If on a tight budget, look for 100% legal GPL redistribution sites that do not alter the code or add malware.
Use highly-rated, secure free alternatives from the official WordPress repository like Astra , OceanWP , or GeneratePress .
Hackers hide PHP backdoors inside the theme files to access your site.
The script may silently inject spam links into your site, ruining your Google ranking.
Instead of risking your site's security, consider these safe options: