0
Validation results

WorldPlus

WorldPlus

WordPress 4.9.8 theme
0
Critical alerts
  1. Security breaches : Use of base64_encode() Found base64_encode in file main_functions.php.
     $toSend 	 = base64_encode($credentials);
     $toSend 	 = base64_encode($credentials);
  2. Presence of iframes : iframes are sometimes used to load unwanted adverts and malicious code on another site Found <iframe width="100%" height="160" scrolling="no" frameborder="no" src="https://w.soundcloud.com/player/?url=<?php echo esc_url($soundcloud_link)?> in file soundcloud.php.
    Line 26: <iframe width='100%' height='160' scrolling='no' frameborder='no' src='http
    Found <iframe src="//www.facebook.com/plugins/likebox.php?href=<?php echo esc_url($facebook_link)?> in file facebook.php.
    Line 30: <iframe src='//www.facebook.com/plugins/likebox.php?href=<?php echo esc_url
    Found <iframe id="fr" src="https://www.youtube.com/subscribe_widget?p=<?php echo esc_attr($youtube_user)?> in file youtube.php.
    Line 25: <iframe id='fr' src='https://www.youtube.com/subscribe_widget?p=<?php echo 
    Found <iframe allowfullscreen '.$width.' height="'.$height.'" src="'.$type.'"> in file video.php.
    Line 46: echo '<div class='post-iframe'><iframe allowfullscreen '.$width.' height=''.$height.'' src=''.$type.''></i
    Found <iframe frameborder="0" allowfullscreen height="'.$img_height.'" src="'.$type.'"> in file main_functions.php.
    Line 2131: echo '<iframe frameborder='0' allowfullscreen height=''.$img_height.'' src=''.$ty
  3. Malware : Network operations curl_exec was found in the file main_functions.php
    Line 563: $exec = curl_exec($this->ch);
    Line 603: $exec = curl_exec($this->ch);
    Line 643: $exec = curl_exec($this->ch);
    Line 686: $exec = curl_exec($this->ch);
    Line 701: $exec = curl_exec($this->ch);
    curl_exec was found in the file main_functions.php
    Line 563: $exec = curl_exec($this->ch);
    Line 603: $exec = curl_exec($this->ch);
    Line 643: $exec = curl_exec($this->ch);
    Line 686: $exec = curl_exec($this->ch);
    Line 701: $exec = curl_exec($this->ch);
    curl_exec was found in the file main_functions.php
    Line 563: $exec = curl_exec($this->ch);
    Line 603: $exec = curl_exec($this->ch);
    Line 643: $exec = curl_exec($this->ch);
    Line 686: $exec = curl_exec($this->ch);
    Line 701: $exec = curl_exec($this->ch);
    curl_exec was found in the file main_functions.php
    Line 563: $exec = curl_exec($this->ch);
    Line 603: $exec = curl_exec($this->ch);
    Line 643: $exec = curl_exec($this->ch);
    Line 686: $exec = curl_exec($this->ch);
    Line 701: $exec = curl_exec($this->ch);
    curl_exec was found in the file main_functions.php
    Line 563: $exec = curl_exec($this->ch);
    Line 603: $exec = curl_exec($this->ch);
    Line 643: $exec = curl_exec($this->ch);
    Line 686: $exec = curl_exec($this->ch);
    Line 701: $exec = curl_exec($this->ch);
    curl_init was found in the file main_functions.php
    Line 973: $ch = curl_init();
    Line 1069: $ch = curl_init();
    curl_init was found in the file main_functions.php
    Line 973: $ch = curl_init();
    Line 1069: $ch = curl_init();
  4. Admin menu : Themes should use add_theme_page() for adding admin pages. File class-options-framework-admin.php :
    Line 80: add_menu_page(worldplus_theme_name.' Settings', worldplus_theme_name ,'mana
  5. Included plugins : Zip file found Plugins are not allowed in themes. The zip file found was worldplus-shortcode.zip worldplus-custom-posts.zip.
