12
Validation results

XStore

XStore

WordPress 6.7 theme
12
This theme seems to be proprietary. Themecheck doesn't distribute commercial themes.
Critical alerts
  1. Presence of iframes : iframes are sometimes used to load unwanted adverts and malicious code on another site Found <iframe width="100%" height="560" src="' . $embed . '" frameborder="0" allowfullscreen> in file template-elements.php. 
    Ligne1474: <iframe width='100%' height='560' src='' . $embed . '' frameborder='0' allo
  2. Malware : Operations on file system file_get_contents was found in the file system-requirements.php 
    Ligne75: 'f_get_contents'    => function_exists( 'file_get_contents' ),
    Ligne238: <td>file_get_contents( ):</td>
    file_put_contents was found in the file envato-setup-export.php 
    Ligne200: //file_put_contents( get_home_path() . '/../theme/plugins/envato_setup/conten
    Ligne201: //file_put_contents( get_home_path() . '/../theme/plugins/envato_setup/conten
    Ligne202: //file_put_contents( get_home_path() . '/../theme/plugins/envato_setup/conten
    Ligne203: //file_put_contents( get_home_path() . '/../theme/plugins/envato_setup/conten
    Ligne204: //file_put_contents( get_home_path() . '/../theme/plugins/envato_setup/conten
    file_put_contents was found in the file envato-setup-export.php 
    Ligne200: //file_put_contents( get_home_path() . '/../theme/plugins/envato_setup/conten
    Ligne201: //file_put_contents( get_home_path() . '/../theme/plugins/envato_setup/conten
    Ligne202: //file_put_contents( get_home_path() . '/../theme/plugins/envato_setup/conten
    Ligne203: //file_put_contents( get_home_path() . '/../theme/plugins/envato_setup/conten
    Ligne204: //file_put_contents( get_home_path() . '/../theme/plugins/envato_setup/conten
    file_put_contents was found in the file envato-setup-export.php 
    Ligne200: //file_put_contents( get_home_path() . '/../theme/plugins/envato_setup/conten
    Ligne201: //file_put_contents( get_home_path() . '/../theme/plugins/envato_setup/conten
    Ligne202: //file_put_contents( get_home_path() . '/../theme/plugins/envato_setup/conten
    Ligne203: //file_put_contents( get_home_path() . '/../theme/plugins/envato_setup/conten
    Ligne204: //file_put_contents( get_home_path() . '/../theme/plugins/envato_setup/conten
    file_put_contents was found in the file envato-setup-export.php 
    Ligne200: //file_put_contents( get_home_path() . '/../theme/plugins/envato_setup/conten
    Ligne201: //file_put_contents( get_home_path() . '/../theme/plugins/envato_setup/conten
    Ligne202: //file_put_contents( get_home_path() . '/../theme/plugins/envato_setup/conten
    Ligne203: //file_put_contents( get_home_path() . '/../theme/plugins/envato_setup/conten
    Ligne204: //file_put_contents( get_home_path() . '/../theme/plugins/envato_setup/conten
    file_put_contents was found in the file envato-setup-export.php 
    Ligne200: //file_put_contents( get_home_path() . '/../theme/plugins/envato_setup/conten
    Ligne201: //file_put_contents( get_home_path() . '/../theme/plugins/envato_setup/conten
    Ligne202: //file_put_contents( get_home_path() . '/../theme/plugins/envato_setup/conten
    Ligne203: //file_put_contents( get_home_path() . '/../theme/plugins/envato_setup/conten
    Ligne204: //file_put_contents( get_home_path() . '/../theme/plugins/envato_setup/conten
    file_put_contents was found in the file envato_setup.php 
    Ligne1432: //file_put_contents( $new_theme_path.'/style.css', $css );
  3. Admin menu : Themes should use add_theme_page() for adding admin pages. File admin.php : 
    Ligne301: add_action( 'admin_menu', array( $this, 'et_add_menu_page' ) );
    Ligne304: public function et_add_menu_page(){
    Ligne305: add_menu_page(
    File admin.php : 
    Ligne314: add_submenu_page(
    Ligne324: add_submenu_page(
    Ligne335: add_submenu_page(
    Ligne344: add_submenu_page(
    Ligne352: add_submenu_page(
    Ligne362: add_submenu_page(
    Ligne371: add_submenu_page(
    Ligne380: add_submenu_page(
    File admin.php : 
    Ligne314: add_submenu_page(
    Ligne324: add_submenu_page(
    Ligne335: add_submenu_page(
    Ligne344: add_submenu_page(
    Ligne352: add_submenu_page(
    Ligne362: add_submenu_page(
    Ligne371: add_submenu_page(
    Ligne380: add_submenu_page(
    File admin.php : 
    Ligne314: add_submenu_page(
    Ligne324: add_submenu_page(
    Ligne335: add_submenu_page(
    Ligne344: add_submenu_page(
