Bold Page Builder

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory searches this plugin turns up in, and which way each one is moving. WordPress.org publishes no history of search positions, so this starts the day we first tracked a keyword and never backfills.

wp.org is where the directory puts the plugin for that search. On merit is where it would sit if results were ranked on rating, support and updates, without the install boost. The last column is how far the wp.org position moved, from our first reading in the last 90 days to the latest.

180 searches this plugin appeared in over the last 90 days, 20 listed. 156 left out as unrelated or noise (years, numbers, stray words). 2 of its tags aren't in the top 24 for their own search.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 36% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Crossed into this band 6 months ago and the previous band took 2.9 years to cross, so the real count is still just under 50K.

1. ★★★★★ swapnil1234

   1.5y ago

   In your theme, you want us to use your builder, but it has very limited options when compared with WPBakery or Elementor. 1. In your theme Industrial, the homepage slider is not responsive. There is no option to make that section row to make responsive. 2. Shortcodes added in the text block are not showing on the frontend. You should look into these issues and try to fix them.Thank you

   Read on wp.org ↗
2. ★★★★★ Fausto

   1.5y ago

   Posiblemente el mejor maquetador de WordPress, al menos así me lo parece por su facilidad, rapidez y usabilidad, encima es gratuito. Ágilmente puedes copiar y pegar varios modulos, incopora IA y es una herramienta muy versatil. Me sorprende que no esté más extendida y que no sea más conocida y popular. Es una excelente herramienta. Mucho mejor que WP Bakery, por ejemplo.

   Read on wp.org ↗
3. ★★★★★ Yahya Cotton Eddaqqaq

   1.6y ago

   the builder is very limited, I had a horrible experience with it. This topic was modified 1 year, 3 months ago by Yahya Cotton Eddaqqaq.

   Read on wp.org ↗
4. ★★★★★ fasm

   1.7y ago

   I’ve been using it for almost 10 years ?! And I’m very happy with it. I did only one page design with it, that what I was looing for. Once, with an update I had to fix my page designs because the margin system had change (it’s a bit anoying…) but over the years I have been very happy with the simplicity, the flexibility, the well organised setup system. It’s not as complex and optionnable than it’s new concurrents but I like it’s speed to organise as I want my layouts.It’s funny how people love it or hate it. It’s a basic builder to organise your frame. Everything else is cosmetic that you won’t have much here. It’s an old fashion builder but so powerfull. This topic was modified 1 year, 4 months ago by fasm. Reason: forgot things

   Read on wp.org ↗
5. ★★★★★ tdutkowski

   1.8y ago

   Very bad builder, so limited. Do not recommended.

   Read on wp.org ↗
6. ★★★★★ guerre64

   1.9y ago

   The developers of this builder are obviously missing in action, or simply do not care one iota for people who continue to use it. There is no response via the support system on wordpress dot org, which is absolutely useless. The latest update of Bold Builder broke the layout on my Client’s site and there doesn’t appear to be any way to fix it. What makes matters worse is, this has happened over the last few updates and others have asked for support before me and not received a single answer or acknowledgment. I am going to encourage my Client to let me rebuild their website, as the current state of this plugin is disastrous. STAY AWAY FROM BOLD BUILDER!!! If I could give it no stars at all, I would. This topic was modified 1 year, 7 months ago by guerre64.

   Read on wp.org ↗
7. ★★★★★ onetailer

   1.9y ago

   I regret choosing the Stellarium template from BoldTheme. While the design looked promising initially, the actual functionality fell far short of expectations. False Advertising: The template was advertised as WooCommerce-compatible, but critical features, like “Add to Cart” and “Checkout,” simply don’t work as expected. Combining WooCommerce with other elements like the Cost Calculator is impossible, a limitation that wasn’t clearly disclosed beforehand. Technical Issues: The template constantly triggered errors related to the “Coming Soon” plugin and other core functionalities. Instead of providing solutions, support deflected responsibility, making these issues my problem to fix. Subpar Support: Despite paying for extended support, the assistance was unhelpful and dismissive. Simple requests, like making the demo work as advertised, were ignored. The team suggested submitting a refund request rather than resolving the issues—a deeply frustrating experience for a paying customer. Misleading Setup: The demo content and WooCommerce functionality do not replicate the advertised examples. If you’re looking for a functional e-commerce solution, this template is far from ready out of the box. I rarely leave reviews, but this experience was extremely disappointing. I would not recommend this template unless you’re prepared to spend hours troubleshooting and rebuilding features that should work from the start.