Warning
  1. Text domain : Incorrect use of translation functions.Found a translation function that is missing a text-domain. Function __, with the arguments 'woocommerce' in file review.php.More than one text-domain is being used in this theme. This means the theme will not be compatible with WordPress.org language packs. The domains found are worldplus, meta-box, vbegy, woocommerce, tgmpa.
  2. Custom elements : Presence of custom headerNo reference to custom header was found in the theme.
  3. Custom elements : Presence of custom backgroundNo reference to custom background was found in the theme.
  4. Editor style : Presence of editor styleNo reference to add_editor_style() was found in the theme. It is recommended that the theme implements editor styling, so as to make the editor content match the resulting post output in the theme, for a better user experience.
  5. Featured image : Use of the_post_thumbnail() instead of custom fields for thumbnailsNo reference to the_post_thumbnail was found in the theme.
  6. Screenshot : Screenshot fileScreenshot size is 600x450px. Screenshot size should be 1200x900, to account for HiDPI displays. Any 4:3 image size is acceptable, but 1200x900 is preferred.Bad screenshot file extension ! File screenshot.png is not an actual JPG file. Detected type was : "image/png".
Tip-off
  1. favicon presence : Favicon managementPossible Favicon found in functions.php. Favicons are handled by the Site Icon setting in the customizer since version 4.3.
  2. Static links : Presence of hard-coded linksPossible hard-coded links were found in the file core.php.
    Line 40: $links[] = '<a href='https://metabox.io/docs/'>' . esc_html__( 'Documentation', 'meta-box' ) . '
    Line 41: $links[] = '<a href='https://metabox.io/plugins/'>' . esc_html__( 'Extensions', 'meta-box' ) . '
  3. Optional files : Presence of rtl stylesheet rtl.cssThis theme does not contain optional file rtl.php.
  4. Optional files : Presence of front page template file front-page.phpThis theme does not contain optional file front-page.php.
  5. Optional files : Presence of home template file home.phpThis theme does not contain optional file home.php.
  6. Use of includes : Use of include or requireThe theme appears to use include or require : attachment.php
    Line 40: <?php include(get_template_directory().'/includes/meta.php');
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : header-code.php
    Line 338: include(get_template_directory().'/includes/logo.php');
    Line 375: include(get_template_directory().'/includes/logo.php');
    Line 411: include(get_template_directory().'/includes/breaking-news.php');
    Line 415: include(get_template_directory().'/includes/breaking-news.php');
    Line 569: include(get_template_directory().'/includes/meta.php');
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : taxonomy-portfolio-category.php
    Line 110: include(get_template_directory().'/loop-portfolio.php');
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : loop-portfolio.php
    Line 50: include(get_template_directory().'/includes/not-found.php');
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : page.php
    Line 199: include(get_template_directory().'/includes/meta.php');
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : archive-portfolio.php
    Line 101: include(get_template_directory().'/loop-portfolio.php');
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : single.php
    Line 387: include(get_template_directory().'/includes/meta.php');
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : loop.php
    Line 290: include(get_template_directory().'/includes/meta.php');
    Line 296: include(get_template_directory().'/includes/meta.php');
    Line 382: include(get_template_directory().'/includes/pagination.php');
    Line 385: include(get_template_directory().'/includes/not-found.php');
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : template-blog.php
    Line 141: include(locate_template( 'loop.php' ));
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : file-upload.php
    Line 37: require_once( RWMB_INC_DIR . 'templates/upload.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : media.php
    Line 150: require_once( RWMB_INC_DIR . 'templates/media.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : image-advanced.php
    Line 88: require_once( RWMB_INC_DIR . 'templates/image-advanced.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : recent_posts.php
    Line 86: include(locate_template( 'loop.php' ));
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : template-portfolio.php
    Line 146: include(get_template_directory().'/loop-portfolio.php');
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : shortcode_worldplus.php
    Line 118: require_once(ABSPATH . 'wp-admin' . '/includes/file.php');					
    Line 119: require_once(ABSPATH . 'wp-admin' . '/includes/image.php');
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : functions_worldplus.php
    Line 180: require_once(ABSPATH . 'wp-admin' . '/includes/image.php');
    Line 181: require_once(ABSPATH . 'wp-admin' . '/includes/file.php');
    Line 326: require_once(ABSPATH . 'wp-admin' . '/includes/image.php');
    Line 327: require_once(ABSPATH . 'wp-admin' . '/includes/file.php');
    Line 404: require_once(ABSPATH . 'wp-admin/includes/user.php');
    Line 405: require_once(ABSPATH . 'wp-admin' . '/includes/image.php');
    Line 406: require_once( ABSPATH . 'wp-admin/includes/file.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : single-portfolio.php
    Line 297: include(get_template_directory().'/includes/meta.php');
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : taxonomy-portfolio_tags.php
    Line 100: include(get_template_directory().'/loop-portfolio.php');
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : 404.php
    Line 2: include(get_template_directory().'/includes/404.php');
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.

This is a ThemeForest theme. Since Themeforest items are all checked by a human before they appear on their website, ThemeForest verification rules are more permissive than themecheck's and can give a better verification score ( Themeforest requirements ).

57
Critical alerts
  1. Malware : Network operations curl_exec was found in the file main_functions.php
    Line 563: $exec = curl_exec($this->ch);
    Line 603: $exec = curl_exec($this->ch);
    Line 643: $exec = curl_exec($this->ch);
    Line 686: $exec = curl_exec($this->ch);
    Line 701: $exec = curl_exec($this->ch);
    curl_exec was found in the file main_functions.php
    Line 563: $exec = curl_exec($this->ch);
    Line 603: $exec = curl_exec($this->ch);
    Line 643: $exec = curl_exec($this->ch);
    Line 686: $exec = curl_exec($this->ch);
    Line 701: $exec = curl_exec($this->ch);
    curl_exec was found in the file main_functions.php
    Line 563: $exec = curl_exec($this->ch);
    Line 603: $exec = curl_exec($this->ch);
    Line 643: $exec = curl_exec($this->ch);
    Line 686: $exec = curl_exec($this->ch);
    Line 701: $exec = curl_exec($this->ch);
    curl_exec was found in the file main_functions.php
    Line 563: $exec = curl_exec($this->ch);
    Line 603: $exec = curl_exec($this->ch);
    Line 643: $exec = curl_exec($this->ch);
    Line 686: $exec = curl_exec($this->ch);
    Line 701: $exec = curl_exec($this->ch);
    curl_exec was found in the file main_functions.php
    Line 563: $exec = curl_exec($this->ch);
    Line 603: $exec = curl_exec($this->ch);
    Line 643: $exec = curl_exec($this->ch);
    Line 686: $exec = curl_exec($this->ch);
    Line 701: $exec = curl_exec($this->ch);
    curl_init was found in the file main_functions.php
    Line 973: $ch = curl_init();
    Line 1069: $ch = curl_init();
    curl_init was found in the file main_functions.php
    Line 973: $ch = curl_init();
    Line 1069: $ch = curl_init();
  2. Included plugins : Zip file found Plugins are not allowed in themes. The zip file found was worldplus-shortcode.zip worldplus-custom-posts.zip.
Warning
  1. Text domain : Incorrect use of translation functions.Found a translation function that is missing a text-domain. Function __, with the arguments 'woocommerce' in file review.php.More than one text-domain is being used in this theme. This means the theme will not be compatible with WordPress.org language packs. The domains found are worldplus, meta-box, vbegy, woocommerce, tgmpa.
  2. Featured image : Use of the_post_thumbnail() instead of custom fields for thumbnailsNo reference to the_post_thumbnail was found in the theme.
  3. Screenshot : Screenshot fileScreenshot size is 600x450px. Screenshot size should be 1200x900, to account for HiDPI displays. Any 4:3 image size is acceptable, but 1200x900 is preferred.Bad screenshot file extension ! File screenshot.png is not an actual JPG file. Detected type was : "image/png".
