Common WordPress Theme Issues and Fixes

WordPress themes are the most integral part of the wordpress website development. Themes control the look and feel of your WordPress website, Page layout, and graphics to the colors of text and links. Basically, themes are the base on which your content is placed. It’s really important to get a good theme to get the strong foundation and get the things done easily with looks customizations as well.

If anything broke in the theme or any file goes missing, you will be facing issues in the front end of the site. The main files which should be there in a basic theme are functions.php, header.php, footer.php, index.php, single.php, page.php & style.css.

We face many issues while creating themes or while installing themes. Here is the list of most common wordpress theme issues and fixes.

ISSUE #1: Missing Stylesheet.

Wordpress theme issue - Missing Stylesheet
As mentioned above stylesheet (style.css) file is the main file in the wordpress theme. If the file goes missing, the theme will not be installed at all on your website.

Style.css file contains the main theme metadata like, theme name, theme author, text_domain and much more, which is needed while installing a theme.

FIX #1: This issue can be of two reasons, either your theme really misses the file, or you are uploading the wrong folder in the wordpress.

So first unzip your zip file and check for the style.css file in the root theme folder. If it’s really missing then ask the developer about the file or download the theme again and try the process again.

On the other hand, if you got into the right theme folder and the file is there, then again zip the main theme folder only and upload it to wordpress theme panel to see if its working or not.

If the issue is still there then Contact us for free Consultation.

ISSUE #2: Broken theme files.

If you are using any free theme or any theme downloaded from the internet, then the consequences are very bad for your business. We always encourage you to buy a good theme or hire a good developer to create a theme for you.

If you got any free theme from the internet or bought from anyone at a cheap price then there may be many files which are broken. We got many clients which bought the premium themes at cheap prices and then after some days their websites either got hacked or the files don’t support the wordpress updates.

FIX #2: If your website is showing any theme related issue like any warning or notices. You can fix this issue by log into your FTP and go to the root of the wordpress install and edit the wp-config.php file.

Check for ” define(‘WP_DEBUG’, true); ” near line number 80. This should be false. If it’s true there make it false and re-upload the file.

If you are getting any fatal error or any other error related to theme function.php files or any other files. You can try downloading those files and check for the issue in the given line. If you are unable to fix the issue, give us a call. We will be happy to help you.

ISSUE #3: Demo Import Issue.

Wordpress theme issue - Demo Import Issue
Most of the theme provide theme demo data with theme purchase. Its really easy to set up the website like them theme we choose with demo data. But while installing any demo data you can get errors like Fail to import media or posts.

FIX #3: If you are getting this type of errors then it can be because of several issues.
Theme not installed properly: Reinstall the theme and check if the theme is adding any custom post type well. If not then there may be any issue in the theme, ask the developer about the issue.
If the theme gets installed well. Try to import again. It should work well.

Required Plugins not installed: Some theme needs some plugins which need to be installed before working on the theme. So check for the required plugins under Appearance >> Plugins or you will also get a notice for installation of required plugins. Try re-importing after plugins install.

Data import process is not right: If both of the above-mentioned issues are no where the there must be an issue in your importing process. The correct importing process is
– Install the wordpress importer plugin, which can be installed by going to Tools >> Import >> WordPress Import.
– Click on Run Import.
– Upload the demo data “XML” file.
– Import the users or select your users.
– Check the checkbox “Download and import file attachments”.
– Click Import.
– You are done.

ISSUE #4: Link is not good.

When the wordpress is installed it got installed with the default setting. You need to change the settings as per your needs. If your wordpress website is not getting good clean links and show like site.com/?p=1 then there is need to update settings.
 WordPress theme issue - Ugly Permalinks
FIX #4: You can get clean links by going to Setting >> Permalinks >> Choose Custom Permalinks >> Click Save.

ISSUE #5: Posts and Pages returning 404.

If your website was running good yesterday and it’s returning 404 this morning, then there is no need for panic. It happens many times with wordpress. This may be happening because you activated any other theme. If this is not done, then as well no need to panic.

FIX #5 : Go to Setting >> Permalinks >> Choose Custom Permalinks (if not choosen) >> Click Save.

ISSUE #6: Theme update takes away the changes.