   Read on wp.org ↗
8. ★★★★★ 7mdo2u

   2.0y ago

   My website has been ready for a long time, but the requests for my offered service were too low, so I hired an agency to improve it. Now I had a new theme and I have to rewrite all the texts. An administrator was also added, who simply put everything on my server without giving me a detailed explanation. Problem: I am a German native speaker. Now that I have watched many youtube videos and found the document for the theme customization it works quite well. A better explanation of the setup would be nice.

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 5.9.5 Security: escaped the shortcode bb_version attribute before it is written into the rendered output, preventing a stored XSS via a crafted attribute value (authenticated, content-editing users). Security: added a capabili 5.9.5
2. — Version 5.9.4 Fixed colored-icon SVGs being stripped in the front-end editor preview (added inline SVG to the editor re-render kses allowlist). 5.9.4
3. — Version 5.9.3 Redesigned the Row “Columns layout” control: row width and column structure are now selected separately, with the column structure shown as layout preview thumbnails. Fixed horizontal page overflow on rows configured wit 5.9.3
4. — Version 5.9.2 Security: hardened the Raw Content save filter against a null-byte / control-character bypass that could allow Contributor-level users to store executable scripts (CVE-2026-5920). 5.9.2
5. — Version 5.9.1 Fixed CSS Post Grid not rendering the excerpt, share, date, and super/subheadline when those options were enabled. Fixed category filtering on the CSS Post Grid and Masonry Post Grid for categories with encoded (non-ASCI 5.9.1
6. — Version 5.9.0 Added 1300, 1500, and 1600 pixel boxed row widths to the Section and Row “Columns layout” / “Row width” dropdowns (alongside the existing 1200 and 1400 options). Fixed an unwanted border that appeared around colored head 5.9.0

All 46 disclosed vulnerabilities are patched in the current version (5.9.10). Sites still on an older version should update.