Tip-off
  1. favicon presence : Favicon managementPossible Favicon found in functions.php. Favicons are handled by the Site Icon setting in the customizer since version 4.3.
  2. Static links : Presence of hard-coded linksPossible hard-coded links were found in the file core.php.
    Line 40: $links[] = '<a href='https://metabox.io/docs/'>' . esc_html__( 'Documentation', 'meta-box' ) . '
    Line 41: $links[] = '<a href='https://metabox.io/plugins/'>' . esc_html__( 'Extensions', 'meta-box' ) . '
  3. Optional files : Presence of rtl stylesheet rtl.cssThis theme does not contain optional file rtl.php.
  4. Optional files : Presence of front page template file front-page.phpThis theme does not contain optional file front-page.php.
  5. Optional files : Presence of home template file home.phpThis theme does not contain optional file home.php.
  6. Use of includes : Use of include or requireThe theme appears to use include or require : attachment.php
    Line 40: <?php include(get_template_directory().'/includes/meta.php');
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : header-code.php
    Line 338: include(get_template_directory().'/includes/logo.php');
    Line 375: include(get_template_directory().'/includes/logo.php');
    Line 411: include(get_template_directory().'/includes/breaking-news.php');
    Line 415: include(get_template_directory().'/includes/breaking-news.php');
    Line 569: include(get_template_directory().'/includes/meta.php');
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : taxonomy-portfolio-category.php
    Line 110: include(get_template_directory().'/loop-portfolio.php');
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : loop-portfolio.php
    Line 50: include(get_template_directory().'/includes/not-found.php');
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : page.php
    Line 199: include(get_template_directory().'/includes/meta.php');
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : archive-portfolio.php
    Line 101: include(get_template_directory().'/loop-portfolio.php');
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : single.php
    Line 387: include(get_template_directory().'/includes/meta.php');
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : loop.php
    Line 290: include(get_template_directory().'/includes/meta.php');
    Line 296: include(get_template_directory().'/includes/meta.php');
    Line 382: include(get_template_directory().'/includes/pagination.php');
    Line 385: include(get_template_directory().'/includes/not-found.php');
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : template-blog.php
    Line 141: include(locate_template( 'loop.php' ));
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : file-upload.php
    Line 37: require_once( RWMB_INC_DIR . 'templates/upload.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : media.php
    Line 150: require_once( RWMB_INC_DIR . 'templates/media.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : image-advanced.php
    Line 88: require_once( RWMB_INC_DIR . 'templates/image-advanced.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : recent_posts.php
    Line 86: include(locate_template( 'loop.php' ));
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : template-portfolio.php
    Line 146: include(get_template_directory().'/loop-portfolio.php');
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : shortcode_worldplus.php
    Line 118: require_once(ABSPATH . 'wp-admin' . '/includes/file.php');					
    Line 119: require_once(ABSPATH . 'wp-admin' . '/includes/image.php');
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : functions_worldplus.php
    Line 180: require_once(ABSPATH . 'wp-admin' . '/includes/image.php');
    Line 181: require_once(ABSPATH . 'wp-admin' . '/includes/file.php');
    Line 326: require_once(ABSPATH . 'wp-admin' . '/includes/image.php');
    Line 327: require_once(ABSPATH . 'wp-admin' . '/includes/file.php');
    Line 404: require_once(ABSPATH . 'wp-admin/includes/user.php');
    Line 405: require_once(ABSPATH . 'wp-admin' . '/includes/image.php');
    Line 406: require_once( ABSPATH . 'wp-admin/includes/file.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : single-portfolio.php
    Line 297: include(get_template_directory().'/includes/meta.php');
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : taxonomy-portfolio_tags.php
    Line 100: include(get_template_directory().'/loop-portfolio.php');
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : 404.php
    Line 2: include(get_template_directory().'/includes/404.php');
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
Other checked themes