( get_home_path() . '/../theme/plugins/envato_setup/conten202: //file_put_contents( get_home_path() . '/../theme/plugins/envato_setup/conten203: //file_put_contents( get_home_path() . '/../theme/plugins/envato_setup/conten204: //file_put_contents( get_home_path() . '/../theme/plugins/envato_setup/contenfile_put_contents was found in the file envato-setup-export.php 200: //file_put_contents( get_home_path() . '/../theme/plugins/envato_setup/conten201: //file_put_contents( get_home_path() . '/../theme/plugins/envato_setup/conten202: //file_put_contents( get_home_path() . '/../theme/plugins/envato_setup/conten203: //file_put_contents( get_home_path() . '/../theme/plugins/envato_setup/conten204: //file_put_contents( get_home_path() . '/../theme/plugins/envato_setup/contenfile_put_contents was found in the file envato-setup-export.php 200: //file_put_contents( get_home_path() . '/../theme/plugins/envato_setup/conten201: //file_put_contents( get_home_path() . '/../theme/plugins/envato_setup/conten202: //file_put_contents( get_home_path() . '/../theme/plugins/envato_setup/conten203: //file_put_contents( get_home_path() . '/../theme/plugins/envato_setup/conten204: //file_put_contents( get_home_path() . '/../theme/plugins/envato_setup/contenfile_put_contents was found in the file envato-setup-export.php 200: //file_put_contents( get_home_path() . '/../theme/plugins/envato_setup/conten201: //file_put_contents( get_home_path() . '/../theme/plugins/envato_setup/conten202: //file_put_contents( get_home_path() . '/../theme/plugins/envato_setup/conten203: //file_put_contents( get_home_path() . '/../theme/plugins/envato_setup/conten204: //file_put_contents( get_home_path() . '/../theme/plugins/envato_setup/contenfile_put_contents was found in the file envato_setup.php 1426: //file_put_contents( $new_theme_path.'/style.css', $css );
  4. Admin menu : Themes should use add_theme_page() for adding admin pages. File admin.php : 300: add_action( 'admin_menu', array( $this, 'et_add_menu_page' ) );303: public function et_add_menu_page(){304: add_menu_page( File admin.php : 313: add_submenu_page(323: add_submenu_page(334: add_submenu_page(343: add_submenu_page(351: add_submenu_page(359: add_submenu_page(369: add_submenu_page(378: add_submenu_page(File admin.php : 313: add_submenu_page(323: add_submenu_page(334: add_submenu_page(343: add_submenu_page(351: add_submenu_page(359: add_submenu_page(369: add_submenu_page(378: add_submenu_page(File admin.php : 313: add_submenu_page(323: add_submenu_page(334: add_submenu_page(343: add_submenu_page(351: add_submenu_page(359: add_submenu_page(369: add_submenu_page(378: add_submenu_page(File admin.php : 313: add_submenu_page(323: add_submenu_page(334: add_submenu_page(343: add_submenu_page(351: add_submenu_page(359: add_submenu_page(369: add_submenu_page(378: add_submenu_page(File admin.php : 313: add_submenu_page(323: add_submenu_page(334: add_submenu_page(343: add_submenu_page(351: add_submenu_page(359: add_submenu_page(369: add_submenu_page(378: add_submenu_page(File admin.php : 313: add_submenu_page(323: add_submenu_page(334: add_submenu_page(343: add_submenu_page(351: add_submenu_page(359: add_submenu_page(369: add_submenu_page(378: add_submenu_page(File admin.php : 313: add_submenu_page(323: add_submenu_page(334: add_submenu_page(343: add_submenu_page(351: add_submenu_page(359: add_submenu_page(369: add_submenu_page(378: add_submenu_page(File admin.php : 313: add_submenu_page(323: add_submenu_page(334: add_submenu_page(343: add_submenu_page(351: add_submenu_page(359: add_submenu_page(369: add_submenu_page(378: add_submenu_page(File theme-options.php : 173: // For a full list of options, visit: http://codex.wordpress.org/Function_Reference/add_submenu_page#Parameters
  5. Included plugins : Zip file found Plugins are not allowed in themes. The zip file found was et-core-plugin.zip.
Warning
  1. theme tags : Presence of bad theme tagsFound wrong tag in style.css header.
  2. Text domain : Incorrect use of translation functions.More than one text-domain is being used in this theme. This means the theme will not be compatible with WordPress.org language packs. The domains found are xstore, woocommerce, envato-market.
  3. Hidden admin bar : Hidden admin Bar in CSSThemes should not hide admin bar. Detected in file style.css.
  4. Custom elements : Presence of custom headerNo reference to custom header was found in the theme.
  5. Custom elements : Presence of custom backgroundNo reference to custom background was found in the theme.
  6. Editor style : Presence of editor styleNo reference to add_editor_style() was found in the theme. It is recommended that the theme implements editor styling, so as to make the editor content match the resulting post output in the theme, for a better user experience.