1. Patched Medium · 6.4 Bold Page Builder <= 5.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_service title ↗
   2026-09-29 CVE-2026-88037 Improper Neutralization of Input During Web Page Generation Affects <= 5.7.2 Patched in 5.7.3
2. Patched Medium · 6.4 Bold Page Builder <= 5.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'background_image' Parameter ↗
   2026-09-29 CVE-2026-6173 Improper Neutralization of Input During Web Page Generation Affects <= 5.7.2 Patched in 5.7.3
3. Patched Medium · 6.4 Bold Page Builder <= 5.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_css_image_grid 'images' Shortcode Attribute ↗
   2026-09-29 CVE-2026-6170 Improper Neutralization of Input During Web Page Generation Affects <= 5.7.2 Patched in 5.7.3
4. Patched Medium · 6.4 Bold Page Builder <= 5.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'target' Shortcode Attribute ↗
   2026-09-29 CVE-2026-6171 Improper Neutralization of Input During Web Page Generation Affects <= 5.7.2 Patched in 5.7.3
5. Patched Medium · 6.4 Bold Page Builder <= 5.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'caption' Parameter ↗
   2026-09-29 CVE-2026-6172 Improper Neutralization of Input During Web Page Generation Affects <= 5.7.2 Patched in 5.7.3
6. Patched Medium · 6.4 Bold Page Builder <= 5.9.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'shortcode_content' Parameter ↗
   2026-09-15 CVE-2026-5920 Improper Neutralization of Input During Web Page Generation Affects <= 5.9.6 Patched in 5.9.7
7. Patched Medium · 6.4 Bold Page Builder <= 5.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
   2026-09-11 CVE-2026-62110 Improper Neutralization of Input During Web Page Generation Affects <= 5.9.9 Patched in 5.9.10
8. Patched Medium · 6.4 Bold Page Builder < 5.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
   2026-09-06 CVE-2026-84028 Improper Neutralization of Input During Web Page Generation Affects < 5.9.9 Patched in 5.9.9
9. Patched Medium · 6.4 Bold Page Builder < 5.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
   2026-09-05 CVE-2026-84021 Improper Neutralization of Input During Web Page Generation Affects < 5.9.8 Patched in 5.9.8
10. Patched Medium · 6.4 Bold Page Builder < 5.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2026-09-05 CVE-2026-84022 Improper Neutralization of Input During Web Page Generation Affects < 5.9.8 Patched in 5.9.8
11. Patched Medium · 6.4 Bold Page Builder <= 5.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2026-08-15 CVE-2026-2357 Improper Neutralization of Input During Web Page Generation Affects <= 5.6.8 Patched in 5.6.9
12. Patched Medium · 6.4 Bold Page Builder <= 5.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_button Shortcode ↗
    2026-05-13 CVE-2026-3694 Improper Neutralization of Input During Web Page Generation Affects <= 5.6.8 Patched in 5.6.9
13. Patched Medium · 6.4 Bold Page Builder <= 5.9.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode ↗
    2026-02-06 CVE-2025-12159 Improper Neutralization of Input During Web Page Generation Affects <= 5.9.6 Patched in 5.9.7
14. Patched Medium · 6.4 Bold Page Builder <= 5.6.3 - Authenticated (Author+) Stored DOM-based Cross-Site Scripting in Post Grid ↗
    2026-02-06 CVE-2025-13463 Improper Neutralization of Input During Web Page Generation Affects <= 5.6.3 Patched in 5.6.4
15. Patched Medium · 6.4 Bold Builder <= 5.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_tabs Shortcode ↗
    2026-02-06 CVE-2025-12803 Improper Neutralization of Script-Related HTML Tags in a Web Page Affects <= 5.5.3 Patched in 5.5.4
16. Patched Medium · 6.4 Bold Page Builder <= 5.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_accordion_item Shortcode ↗
    2026-02-06 CVE-2025-15267 Improper Neutralization of Input During Web Page Generation Affects <= 5.6.1 Patched in 5.6.3
17. Patched Medium · 6.4 Bold Page Builder <= 5.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2026-01-20 CVE-2026-25451 Improper Neutralization of Input During Web Page Generation Affects <= 5.6.9 Patched in 5.7.0
18. Patched Medium · 6.4 Bold Page Builder <= 5.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2025-11-27 CVE-2025-66057 Improper Neutralization of Input During Web Page Generation Affects <= 5.5.2 Patched in 5.5.3
19. Patched Medium · 6.4 Bold Page Builder <= 5.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via `percentage` Parameter ↗
    2025-10-23 CVE-2025-7730 Improper Neutralization of Input During Web Page Generation Affects <= 5.4.5 Patched in 5.4.6
20. Patched Medium · 6.4 Bold Page Builder <= 5.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2025-08-27 CVE-2025-58194 Improper Neutralization of Input During Web Page Generation Affects <= 5.4.3 Patched in 5.4.4
21. Patched Medium · 6.4 Bold Page Builder <= 5.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2025-07-16 CVE-2025-54006 Improper Neutralization of Input During Web Page Generation Affects <= 5.4.1 Patched in 5.4.2
22. Patched Medium · 6.4 Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Magnific Popups JavaScript Library ↗
    2025-07-02 CVE-2024-5647 Improper Neutralization of Input During Web Page Generation Affects <= 5.1.2 Patched in 5.1.3
23. Patched Medium · 6.4 Bold Builder <= 5.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via additional_settings Parameter ↗
    2025-05-28 CVE-2025-5286 Improper Neutralization of Input During Web Page Generation Affects <= 5.3.6 Patched in 5.3.7
24. Patched Medium · 6.4 Bold Page Builder <= 5.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-text' Parameter ↗
    2025-05-17 CVE-2025-3715 Improper Neutralization of Input During Web Page Generation Affects <= 5.3.5 Patched in 5.3.6
