About this theme

Latest Version 1.7.0: Released on October 19, 2026 Unreleased (security & performance audit) Security: - Template loader: view names validated, realpath allow-list, isolated extract (EXTR_SKIP) - fixes LFI via AJAX "attr"/"template" and ?type= - AJAX: WP_Query args sent by the browser are allow-listed (post type/status forced, limits), view attrs sanitized (XSS) - AJAX nonces are fetched at runtime (page-cache safe) and retried once; nonce added to quick view - SQL injection fixed in bzotech_display_price_in_variation_option_name() - Reflected XSS fixed (?column=, compare button, breadcrumb, menu/admin fields), ?number= clamped (1..100) - No PHP session for visitors ("Don't show popup" is a cookie; "Session page" demo option is opt-in) - Direct access guards on all PHP files Fix: - Translations loaded too early (theme config, mega menu fields, Redux config moved to init) - Shop AJAX filter (template name), live search product visibility, blog "Load more" page, AJAX category filter - PHP 8.x warnings/TypeErrors (empty prices, missing terms, null values), duplicate Elementor control name Performance: - Request cache for theme options, current ID, WooCommerce page check and attribute taxonomies - Mega menu page IDs cached, no_found_rows on non paginated queries, view counter via AJAX beacon (atomic update) - Google Fonts URL fixed (https, no double encoding, display=swap) Updated: - Slick replaced by Swiper (bzotechCarousel adapter), Magnific Popup replaced by fancyBox - CSS mer

Description excerpt from the author's official listing. Full details, changelog and support terms are on the marketplace page.