    Ligne352: add_submenu_page(
    Ligne362: add_submenu_page(
    Ligne371: add_submenu_page(
    Ligne380: add_submenu_page(
    File admin.php : 
    Ligne314: add_submenu_page(
    Ligne324: add_submenu_page(
    Ligne335: add_submenu_page(
    Ligne344: add_submenu_page(
    Ligne352: add_submenu_page(
    Ligne362: add_submenu_page(
    Ligne371: add_submenu_page(
    Ligne380: add_submenu_page(
    File admin.php : 
    Ligne314: add_submenu_page(
    Ligne324: add_submenu_page(
    Ligne335: add_submenu_page(
    Ligne344: add_submenu_page(
    Ligne352: add_submenu_page(
    Ligne362: add_submenu_page(
    Ligne371: add_submenu_page(
    Ligne380: add_submenu_page(
    File admin.php : 
    Ligne314: add_submenu_page(
    Ligne324: add_submenu_page(
    Ligne335: add_submenu_page(
    Ligne344: add_submenu_page(
    Ligne352: add_submenu_page(
    Ligne362: add_submenu_page(
    Ligne371: add_submenu_page(
    Ligne380: add_submenu_page(
    File admin.php : 
    Ligne314: add_submenu_page(
    Ligne324: add_submenu_page(
    Ligne335: add_submenu_page(
    Ligne344: add_submenu_page(
    Ligne352: add_submenu_page(
    Ligne362: add_submenu_page(
    Ligne371: add_submenu_page(
    Ligne380: add_submenu_page(
    File admin.php : 
    Ligne314: add_submenu_page(
    Ligne324: add_submenu_page(
    Ligne335: add_submenu_page(
    Ligne344: add_submenu_page(
    Ligne352: add_submenu_page(
    Ligne362: add_submenu_page(
    Ligne371: add_submenu_page(
    Ligne380: add_submenu_page(
    File theme-options.php : 
    Ligne201: // For a full list of options, visit: http://codex.wordpress.org/Function_Reference/add_submenu_page#Parameters
  4. Included plugins : Zip file found Plugins are not allowed in themes. The zip file found was et-core-plugin.zip.
Warning
  1. theme tags : Presence of bad theme tagsFound wrong tag in style.css header.
  2. Text domain : Incorrect use of translation functions.More than one text-domain is being used in this theme. This means the theme will not be compatible with WordPress.org language packs. The domains found are xstore, envato-market.
  3. Hidden admin bar : Hidden admin Bar in CSSThemes should not hide admin bar. Detected in file style.css.
  4. Custom elements : Presence of custom headerNo reference to custom header was found in the theme.
  5. Custom elements : Presence of custom backgroundNo reference to custom background was found in the theme.
  6. Editor style : Presence of editor styleNo reference to add_editor_style() was found in the theme. It is recommended that the theme implements editor styling, so as to make the editor content match the resulting post output in the theme, for a better user experience.
  7. Date and time implementation : Use of the_time()At least one hard coded date was found in the file content-grid-2.php. Function get_option( 'date_format' ) should be used instead.At least one hard coded date was found in the file content-grid.php. Function get_option( 'date_format' ) should be used instead.At least one hard coded date was found in the file content.php. Function get_option( 'date_format' ) should be used instead.
  8. Screenshot : Screenshot fileScreenshot size is 880x660px. Screenshot size should be 1200x900, to account for HiDPI displays. Any 4:3 image size is acceptable, but 1200x900 is preferred.Bad screenshot file extension ! File screenshot.png is not an actual JPG file. Detected type was : "image/png".
Tip-off
  1. Static links : Presence of hard-coded linksPossible hard-coded links were found in the file admin.php.
    Ligne567: <li>1. <?php esc_html_e('Please enter your Envato account and find ', 'xstore'); ?> <a href='https://themeforest.net/downloads'><?php esc_html_e('Downloads tab', 'xstor
    Ligne578: <a href='https://themeforest.net/item/xstore-responsive-woocommerce-theme/15780546?u
    Ligne768: <div class='text-center'><a href='https://www.youtube.com/channel/UCiZY0AJRFoKhLrkCXomrfmA' class='et-button 
    Ligne817: <li><a href='https://xstore.helpscoutdocs.com/article/4-theme-package' target='_blank'>'
    Ligne818: <li><a href='https://xstore.helpscoutdocs.com/article/12-theme-installation' target='_bl
    Ligne819: <li><a href='https://xstore.helpscoutdocs.com/article/32-child-theme' target='_blank'>' 
    Ligne820: <li><a href='https://xstore.helpscoutdocs.com/article/34-demo-content' target='_blank'>'
    Ligne821: <li><a href='https://xstore.helpscoutdocs.com/article/45-8theme-page-post-layout-setting
