Vulnerable issue on website when activated this theme

Hello @CakeOwls,

Thank you for providing the details. The issue on your website is not related to the theme settings or theme code, but rather to your Cloudflare configuration and hosting settings, which are causing the redirections. We kindly recommend that you contact your hosting provider’s support team for further assistance.

If you have any additional questions, please feel free to reach out to us.

Best regards,
Jack Richardson
The 8Theme’s Team

Hello @CakeOwls,

Yes, we have reviewed your video, and it indicates that the redirection is being handled by Cloudflare technology. Changing the theme may resolve this issue, as such redirections can be cached for the currently used theme, and switching the theme often fixes the problem.

Also, you can try to check from another browser, as it can be some extention installed on your browser.

We kindly ask you to contact your hosting provider and submit a support request. Once you receive any feedback, please attach it to this topic so that we can review it further.

Best regards,
Jack Richardson
The 8Theme’s Team

Hello @CakeOwls,

We checked the issue on our side and it is not recreated (video of our testing is attached in private content).

Therefore it can be some redirection based on your IPs only:

We kindly ask you to contact your hosting provider and submit a support request. Once you receive any feedback, please attach it to this topic so that we can review it further.

Kind regards, Jack Richardson
The 8theme’s team

Hello, CakeOwls,

The XStore theme cannot create a redirect only for one specific Windows browser. If the redirect were caused by the theme, it would appear on all devices and browsers when the theme is active.

Since the issue cannot be reproduced in Incognito mode or on other devices, it means the redirect is stored or triggered locally on your Windows computer. The most likely causes are the browser cache, a browser extension, antivirus software, DNS cache, or a previously stored redirect.

Activating the theme only causes the website files to reload, which may trigger the old cached redirect again. The theme itself does not contain or generate this security warning page.

Please try the following:

1. Open the website in Incognito mode without logging in.
2. Disable all browser extensions.
3. Clear the browser cache, cookies, and site data.
4. Test the website in another browser on the same Windows computer.
5. Temporarily check whether antivirus or browser security software is redirecting the page.
6. Clear the Windows DNS cache.

You can also ask your hosting provider to scan the website and check the server redirect rules, but based on the tests, this issue is not generated by the XStore theme.

Best Regards,
8Theme’s Team

Hello, CakeOwls,

Thank you for the additional information.

However, you have not yet responded to our previous request:

We kindly ask you to contact your hosting provider and submit a support request. Once you receive any feedback, please attach it to this topic so that we can review it further.

Since the redirect occurs for logged-out visitors across different devices and locations, the hosting provider needs to check the server configuration, security rules, caching system, malware scanner, and any redirects applied before WordPress or the theme is loaded.

Please contact your hosting provider and share their complete response here.

Also, please record a video showing the full process from the beginning, including:

* The website URL.
* The logged-out state.
* The moment the redirect occurs.
* The browser address bar and final redirected URL.
* The same test with XStore activated and with another theme activated.

Please note that our support is provided through the support forum, and we do not arrange Google Meet or other video calls. You can upload the recorded video to a file-sharing service and provide the link in this topic.

Best Regards,
8Theme’s Team