  7. Date and time implementation : Use of the_time()At least one hard coded date was found in the file content-grid-2.php. Function get_option( 'date_format' ) should be used instead.At least one hard coded date was found in the file content-grid.php. Function get_option( 'date_format' ) should be used instead.At least one hard coded date was found in the file content.php. Function get_option( 'date_format' ) should be used instead.
  8. Screenshot : Screenshot fileScreenshot size is 880x660px. Screenshot size should be 1200x900, to account for HiDPI displays. Any 4:3 image size is acceptable, but 1200x900 is preferred.Bad screenshot file extension ! File screenshot.png is not an actual JPG file. Detected type was : "image/png".
Tip-off
  1. Static links : Presence of hard-coded linksPossible hard-coded links were found in the file admin.php.565: <li>1. <?php esc_html_e('Please enter your Envato account and find ', 'xstore'); ?> <a href='https://themeforest.net/downloads'><?php esc_html_e('Downloads tab', 'xstor576: <a href='https://themeforest.net/item/xstore-responsive-woocommerce-theme/15780546?u766: <div class='text-center'><a href='https://www.youtube.com/channel/UCiZY0AJRFoKhLrkCXomrfmA' class='et-button 815: <li><a href='https://xstore.helpscoutdocs.com/article/4-theme-package' target='_blank'>'816: <li><a href='https://xstore.helpscoutdocs.com/article/12-theme-installation' target='_bl817: <li><a href='https://xstore.helpscoutdocs.com/article/32-child-theme' target='_blank'>' 818: <li><a href='https://xstore.helpscoutdocs.com/article/34-demo-content' target='_blank'>'819: <li><a href='https://xstore.helpscoutdocs.com/article/45-8theme-page-post-layout-setting820: <li><a href='https://xstore.helpscoutdocs.com/article/42-portfolio-page' target='_blank'821: <li><a href='https://xstore.helpscoutdocs.com/article/43-blank-page' target='_blank'>' .825: <li><a href='https://xstore.helpscoutdocs.com/article/63-theme-update' target='_blank'>'829: <li><a href='https://xstore.helpscoutdocs.com/article/86-general-information' target='_b830: <li><a href='https://xstore.helpscoutdocs.com/article/27-mega-menu' target='_blank'>' . 831: <li><a href='https://xstore.helpscoutdocs.com/article/88-one-page-menu' target='_blank'>835: <li><a href='https://xstore.helpscoutdocs.com/article/30-base-theme-translation' target=836: <li><a href='https://xstore.helpscoutdocs.com/article/31-translation-with-wpml' target='840: <li><a href='https://xstore.helpscoutdocs.com/article/48-widgets-custom-widget-areas' ta841: <li><a href='https://xstore.helpscoutdocs.com/article/47-static-blocks' target='_blank'>842: <li><a href='https://xstore.helpscoutdocs.com/article/46-xstore-shortcodes' target='_bla846: <li><a href='https://xstore.helpscoutdocs.com/article/29-general-information' target='_b847: <li><a href='https://xstore.helpscoutdocs.com/article/67-shop-page' target='_blank'>' . 848: <li><a href='https://xstore.helpscoutdocs.com/article/68-single-product-page' target='_b849: <li><a href='https://xstore.helpscoutdocs.com/article/89-product-images' target='_blank'853: <li><a href='https://xstore.helpscoutdocs.com/article/35-general-info' target='_blank'>'854: <li><a href='https://xstore.helpscoutdocs.com/article/36-included-plugins' target='_blan855: <li><a href='https://xstore.helpscoutdocs.com/article/37-plugins-update' target='_blank'856: <li><a href='https://xstore.helpscoutdocs.com/article/38-activation-and-purchase-codes' 857: <li><a href='https://xstore.helpscoutdocs.com/article/65-woocommerce-infinite-scroll-and858: <li><a href='https://xstore.helpscoutdocs.com/article/91-mail-chimp-form-custom-styles' 862: <li><a href='https://xstore.helpscoutdocs.com/article/64-how-to-add-custom-favicon' targ863: <li><a href='https://xstore.helpscoutdocs.com/article/69-how-to-add-slider-banner-in-pro864: <li><a href='https://xstore.helpscoutdocs.com/article/87-facebook-login' target='_blank'865: <li><a href='https://xstore.helpscoutdocs.com/article/41-contact-page' target='_blank'>'866: <li><a href='https://xstore.helpscoutdocs.com/article/44-blog-page' target='_blank'>' . 867: <li><a href='https://xstore.helpscoutdocs.com/article/90-how-to-find-your-themeforest-it871: <li><a href='https://xstore.helpscoutdocs.com/article/25-support' target='_blank'>' . esPossible hard-coded links were found in the file theme-options.php.3437: 'subtitle' => esc_html__('Choose the design type for the products on the shop page. Custom type allows you to choose the design created using', 'xstore' ) . ' <a href='https://kb.wpbakery.com/docs/learning-more/grid-builder/' target='blank'>' 3456: Choose the design created using %1s. Find the Video tutorials for builder usage %2s', 'xstore' ), '<a href='https://wpbakery.com/video-academy/category/grid/' target='_blank'>' . esc_5271: 'desc' => sprintf (esc_html__( 'To create FaceBook APP ID follow the instructions %1s Check theme documentation if it does not work for you %2s', 'xstore' ), '<a href='https://developers.facebook.com/docs/apps/register' target='blank'>https://Possible hard-coded links were found in the file envato_setup.php.520: <!