Woodmart Custom JS

Hello,

The fact that someone is adding custom code to your website only indicates that someone has access to your site. This doesn’t necessarily mean that your site is being compromised through the custom field in the theme settings. You need to investigate how exactly your site was compromised and change all passwords. If you’d like, we can advise on where you can remove this field from the code, but it’s unlikely to change anything as long as the attackers have access to your site.

Kind Regards

Try to add the following PHP code snippet to the child theme functions.php file to disable this option and not output any Custom JS code on your website.

add_filter(
    'woodmart_option',
    function ( $opt, $slug ) {
        if ( in_array( $slug, array( 'custom_js', 'js_ready' ), true ) ) {
            $opt = '';
        }

        return $opt;
    },
    10,
    2
);

To hide this field, you can also edit the file wp-content\themes\woodmart\inc\classes\class-theme.php and remove this line

'admin/settings/custom-js',

also edit this file wp-content\themes\woodmart\inc\admin\settings\sections.php and remove the following code

/**
 * Custom JS section.
 */
Options::add_section(
	array(
		'id'       => 'custom_js',
		'name'     => esc_html__( 'Custom JS', 'woodmart' ),
		'priority' => 190,
		'icon'     => 'xts-i-file-code-js',
	)
);