Many of us want to make our websites looks like what we like and there is no way that we can get a theme which is 100% of what we want. So we use to make changes in theme CSS file or other PHP files as well. This is the need of the time. But after the update the theme those all changes goes away. This issue happens to many of our clients which have knowledge of coding but not the wordpress directory structure.

FIX #6:, First of all, I will suggest you use a child theme for any theme styling or functional override. This is the easiest and professional (wordpress recommended) method to make your website looks like what you wish for. By this method, you can update your core theme files anytime without losing any override.

If you did the theme overwrites within the main theme files you should make the backup of the theme first and then update the theme. After that, you will need to do those changes again.

Use Custom CSS plugin: If you want to only override the CSS files then you can use the Custom CSS Plugin which is a good way to manage the CSS without making any child theme.

ISSUE #7: Finished Theme Support

Every theme developer provides theme support for 6 Months or a Year, depending on them. If you took the theme from the internet, then the support will not work for you. As the WordPress is updating very frequently, there are chances that your theme can get issues anytime if it’s not getting updated regularly.

FIX #7: If you are lacking theme support or your theme support got over and you got some issue in the theme, you can contact us at support@waybackk.com.

Why your Site Vulnerable to WordPress Security Issues

Several factors can make your WordPress site more vulnerable to WordPress security issues. Checkout a detailed Article on Common WordPress Security Issues

REASON #1. Weak Passwords

Using a weak password is one of the biggest security threats you can easily avoid. Your WordPress admin password should be strong, that must include multiple types of characters, symbols or numbers. In addition, your password should be specific to your WordPress site and not used anywhere else or any other type of account.

REASON #2. Not Updating WordPress, Plugins or Themes

Running outdated versions of WordPress, plugins, and themes can be an open invitation for attacks. Version updates often include patches for security issues in the previously installed version, so it’s important to always run the latest version of all software installed on your WordPress website.

Updates will appear in your WordPress dashboard as soon as they’re available. Make sure to create a backup and then running all available updates every time you log in to your WordPress site. While the task of running updates may seem inconvenient sometimes but, it’s an important WordPress security best practice.

If you manage more than one WordPress website, then there are plugins available on WordPress repository to sync all site at one place and can help by giving you one dashboard to manage multiple WordPress sites.

REASON #3. Using Plugins and Themes from Untrustworthy Sources

Poorly-written, insecure, nulled or outdated code is one of the most common ways attackers can get access to your WordPress website. Since plugins and themes are potential sources of security threats, as a security best practice, only download and install WordPress plugins and themes from reputable sources, such as from the WordPress.org repository, or from premium companies that have been in business for a while. Also, avoid NULLED or “FREE” versions of premium themes and plugins, as the files may have been altered to contain malware.

REASON #4. Using Poor-Quality or Shared Hosting

Since the server where your WordPress website hosts is a target for attackers, using cheap hosting or shared hosting can make your site more vulnerable to being hacked. While all hosts take precautions to secure their servers, but not all hosting providers uses the latest security measures to protect websites on the server-level.

Shared hosting can also be a concern because multiple websites are stored on a single server. If one website is hacked, attackers may also gain access to other websites and their data. While using a VPS, or virtual private server, is more expensive, it assures your website is stored on its own server.

Common WordPress Security Issues

The most common WordPress security issues occur before or just after your site has been compromised. The goal to hack a website is to the gain unauthorized access on an administrator-level, either from the front end (your WordPress dashboard) or on the server side (by inserting scripts or files).

ISSUE #1. Brute Force Attacks

WordPress brute force attacks are the trial and error method of trying multiple usernames and password combinations again and again until a successful combination is found. The brute force attack method is the simplest way to get access to your website: your WordPress login screen.

WordPress itself doesn’t limit login attempts, so hackers can attack your WordPress login page using the brute force method. Even if a brute force attack is unsuccessful, it can still affect your server, as login attempts can overload your system. While you’re under a brute force attack, some hosts may suspend your account, especially if you’re on a shared hosting plan, due to system overloads.

ISSUE #2. SQL Injections

Your WordPress website uses a MySQL database to handle the backend of your site. SQL injections occur when an attacker gains access to your WordPress database and to all of your website data.