25. Patched Medium · 6.4 Bold Page Builder <= 5.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2025-05-07 CVE-2025-47488 Improper Neutralization of Input During Web Page Generation Affects <= 5.3.2 Patched in 5.3.3
26. Patched Medium · 4.4 Bold Page Builder <= 5.3.0 - Authenticated (Administrator+) Stored Cross-Site Scripting ↗
    2025-05-07 CVE-2025-47525 Improper Neutralization of Input During Web Page Generation Affects <= 5.3.0 Patched in 5.3.1
27. Patched Low · 2.7 Bold Page Builder <= 5.1.5 - Authenticated (Editor+) Path Traversal ↗
    2024-12-11 CVE-2024-54382 Improper Limitation of a Pathname to a Restricted Directory Affects <= 5.1.5 Patched in 5.1.6
28. Patched Medium · 6.4 Bold Page Builder <= 5.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2024-12-02 CVE-2024-53801 Improper Neutralization of Input During Web Page Generation Affects <= 5.2.1 Patched in 5.2.2
29. Patched Medium · 4.3 Bold Page Builder <= 5.1.3 - Missing Authorization ↗
    2024-10-24 CVE-2024-50417 Missing Authorization Affects <= 5.1.3 Patched in 5.1.4
30. Patched Medium · 6.4 Bold Page Builder <= 5.1.- - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2024-09-30 CVE-2024-47391 Improper Neutralization of Input During Web Page Generation Affects <= 5.1.0 Patched in 5.1.1
31. Patched Medium · 6.4 Bold Page Builder <= 5.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2024-09-24 CVE-2024-47298 Improper Neutralization of Input During Web Page Generation Affects <= 5.1.1 Patched in 5.1.2
32. Patched Medium · 6.4 Bold Page Builder <= 5.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_button Shortcode ↗
    2024-07-29 CVE-2024-7100 Improper Neutralization of Input During Web Page Generation Affects <= 5.0.2 Patched in 5.0.3
33. Patched Medium · 5.4 Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Separator Element ↗
    2024-04-09 CVE-2024-2733 Improper Neutralization of Input During Web Page Generation Affects <= 4.8.8 Patched in 4.8.9
34. Patched Medium · 6.4 Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via AI Features ↗
    2024-04-09 CVE-2024-2734 Improper Neutralization of Input During Web Page Generation Affects <= 4.8.8 Patched in 4.8.9
35. Patched Medium · 6.4 Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via "Price List" Element ↗
    2024-04-09 CVE-2024-2735 Improper Neutralization of Input During Web Page Generation Affects <= 4.8.8 Patched in 4.8.9
36. Patched Medium · 6.4 Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via HTML Tags ↗
    2024-04-09 CVE-2024-2736 Improper Neutralization of Input During Web Page Generation Affects <= 4.8.8 Patched in 4.8.9
37. Patched Medium · 6.4 Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget URL Attribute ↗
    2024-04-05 CVE-2024-3266 Improper Neutralization of Input During Web Page Generation Affects <= 4.8.8 Patched in 4.8.9
38. Patched Medium · 6.4 Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_price_list Shortcode ↗
    2024-04-05 CVE-2024-3267 Improper Neutralization of Input During Web Page Generation Affects <= 4.8.8 Patched in 4.8.9
39. Patched Medium · 6.4 Bold Page Builder <= 4.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via class ↗
    2024-03-25 CVE-2024-30179 Improper Neutralization of Input During Web Page Generation Affects <= 4.7.6 Patched in 4.7.7
40. Patched Medium · 5.4 Bold Page Builder <= 4.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Icon Link ↗
    2024-02-12 CVE-2024-1160 Improper Neutralization of Input During Web Page Generation Affects <= 4.8.0 Patched in 4.8.1
41. Patched Medium · 5.4 Bold Page Builder <= 4.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button URL ↗
    2024-02-12 CVE-2024-1157 Improper Neutralization of Input During Web Page Generation Affects <= 4.8.0 Patched in 4.8.1
42. Patched Medium · 6.4 Bold Page Builder <= 4.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Raw Content ↗
    2024-02-12 CVE-2024-1159 Improper Neutralization of Input During Web Page Generation Affects <= 4.8.0 Patched in 4.8.1
43. Patched Medium · 6.4 Bold Page Builder <= 4.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2023-12-05 CVE-2023-49823 Improper Neutralization of Input During Web Page Generation Affects <= 4.6.1 Patched in 4.7.0
44. Patched Medium · 5.5 Bold Page Builder <= 4.3.2 - Authenticated (Admin+) Stored Cross-Site Scripting ↗
    2022-06-20 CVE-2022-2089 Improper Neutralization of Input During Web Page Generation Affects < 4.3.3 Patched in 4.3.3
45. Patched High · 7.5 Bold Page Builder <= 3.1.5 - PHP Object Injection ↗
    2021-08-02 CVE-2021-24579 Deserialization of Untrusted Data Affects <= 3.1.5 Patched in 3.1.6
46. Patched High · 7.5 Bold Page Builder <= 2.3.1 - Missing Authorization to Settings Update ↗
    2019-08-23 CVE-2019-15821 Missing Authorization Affects <= 2.3.1 Patched in 2.3.2

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0

Whether ChatGPT and Claude name this plugin when asked the category question, and whether the readme gives them something to quote.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-05-04 50K+ → 40K+ down after 1072 days in tier
2. 2023-05-28 60K+ → 50K+ down after 335 days in tier
3. 2022-06-27 50K+ → 60K+ up after 387 days in tier
4. 2021-06-05 40K+ → 50K+ up after 205 days in tier
5. 2020-11-12 30K+ → 40K+ up after 169 days in tier
6. 2020-05-27 20K+ → 30K+ up after 429 days in tier
7. 2019-03-25 10K+ → 20K+ up

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

Embed this report card

Drop a live Pulse card for Bold Page Builder into a readme, a review or a deck. It updates itself.

Bold Page Builder: 40K+ active installs, 3.6★ (66 reviews). Plugin Pulse (WP Mayor), as of 2026-10-31. https://plugins.wpmayor.com/plugin/bold-page-builder