Page Builder: Pagelayer – Drag and Drop website builder

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 44% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. The recent download trend is too spiky to read.

1. ★★★★★ sarabrandani94

   5mo ago

   Ho aggiornato la versione di word press e Pagelayer si è bloccato, è un mese che provo a contattare il supporto per ricevere assistenza ma non risponde mai nessuno.

   Read on wp.org ↗
2. ★★★★★ plb1968

   9mo ago

   LOL! ChatGPT thinks this editor is a joke! Don’t waste your time. I like pagelayer and popularFX default templates, but their site editor sucks. Any better options?ChatGPT said: Ohhhh buddy, yes — you are not crazy. Pagelayer + PopularFX templates look great at first glance… and then the editor punches you in the shins like an angry leprechaun. You’re fighting the builder more than you’re building the site. But the good news? You’ve got way better options — especially for a business that needs clean booking flow, killer visuals, and easy SEO…. Check out Kadence, Blocksy, Elementor, Bricksbuilder

   Read on wp.org ↗
3. ★★★★★ dolceremy

   1.2y ago

   For me it is the best pagelayer on the market! Comparable, if not far superior, to many famous ones on the market, with a price that is also considerably higher, allowing you to do everything directly from Gutemberg, therefore without ever leaving the WordPress page builder. To have even more it is better to have its own construct that allows you to have fun as best you can! Support via ticket and/or forum 100% valid

   Read on wp.org ↗
4. ★★★★★ eatinglifeup

   1.2y ago

   Really enjoy using this interface! Makes taking control of so many aspects of my site so easy!

   Read on wp.org ↗
5. ★★★★★ sjgarth

   1.3y ago

   This is different from other page builders, but once you get into tit, it works very well. Now that it comes with Softaculous, it is worth trying for yourself.Yes, its not as polished as Elementor or others, but it does what it says on the tin, and works directly with WordPress, so speed is good. Templates that come with it are fine, and if you use Popular FX as the theme, there are even more.Its a thumbs up from me.

   Read on wp.org ↗
6. ★★★★★ Piotr Domański

   1.6y ago

   Pagelayer is great plugin that helps new users to create pages.

   Read on wp.org ↗
7. ★★★★★ Motiur Rahman

   1.7y ago

   Useless plugin

   Read on wp.org ↗
8. ★★★★★ jeanluc30

   1.7y ago

   Cet éditeur m’a permis de créer le site internet de ma petite entreprise [link removed by moderators. Links are not permitted in reviews] . La prise en main a été compliquée au début car je n’avais jamais créé de site web de ma vie et il y a eu quelques bug car il y a de nombreux paramètres que je maitrisais pas (ex : je modifiais la couleur de police par un menu mais cela ne s’appliquait pas ! Et en fait j’ai compris qu’il y a plusieurs niveaux de contrôle = plusieurs menus avec des droits hiérarchisés, et c’est bien là la complexité pour un néophyte). J’ai par la suite essayé un autre éditeur de site web bien connu en espérant que ce soit plus simple mais mal m’en pris car les bugs ont été plus nombreux et certaines fonctions gratuites sur PageLayer étaient d’office payantes avec l’autre éditeur. De plus les pages créées avec l’un n’étaient pas totalement compatibles avec l’autre ! donc un conseil : ne mélangez pas deux éditeurs pour un même site si vous êtes débutant. donc +2 pour PageLayer. Globalement je suis satisfait du résultat. Merci aux éditeurs de ce logiciel ! This topic was modified 1 year, 7 months ago by Steven Stern (sterndata).

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 2.1.4 [Feature] Added Ctrl + K shortcut for widget search. [Improvement] Improved the builder UI/UX. [Bug-Fix] There was some PHP warnings. This is fixed. 2.1.4
2. — Version 2.1.3 [pro-Feature] Added a Markdown widget. [Bug Fix] Fixed a minor UI issue in the Theme Templates table. 2.1.3
3. — Version 2.1.2 [Task] Updated version to 2.1.2 due to WordPress API update issue. 2.1.2
4. — Version 2.1.1 [Improvement] Plugin settings UI updated. [Bug Fix] Fixed some warnings with PHP 8.2+. [Task] Tested with WordPress 7.0 2.1.1
5. — Version 2.1.0 [Bug Fix] Improved XSS security checks. [Bug Fix] Inline editor has been further improved. 2.1.0
6. — Version 2.0.9 [Bug Fix] Improved XSS security checks. [Bug-Fix] There was some PHP warnings. This is fixed. 2.0.9

30 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. Medium · 4.3 Pagelayer <= 2.0.9 - Incorrect Authorization to Authenticated (Contributor+) Mail Relay Configuration via 'contacts' ↗
   2026-06-12 CVE-2026-2470 Incorrect Authorization Affects <= 2.0.9 Patched in 2.1.0
2. Medium · 6.4 Page Builder: Pagelayer – Drag and Drop website builder <= 2.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Anchor Block ↗
   2026-06-12 CVE-2026-3297 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.0.9 Patched in 2.1.0
3. Medium · 6.4 Page Builder: Pagelayer <= 2.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Widget Custom Attributes ↗
   2026-04-07 CVE-2026-2509 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.0.8 Patched in 2.0.9
4. Medium · 5.3 Pagelayer <= 2.0.7 - Improper Neutralization of CRLF Sequences to Unauthenticated Email Header Injection via 'email' ↗
   2026-03-27 CVE-2026-2442 Improper Neutralization of CRLF Sequences ('CRLF Injection') Affects <= 2.0.7 Patched in 2.0.8
5. Medium · 4.3 PageLayer <= 2.0.8 - Authenticated (Contributor+) Information Exposure ↗
   2026-03-12 CVE-2026-39469 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 2.0.8 Patched in 2.0.9
6. Medium · 4.3 Page Builder: Pagelayer – Drag and Drop website builder <= 2.0.5 - Authenticated (Author+) Insecure Direct Object Reference ↗
   2025-11-12 CVE-2025-12366 Authorization Bypass Through User-Controlled Key Affects <= 2.0.5 Patched in 2.0.6
7. Medium · 4.7 Page Builder: Pagelayer – Drag and Drop website builder <= 2.0.0 - Reflected Cross-Site Scripting via login_url Parameter ↗
   2025-05-23 CVE-2025-4223 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.0.0 Patched in 2.0.1
8. Medium · 6.4 Page Builder: Pagelayer – Drag and Drop website builder <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Link ↗
   2025-05-23 CVE-2024-13427 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.0.0 Patched in 2.0.1
9. Medium · 4.3 Page Builder: Pagelayer – Drag and Drop website builder <= 1.9.9 - Missing Authorization to Authenticated (Contributor+) Post Publication ↗
   2025-03-12 CVE-2025-2104 Missing Authorization Affects <= 1.9.8 Patched in 2.0.0
10. Medium · 4.3 Page Builder: Pagelayer – Drag and Drop website builder <= 1.9.8 - Authenticated (Contributor+) Private Post Disclosure in pagelayer_builder_posts_shortcode ↗
    2025-03-11 CVE-2024-13430 Improper Access Control Affects <= 1.9.8 Patched in 1.9.9
11. Medium · 4.3 Page Builder: Pagelayer – Drag and Drop website builder <= 1.9.8 - Cross-Site Request Forgery (CSRF) To Post Contents Modification ↗
    2025-03-09 CVE-2025-1926 Cross-Site Request Forgery (CSRF) Affects <= 1.9.8 Patched in 1.9.9
12. Medium · 6.4 PageLayer <= 1.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2025-01-24 CVE-2025-24573 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.9.4 Patched in 1.9.5
13. Medium · 4.4 Page Builder: Pagelayer <= 1.8.9 - Authenticated (Admin+) Stored Cross-Site Scripting ↗
    2024-09-04 CVE-2024-8618 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.8.9 Patched in 1.9.0
14. Medium · 4.4 PageLayer <= 1.8.7 - Authenticated (Administrator+) Stored Cross-Site Scripting ↗
    2024-08-28 CVE-2024-43972 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.8.7 Patched in 1.8.8
15. Medium · 4.4 Page Builder: Pagelayer <= 1.8.7 - Authenticated (Admin+) Stored Cross-Site Scripting ↗
    2024-07-28 CVE-2024-8426 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.8.7 Patched in 1.8.8
16. Medium · 4.3 PageLayer <= 1.8.1 - Missing Authorization ↗
    2024-03-28 CVE-2024-30465 Missing Authorization Affects <= 1.8.1 Patched in 1.8.2
17. Medium · 6.4 Page Builder: Pagelayer – Drag and Drop website builder <= 1.8.4 - Authenticated(Contributor+) Stored Cross-Site Scripting via custom attributes ↗
    2024-03-21 CVE-2024-2504 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.8.4 Patched in 1.8.5
18. Medium · 6.4 Page Builder: Pagelayer – Drag and Drop website builder <= 1.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Attributes ↗
    2024-03-07 CVE-2024-2127 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.8.3 Patched in 1.8.4
19. Medium · 4.6 Page Builder: Pagelayer – Drag and Drop website builder <= 1.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button ↗
    2024-02-22 CVE-2024-1590 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.8.2 Patched in 1.8.3
20. Medium · 4.4 Pagelayer <= 1.7.9 - Authenticated(Administrator+) Stored Cross-Site Scripting via Header/Footer code ↗
    2024-01-31 CVE-2023-5124 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < 1.8.0 Patched in 1.8.0
21. Medium · 5.4 PageLayer <= 1.7.8 - Authenticated(Contributor+) Stored Cross-Site Scripting via meta fields ↗
    2024-01-03 CVE-2023-6738 Improper Input Validation Affects <= 1.7.8 Patched in 1.7.9
22. Medium · 4.4 Page Builder: Pagelayer <= 1.7.9 - Authenticated (Admin+) Stored Cross-Site Scripting ↗
    2023-12-24 CVE-2023-7115 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.7.9 Patched in 1.8.1
23. Medium · 5.3 PageLayer <= 1.7.7 - Cross-Site Request Forgery via pagelayer_load_plugin ↗
    2023-12-01 CVE-2023-49196 Missing Authorization Affects <= 1.7.7 Patched in 1.7.8
24. High · 7.2 Page Builder: Pagelayer – Drag and Drop website builder <= 1.7.6 - Missing Authorization to Stored Cross-Site Scripting ↗
    2023-09-25 CVE-2023-4687 Missing Authorization Affects <= 1.7.6 Patched in 1.7.7
25. Medium · 6.4 Page Builder: Pagelayer <= 1.7.7 - Authenticated (Author+) Stored Cross-Site Scripting via Header/Footer ↗
    2023-09-25 CVE-2023-5087 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.7.7 Patched in 1.7.8
26. Medium · 6.4 PageLayer <= 1.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2023-09-13 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < 1.7.7 Patched in 1.7.7
27. Medium · 6.1 Page Builder: Pagelayer – Drag and Drop website builder < 1.3.5 - Reflected Cross-Site Scripting via font-size ↗
    2020-12-10 CVE-2020-36383 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < 1.3.5 Patched in 1.3.5
28. Medium · 6.1 Page Builder: Pagelayer – Drag and Drop website builder < 1.3.5 - Reflected Cross-Site Scripting via Color Settings ↗
    2020-12-10 CVE-2020-36384 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < 1.3.5 Patched in 1.3.5
29. High · 8.8 Page Builder: Pagelayer – Drag and Drop website builder <= 1.1.1 - Cross-Site Request Forgery to Cross-Site Scripting ↗
    2020-05-28 CVE-2020-35944 Cross-Site Request Forgery (CSRF) Affects < 1.1.2 Patched in 1.1.2
30. High · 7.4 Page Builder: Pagelayer – Drag and Drop website builder <= 1.1.1 - Missing Authorization to Cross-Site Scripting ↗
    2020-05-28 CVE-2020-35947 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < 1.1.2 Patched in 1.1.2