With an SQL injection, an attacker will be able to create a new admin-level user account which further can be used to login and get full access to your WordPress website. SQL injections can also be used to insert new data into your database, including links to malicious or spam websites.

ISSUE #3. File Inclusion Exploits

File Inclusion Exploits are also the way to get access to your WordPress. WordPress website’s PHP code can be used to exploit your website by attackers.

File inclusion exploits occur when the vulnerable code is used to load remote files that allow attackers to gain access to your website. File inclusion exploits are one of the most common ways an attacker can gain access to your WordPress website’s wp-config.php file, one of the most important files in your WordPress installation.

ISSUE #4. Cross-Site Scripting (XSS)

Around 80% of all security vulnerabilities on the entire internet are called Cross-Site Scripting or XSS attacks. Cross-Site Scripting vulnerabilities are the most common vulnerability found in Nulled WordPress plugins or Nulled WordPress Themes.

The basic working procedure of Cross-Site Scripting works like this: an attacker finds a way to get a victim to load web pages with insecure javascript scripts. These scripts load without the knowledge of the visitor and are then used to steal data from their browsers. An example of a Cross-Site Scripting attack would be a hijacked form that appears to reside on your website. If a user inputs data into that form, that data would be stolen.

ISSUE #5. Malware

Malware is the code that is used to gain unauthorized access to a website to gather sensitive data. A hacked WordPress site usually means malware has been injected into your website’s files, so if you suspect malware on your site, take a look at recently changed files.

Although there are many types of malware infections on the web, WordPress is not vulnerable to all of them. The four most common WordPress malware infections are:

  • Backdoors
  • Drive-by downloads
  • Pharma hacks
  • Malicious redirects

Each of these types of malware can be easily identified and cleaned up either by manually removing the malicious file, installing a fresh version of WordPress or by restoring your WordPress site from a previous, non-infected backup.

10 Tips to boost your wordpress site performance

WordPress, as a platform, is extremely well. However, some people mess their WordPress installations up by installing tons of buggy plugins, choosing a slow web host, and filling their site with heaps of garbage.
Even if you don’t do something like mentioned above with your site, there’s still a lot of ways to improve your website when it comes to speeding up. We optimize around 8-10 WordPress sites in an average month, and there are a few techniques we always leverage to optimize and speed up WordPress sites.

How to Check Your WordPress Website Speed?

Often beginners think that their website is OK just because it doesn’t feel slow on their computer. That’s a HUGE mistake.
Since you frequently visit your own website, so your website gets stored in the cache and automatically prefetch it as soon as you start typing an address. This makes your website load almost instantly. but when someone else opens your website they see some time lag in opening the site because there is no cache for them.

Before applying these techniques to your website, I encourage you to check the speed of your website using a free performance service such as GTMetrix, YSlow, Pingdom or Google PageSpeed Insights. These services will inform you of your page loading time and the overall file size of your page. They also offer tips to fix the resulting issues.

FIX #1. Choose the Right Hosting Plan

The initial phase in upgrading your site effectively is to pick the right hosting plan. You are battling a losing fight if your server is taking ages to process HTTP requests and MySQL commands.

Performance services, for example, GTMetrix will educate you with respect to the correct loading time of your server. I suggest testing the loading time of your own site against comparative sites. For instance, on the off chance that you run a photography blog, perceive how your server loading time analyses to other photography write inside your specialty.

Hosting companies are not generally the cause. You might be with incredible Hosting companies however observe poor loading times in light of the fact that your picked Hosting plan is underpowered. Clients utilizing shared hosting plans, for instance, will probably confront moderate loading times as several sites are running on a similar server.

Be that as it may, any kind of hosting plan will experience the ill effects of inadequate RAM and CPU throttling. In this manner, you have to focus on what your site needs to run easily. Try not to be a penny pincher and go for the least expensive alternative. Pick a hosting plan that can deal with the activity of your users.

FIX #2. Use a Fast WordPress Theme Framework

WordPress has the largest theme and plugins directory available. There are many themes and plugins available across many marketplaces on the internet. Some of the themes are very good in features and some are moderate. You should know what are your requirements for your website.