    Ligne822: <li><a href='https://xstore.helpscoutdocs.com/article/42-portfolio-page' target='_blank'
    Ligne823: <li><a href='https://xstore.helpscoutdocs.com/article/43-blank-page' target='_blank'>' .
    Ligne827: <li><a href='https://xstore.helpscoutdocs.com/article/63-theme-update' target='_blank'>'
    Ligne831: <li><a href='https://xstore.helpscoutdocs.com/article/86-general-information' target='_b
    Ligne832: <li><a href='https://xstore.helpscoutdocs.com/article/27-mega-menu' target='_blank'>' . 
    Ligne833: <li><a href='https://xstore.helpscoutdocs.com/article/88-one-page-menu' target='_blank'>
    Ligne837: <li><a href='https://xstore.helpscoutdocs.com/article/30-base-theme-translation' target=
    Ligne838: <li><a href='https://xstore.helpscoutdocs.com/article/31-translation-with-wpml' target='
    Ligne842: <li><a href='https://xstore.helpscoutdocs.com/article/48-widgets-custom-widget-areas' ta
    Ligne843: <li><a href='https://xstore.helpscoutdocs.com/article/47-static-blocks' target='_blank'>
    Ligne844: <li><a href='https://xstore.helpscoutdocs.com/article/46-xstore-shortcodes' target='_bla
    Ligne848: <li><a href='https://xstore.helpscoutdocs.com/article/29-general-information' target='_b
    Ligne849: <li><a href='https://xstore.helpscoutdocs.com/article/67-shop-page' target='_blank'>' . 
    Ligne850: <li><a href='https://xstore.helpscoutdocs.com/article/68-single-product-page' target='_b
    Ligne851: <li><a href='https://xstore.helpscoutdocs.com/article/89-product-images' target='_blank'
    Ligne855: <li><a href='https://xstore.helpscoutdocs.com/article/35-general-info' target='_blank'>'
    Ligne856: <li><a href='https://xstore.helpscoutdocs.com/article/36-included-plugins' target='_blan
    Ligne857: <li><a href='https://xstore.helpscoutdocs.com/article/37-plugins-update' target='_blank'
    Ligne858: <li><a href='https://xstore.helpscoutdocs.com/article/38-activation-and-purchase-codes' 
    Ligne859: <li><a href='https://xstore.helpscoutdocs.com/article/65-woocommerce-infinite-scroll-and
    Ligne860: <li><a href='https://xstore.helpscoutdocs.com/article/91-mail-chimp-form-custom-styles' 
    Ligne864: <li><a href='https://xstore.helpscoutdocs.com/article/64-how-to-add-custom-favicon' targ
    Ligne865: <li><a href='https://xstore.helpscoutdocs.com/article/69-how-to-add-slider-banner-in-pro
    Ligne866: <li><a href='https://xstore.helpscoutdocs.com/article/87-facebook-login' target='_blank'
    Ligne867: <li><a href='https://xstore.helpscoutdocs.com/article/41-contact-page' target='_blank'>'
    Ligne868: <li><a href='https://xstore.helpscoutdocs.com/article/44-blog-page' target='_blank'>' . 
    Ligne869: <li><a href='https://xstore.helpscoutdocs.com/article/90-how-to-find-your-themeforest-it
    Ligne873: <li><a href='https://xstore.helpscoutdocs.com/article/25-support' target='_blank'>' . es
    Possible hard-coded links were found in the file theme-options.php.
    Ligne3470: 'subtitle' => esc_html__('Choose the design type for the products on the shop page. Custom type allows you to choose the design created using', 'xstore' ) . ' <a href='https://kb.wpbakery.com/docs/learning-more/grid-builder/' target='blank'>' 
    Ligne3489: Choose the design created using %1s. Find the Video tutorials for builder usage %2s', 'xstore' ), '<a href='https://wpbakery.com/video-academy/category/grid/' target='_blank'>' . esc_
    Ligne5427: 'desc' => sprintf (esc_html__( 'To create FaceBook APP ID follow the instructions %1s Check theme documentation if it does not work for you %2s', 'xstore' ), '<a href='https://developers.facebook.com/docs/apps/register' target='blank'>https://
    Possible hard-coded links were found in the file envato_setup.php.
    Ligne520: <!-- <p class='copyrights'>© Created by <a href='https://www.8theme.com/' target='_blank'>8theme</a> - Power Elite ThemeFore
    Ligne1478: <a href='https://www.8theme.com/forums/' target='_blank'>
    Ligne1275: <p class='purchase-code-bg'><a href='https://themeforest.net/downloads' target='blank'><?php esc_html_e('ThemeFo
    Ligne1276: <p><a href='https://themeforest.net/downloads' target='blank'><img src='<?php echo ETHE
    Ligne1275: <p class='purchase-code-bg'><a href='https://themeforest.net/downloads' target='blank'><?php esc_html_e('ThemeFo
    Ligne1276: <p><a href='https://themeforest.net/downloads' target='blank'><img src='<?php echo ETHE
    Ligne1277: <p class='et-message et-info last-item'><?php esc_html_e('A purchase code (license) is only valid for One Project. Do you want to use this theme for a one more project? Purchase a new license ', 'xstore'); ?> <a href='https://themeforest.net/item/xstore-responsive-woocommerce-theme/15780546?l
  2. Optional files : Presence of rtl stylesheet rtl.cssThis theme does not contain optional file rtl.php.
  3. Optional files : Presence of front page template file front-page.phpThis theme does not contain optional file front-page.php.
  4. Optional files : Presence of home template file home.phpThis theme does not contain optional file home.php.
  5. Optional files : Presence of date/time template file date.phpThis theme does not contain optional file date.php.
  6. Optional files : Presence of image template file image.phpThis theme does not contain optional file image.php.
  7. Use of includes : Use of include or requireThe theme appears to use include or require : init.php 
    Ligne3: require_once( apply_filters('etheme_file_url', ETHEME_THEME . 'functions.ph
    Ligne4: require_once( apply_filters('etheme_file_url', ETHEME_THEME . 'custom-style
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.    The theme appears to use include or require : theme-init.php 
    Ligne136: require_once( $locale_file );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.    The theme appears to use include or require : init.php 
    Ligne33: require_once( ETHEME_BASE . ETHEME_CODE . 'helpers.php' );
    Ligne38: require_once( apply_filters('etheme_file_url', ETHEME_CODE . 'theme-functio
    Ligne43: require_once( apply_filters('etheme_file_url', ETHEME_CODE . 'template-elem
    Ligne48: require_once( apply_filters('etheme_file_url', ETHEME_CODE . 'walkers.php')
    Ligne53: require_once( apply_filters('etheme_file_url', ETHEME_CODE . 'theme-init.ph
    Ligne58: require_once( apply_filters('etheme_file_url', ETHEME_CODE_3D . 'envato_set
    Ligne63: require_once( apply_filters('etheme_file_url', ETHEME_CODE_POST_TYPES . 'st
    Ligne64: require_once( apply_filters('etheme_file_url', ETHEME_CODE_POST_TYPES . 'po
    Ligne69: require_once( apply_filters('etheme_file_url', ETHEME_CODE . 'vc.php') );
    Ligne74: require_once( apply_filters('etheme_file_url', ETHEME_CODE_3D . 'tgm-plugin
    Ligne80: require_once( apply_filters('etheme_file_url', ETHEME_CODE_3D . 'parse-vide
    Ligne97: require_once( apply_filters('etheme_file_url', ETHEME_CODE . 'woo.php') );
    Ligne98: require_once( apply_filters('etheme_file_url', ETHEME_CODE . 'woo/video.php
    Ligne106: require_once( apply_filters('etheme_file_url', ETHEME_CODE_3D . 'options-fr
    Ligne111: require_once( apply_filters('etheme_file_url', ETHEME_CODE . 'theme-options
    Ligne119: require_once( apply_filters('etheme_file_url', ETHEME_CODE . 'sidebars.php'
    Ligne126: require_once( apply_filters('etheme_file_url', ETHEME_CODE . 'custom-metabo
    Ligne134: require_once( apply_filters('etheme_file_url', ETHEME_CODE . 'system-requir
    Ligne136: require_once( apply_filters('etheme_file_url', ETHEME_CODE . 'admin.php') )
    Ligne138: require_once( apply_filters('etheme_file_url', ETHEME_CODE_3D . 'menu-image
    Ligne143: require_once( apply_filters('etheme_file_url', ETHEME_CODE . 'version-check
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.    The theme appears to use include or require : theme-options.php 
    Ligne5599: require_once ( ABSPATH . '/wp-admin/includes/file.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.    The theme appears to use include or require : envato_setup.php 
    Ligne599: //@include('envato-setup-export.php');
    Ligne666: require_once( ABSPATH . 'wp-admin/includes/file.php' );
    Ligne1426: require_once ( ABSPATH . '/wp-admin/includes/file.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.    The theme appears to use include or require : loader.php 
    Ligne22: require_once( $class_file );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.    The theme appears to use include or require : field_fonts_uploader.php 
    Ligne231: if ( ! function_exists( 'wp_handle_upload' ) ) require_once( ABSPATH . 'wp-admin/includes/file.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.    The theme appears to use include or require : helpers.php 
    Ligne38: require_once($path) ;
    Ligne42: require_once($path) ;
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
Other checked themes
8

WordPress 6.7 theme

15

WordPress 6.7 theme

58

WordPress 6.7 theme