-- <p class='copyrights'>© Created by <a href='https://www.8theme.com/' target='_blank'>8theme</a> - Power Elite ThemeFore1472: <a href='https://www.8theme.com/forums/' target='_blank'>1269: <p class='purchase-code-bg'><a href='https://themeforest.net/downloads' target='blank'><?php esc_html_e('ThemeFo1270: <p><a href='https://themeforest.net/downloads' target='blank'><img src='<?php echo ETHE1269: <p class='purchase-code-bg'><a href='https://themeforest.net/downloads' target='blank'><?php esc_html_e('ThemeFo1270: <p><a href='https://themeforest.net/downloads' target='blank'><img src='<?php echo ETHE1271: <p class='et-message et-info last-item'><?php esc_html_e('A purchase code (license) is only valid for One Project. Do you want to use this theme for a one more project? Purchase a new license ', 'xstore'); ?> <a href='https://themeforest.net/item/xstore-responsive-woocommerce-theme/15780546?l
  2. Optional files : Presence of rtl stylesheet rtl.cssThis theme does not contain optional file rtl.php.
  3. Optional files : Presence of front page template file front-page.phpThis theme does not contain optional file front-page.php.
  4. Optional files : Presence of home template file home.phpThis theme does not contain optional file home.php.
  5. Optional files : Presence of date/time template file date.phpThis theme does not contain optional file date.php.
  6. Optional files : Presence of image template file image.phpThis theme does not contain optional file image.php.
  7. Use of includes : Use of include or requireThe theme appears to use include or require : init.php 3: require_once( apply_filters('etheme_file_url', ETHEME_THEME . 'functions.ph4: require_once( apply_filters('etheme_file_url', ETHEME_THEME . 'custom-style If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : theme-init.php 136: require_once( $locale_file ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : init.php 33: require_once( ETHEME_BASE . ETHEME_CODE . 'helpers.php' );38: require_once( apply_filters('etheme_file_url', ETHEME_CODE . 'theme-functio43: require_once( apply_filters('etheme_file_url', ETHEME_CODE . 'template-elem48: require_once( apply_filters('etheme_file_url', ETHEME_CODE . 'walkers.php')53: require_once( apply_filters('etheme_file_url', ETHEME_CODE . 'theme-init.ph58: require_once( apply_filters('etheme_file_url', ETHEME_CODE_3D . 'envato_set63: require_once( apply_filters('etheme_file_url', ETHEME_CODE . 'shortcodes.ph68: require_once( apply_filters('etheme_file_url', ETHEME_CODE_POST_TYPES . 'st69: require_once( apply_filters('etheme_file_url', ETHEME_CODE_POST_TYPES . 'po74: require_once( apply_filters('etheme_file_url', ETHEME_CODE . 'vc.php') );79: require_once( apply_filters('etheme_file_url', ETHEME_CODE_3D . 'tgm-plugin85: require_once( apply_filters('etheme_file_url', ETHEME_CODE_3D . 'parse-vide102: require_once( apply_filters('etheme_file_url', ETHEME_CODE . 'woo.php') );103: require_once( apply_filters('etheme_file_url', ETHEME_CODE . 'woo/video.php111: require_once( apply_filters('etheme_file_url', ETHEME_CODE_3D . 'options-fr116: require_once( apply_filters('etheme_file_url', ETHEME_CODE . 'theme-options124: require_once( apply_filters('etheme_file_url', ETHEME_CODE . 'sidebars.php'131: require_once( apply_filters('etheme_file_url', ETHEME_CODE . 'custom-metabo139: require_once( apply_filters('etheme_file_url', ETHEME_CODE . 'system-requir141: require_once( apply_filters('etheme_file_url', ETHEME_CODE . 'admin.php') )143: require_once( apply_filters('etheme_file_url', ETHEME_CODE_3D . 'menu-image148: require_once( apply_filters('etheme_file_url', ETHEME_CODE . 'version-check If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : theme-options.php 5456: require_once ( ABSPATH . '/wp-admin/includes/file.php' ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : envato_setup.php 599: //@include('envato-setup-export.php');666: require_once( ABSPATH . 'wp-admin/includes/file.php' );1420: require_once ( ABSPATH . '/wp-admin/includes/file.php' ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : loader.php 22: require_once( $class_file ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : field_fonts_uploader.php 234: if ( ! function_exists( 'wp_handle_upload' ) ) require_once( ABSPATH . 'wp-admin/includes/file.php' ); If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.The theme appears to use include or require : helpers.php 38: require_once($path) ;42: require_once($path) ; If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
Other checked themes
98

WordPress 6.7 theme

79

WordPress 6.7 theme

58

WordPress 6.7 theme