If you are a good coder then you should go for the best running frameworks available in the market. Because if you are a good in coding then you can create a good animation or features, it will keep the theme small in size and fast in loading… but on the other hand if you go for a theme with a lot inbuilt features can delay the loading of you website as most of the time you can’t use all the features a good big theme gives you. So the features which are useless will cause the issues in your website optimization.

Choose a design that has been optimized for desktops, tablets and mobile and other devices. Big search engines favor responsive designs as they ensure all pages have the same URL, however responsive designs that were created specifically for mobile phones can improve a mobile user’s experience considerably.

FIX #3. Monitor Your Plugins

Plugins, these are the most important part of the WordPress site. Today, we have plugins for almost every feature we need in our website you just say the name.
Like themes plugins, some plugins also has a lot of features. So look for the feature you want and search for that only feature providing a plugin.

There are many users who install 20- 30 plugins on their website to get most of the features, the main reason they give is… we want a lot of features so we install this much. But what our take is

If you want to have a lof of features on your website, then go for a good developer or create it on a Framework.

Installing a lot of plugins slow down your website and the slow website is neither liked by search engines nor by your users.

Slow websites looses 3 out of 5 customers. Hence your loss which will be more than the money you save by making website on WordPress instead of a frameworks.

Only install plugins which are needed. Disable the plugins which are not needed. You can use is P3 Profiler developed by GoDaddy, the plugin will show you exactly how much load time your plugins are adding.

FIX #4. Keep Your WordPress Site Updated

As a well maintained open source project, WordPress is updated frequently. Each update will not only offer new features but also fix previous security issues and bugs.

As a website owner, it’s your responsibility to keep your WordPress site, theme, and plugins updated to the latest versions. Not doing so may make your site slow and unreliable, and make you vulnerable to security threats.

FIX #5. Reduce Post Revisions, Drafts, Spam, Pingbacks and Trackbacks

It is not just trash that can increase the size of your database. All post types populate table rows with data. Therefore, it is important to regularly delete spam comments and unwanted pingbacks and trackbacks.

You should also be wary of the number of drafts and post revisions your website has stored. The WordPress revision system allows you to go back to older versions of articles, view them and restore them.

By default, WordPress saves an unlimited number of revisions, however, this is not needed at all. It is better to reduce this limit to something more practical such as three to five. You can do this by adding the following code to your wp-config.php file:

define( 'WP_POST_REVISIONS', 5 );

To disable the revisions completely you can use

define( 'WP_POST_REVISIONS', false );

A best way of cleaning your WordPress database is to use WP Optimize. The plugin can automatically remove auto-drafts, spam comments, trackbacks and more.

FIX #6. Use Excerpts on Homepage and Archives

By default, WordPress displays the full content of each article on your homepage and archives. This means your home, categories, tags, and other archive pages will all load full content and hence slower.

In order to speed up your loading times for archive pages, you can set your site to display excerpts instead of the full content.

You can navigate to Settings » Reading and select For each article in a feed, show: “Summary” instead of “Full Text.”

FIX #7. Optimize Your Images for the Web

Images can help break up long pieces of text and can help your articles be shared more frequently on social media services; however, they also take up a lot of storage. Therefore, pages that contain many images can take a long time to load.

A good plugin to optimize images that have already been uploaded is WP Smush.it. It utilizes the Smush.it API to optimize images. This plugin will optimize the images and your images will be of small size and nearly without any loss in the quality.

If you do not want to sacrifice image quality, check out Lazy Load. The plugin ensures that images are only loaded when the area becomes visible to the user. This will greatly reduce page loading times.

FIX #8. Add Caching Plugin

Caching is a techineque which help you load your website fast. Caching your pages is one of the most effective ways of improving your page loading times, with many plugins promising an improvement of at least ten times. Popular caching plugins include WP Super Cache, W3 Total Cache and WP Fastest Cache. All three plugins are available free. These plugins provide almost all of the features needed to increase the speed of the site like browser cache, Object Cache, minify CSS, Js and HTML, Database Cache etc.

FIX #9. Use a Content Delivery Network

Your website is hosted in a data center somewhere in the world. The further a visitor is from the location of your data center, the longer it takes for your web pages to load.