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0

Translated into 16 languages, 2 at 90% or more

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2025-07-07 300K+ → 400K+ up after 114 days in tier
2. 2025-03-15 200K+ → 300K+ up after 100 days in tier
3. 2024-12-05 100K+ → 200K+ up after 246 days in tier
4. 2024-04-03 200K+ → 100K+ down

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• Elementor Website Builder – more than just a page builder 10M+ installs · 4.5★ · 4 shared tags A
• Colibri Page Builder 90K+ installs · 4.4★ · 4 shared tags A
• TemplateSpare – 1000+ WordPress Starter Templates & Full Site Migration Tool | 1-Click Import/Export & No-Code Builder 10K+ installs · 4.0★ · 4 shared tags B
• SKT Page Builder 2K+ installs · 3.5★ · 4 shared tags B
• Kadence Blocks — Page Builder Toolkit for Gutenberg Editor 600K+ installs · 4.8★ · 3 shared tags A
• Post and Page Builder by BoldGrid – Visual Drag and Drop Editor 50K+ installs · 4.7★ · 3 shared tags A

Embed this report card

Drop a live Pulse card for Page Builder: Pagelayer – Drag and Drop website builder into a readme, a review or a deck. It updates itself.

Page Builder: Pagelayer – Drag and Drop website builder: 400K+ active installs, 3.9★ (102 reviews). Plugin Pulse (WP Mayor), as of 2026-08-25. https://plugins.wpmayor.com/plugin/pagelayer