Content Delivery Networks (CDN) address this issue by creating dozens of data centers around the world. They take the heavy work away from your hosting company by hosting your images, CSS and Javascript files, and serving these files to visitors from the closest location to them.

Popular content delivery networks include MaxCDN, Amazon CloudFront and CloudFlare. The cost of these services varies according to how much bandwidth your website uses. You can try CloudFlare as they provide forever free plans as well.

FIX #10. Disable Hotlinking and Leaching of Your Content

Hotlinking is a process where some other website takes your content and images directly from your hosting and added to there without adding any images to their server. This helps them to load their site fast because there host is not loading any images instead your host is loading your images for them.

Simply add this code to your .htaccess file to block hotlinking of images from your WordPress site.

#disable hotlinking of images with forbidden or custom image option
RewriteEngine on
RewriteCond %{HTTP_REFERER} !^$
RewriteCond %{HTTP_REFERER} !^http(s)?://(www\.)?yourdomain.com [NC]
RewriteCond %{HTTP_REFERER} !^http(s)?://(www\.)?google.com [NC]
RewriteRule \.(jpg|jpeg|png|gif)$ – [NC,F,L]

Note: Don’t forget to change yourdomain.com with your own domain.

That’s it! We hope this article helped you learn some useful methods to speed up WordPress and boost performance.
Go ahead and try out these techniques. Be sure to test your site’s speed before and after, and let us know your results in the comments or request free consultation

WordPress Security Fixes

Getting Hacked is the worst thing ever can happen to any business. But it happens. Especially if you don’t take the proper precautions to protect your website.

The biggest problem with WordPress security is that users put themselves at risk without knowing. Seemingly innocent habits could be making you vulnerable to hackers.

Fortunately, keeping WordPress secure is not actually that difficult. It just requires a few basic tweaks to your current setup.

If you own a WordPress Hacked Site, we are here to help. We can clean and update your WordPress Site in 24 hours or less. Request Free Consultation Now!

Here are some of the Tips which you can use to make your website safe:

WORDPRESS SECURITY FIX #1: DELETE THE ADMIN USER

This is quite simple:

Go to Users > Add New and create a new user. Set the role to administrator.
Log in with that new user.
Go to Users and delete admin
WordPress will ask if you want to delete that user’s content or re-assign it to a different user. Choose to reassign all content to your new user to avoid losing anything during this process.

WORDPRESS SECURITY FIX #2: USE STRONG PASSWORD

We all know that weak passwords are a security threat. And yet, for whatever reason, we all keep using them. We know we shouldn’t it, but we can’t help ourselves.

It’s time to stop.
Using strong passwords is one of the easiest ways to keep your website secure. And it’s not difficult to do.

WordPress has a password generator built in that will create a strong password for you. All you have to do is click a button.

WORDPRESS SECURITY FIX #3: UPDATE YOUR WORDPRESS

Noting in the world is perfect, no matter how much we work hard, something left behind. No matter how many great developers are working for wordpress but still some issues remains there… which can be removed regularly by wordpress. So do update your wordpress whenever a new update is available.
WordPress makes managing updates simple. Any time a plugin, theme, or core update is available, you’ll get a notification in your toolbar. Its the one that looks like a circle with two arrows.

WORDPRESS SECURITY FIX #4: DELETE UNWANTED THEME AND PLUGINS

– Go through your Users. Delete any accounts you’re no longer using. Just remember to assign that user’s content to a different user so it doesn’t get deleted.
– Take a look at your Plugins. Are any of them deactivated? Delete those.
– While you’re at it, head over to Appearance > Themes. Be ruthless.

WORDPRESS SECURITY FIX #5: INSTALL THE WORDFENCE PLUGIN.

Wordfence has been downloaded 1 million times (literally) and has a rating of 4.9 stars. It’s safe to say that this is a good one.

Wordfence has a few great security features to keep your site on lockdown:

Scanning — Wordfence makes monitoring easy. It scans for known vulnerabilities and file changes that could mean you were hacked. It alerts you if it finds anything fishy.
Limit Logins — This is one of its best features. You can automatically block a user’s IP after too many failed login attempts. This helps prevent brute force attacks.
Update Notices — Wordfence notifies you by email when your website has pending updates. There’s no reason not to be on top of updates when you have this kind of heads up.