Page Builder: Pagelayer – Drag and Drop website builder

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory searches this plugin turns up in, and which way each one is moving. WordPress.org publishes no history of search positions, so this starts the day we first tracked a keyword and never backfills.

wp.org is where the directory puts the plugin for that search. On merit is where it would sit if results were ranked on rating, support and updates, without the install boost. The last column is how far the wp.org position moved, from our first reading in the last 90 days to the latest.

200 searches this plugin appeared in over the last 90 days, 20 listed. 167 left out as unrelated or noise (years, numbers, stray words). 2 of its tags aren't in the top 24 for their own search.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Crossed into this band 16 months ago; a band this size takes about a year or more to cross, which places it about 90% of the way through.

1. ★★★★★ sarabrandani94

   7mo ago

   Ho aggiornato la versione di word press e Pagelayer si è bloccato, è un mese che provo a contattare il supporto per ricevere assistenza ma non risponde mai nessuno.

   Read on wp.org ↗
2. ★★★★★ plb1968

   11mo ago

   LOL! ChatGPT thinks this editor is a joke! Don’t waste your time. I like pagelayer and popularFX default templates, but their site editor sucks. Any better options?ChatGPT said: Ohhhh buddy, yes — you are not crazy. Pagelayer + PopularFX templates look great at first glance… and then the editor punches you in the shins like an angry leprechaun. You’re fighting the builder more than you’re building the site. But the good news? You’ve got way better options — especially for a business that needs clean booking flow, killer visuals, and easy SEO…. Check out Kadence, Blocksy, Elementor, Bricksbuilder

   Read on wp.org ↗
3. ★★★★★ dolceremy

   1.4y ago

   For me it is the best pagelayer on the market! Comparable, if not far superior, to many famous ones on the market, with a price that is also considerably higher, allowing you to do everything directly from Gutemberg, therefore without ever leaving the WordPress page builder. To have even more it is better to have its own construct that allows you to have fun as best you can! Support via ticket and/or forum 100% valid

   Read on wp.org ↗
4. ★★★★★ eatinglifeup

   1.4y ago

   Really enjoy using this interface! Makes taking control of so many aspects of my site so easy!

   Read on wp.org ↗
5. ★★★★★ sjgarth

   1.5y ago

   This is different from other page builders, but once you get into tit, it works very well. Now that it comes with Softaculous, it is worth trying for yourself.Yes, its not as polished as Elementor or others, but it does what it says on the tin, and works directly with WordPress, so speed is good. Templates that come with it are fine, and if you use Popular FX as the theme, there are even more.Its a thumbs up from me.

   Read on wp.org ↗
6. ★★★★★ Piotr Domański

   1.7y ago

   Pagelayer is great plugin that helps new users to create pages.

   Read on wp.org ↗
7. ★★★★★ Motiur Rahman

   1.9y ago

   Useless plugin

   Read on wp.org ↗
8. ★★★★★ jeanluc30

   1.9y ago

   Cet éditeur m’a permis de créer le site internet de ma petite entreprise [link removed by moderators. Links are not permitted in reviews] . La prise en main a été compliquée au début car je n’avais jamais créé de site web de ma vie et il y a eu quelques bug car il y a de nombreux paramètres que je maitrisais pas (ex : je modifiais la couleur de police par un menu mais cela ne s’appliquait pas ! Et en fait j’ai compris qu’il y a plusieurs niveaux de contrôle = plusieurs menus avec des droits hiérarchisés, et c’est bien là la complexité pour un néophyte). J’ai par la suite essayé un autre éditeur de site web bien connu en espérant que ce soit plus simple mais mal m’en pris car les bugs ont été plus nombreux et certaines fonctions gratuites sur PageLayer étaient d’office payantes avec l’autre éditeur. De plus les pages créées avec l’un n’étaient pas totalement compatibles avec l’autre ! donc un conseil : ne mélangez pas deux éditeurs pour un même site si vous êtes débutant. donc +2 pour PageLayer. Globalement je suis satisfait du résultat. Merci aux éditeurs de ce logiciel ! This topic was modified 1 year, 7 months ago by Steven Stern (sterndata).

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 2.1.4 [Feature] Added Ctrl + K shortcut for widget search. [Improvement] Improved the builder UI/UX. [Bug-Fix] There was some PHP warnings. This is fixed. 2.1.4
2. — Version 2.1.3 [pro-Feature] Added a Markdown widget. [Bug Fix] Fixed a minor UI issue in the Theme Templates table. 2.1.3
3. — Version 2.1.2 [Task] Updated version to 2.1.2 due to WordPress API update issue. 2.1.2
4. — Version 2.1.1 [Improvement] Plugin settings UI updated. [Bug Fix] Fixed some warnings with PHP 8.2+. [Task] Tested with WordPress 7.0 2.1.1
5. — Version 2.1.0 [Bug Fix] Improved XSS security checks. [Bug Fix] Inline editor has been further improved. 2.1.0
6. — Version 2.0.9 [Bug Fix] Improved XSS security checks. [Bug-Fix] There was some PHP warnings. This is fixed. 2.0.9

All 30 disclosed vulnerabilities are patched in the current version (2.2.2). Sites still on an older version should update.

1. Patched Medium · 4.3 Pagelayer <= 2.0.9 - Incorrect Authorization to Authenticated (Contributor+) Mail Relay Configuration via 'contacts' ↗
   2026-06-12 CVE-2026-2470 Incorrect Authorization Affects <= 2.0.9 Patched in 2.1.0
2. Patched Medium · 6.4 Page Builder: Pagelayer – Drag and Drop website builder <= 2.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Anchor Block ↗
   2026-06-12 CVE-2026-3297 Improper Neutralization of Input During Web Page Generation Affects <= 2.0.9 Patched in 2.1.0
3. Patched Medium · 6.4 Page Builder: Pagelayer <= 2.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Widget Custom Attributes ↗
   2026-04-07 CVE-2026-2509 Improper Neutralization of Input During Web Page Generation Affects <= 2.0.8 Patched in 2.0.9
4. Patched Medium · 5.3 Pagelayer <= 2.0.7 - Improper Neutralization of CRLF Sequences to Unauthenticated Email Header Injection via 'email' ↗
   2026-03-27 CVE-2026-2442 Improper Neutralization of CRLF Sequences Affects <= 2.0.7 Patched in 2.0.8
5. Patched Medium · 4.3 PageLayer <= 2.0.8 - Authenticated (Contributor+) Information Exposure ↗
   2026-03-12 CVE-2026-39469 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 2.0.8 Patched in 2.0.9
6. Patched Medium · 4.3 Page Builder: Pagelayer – Drag and Drop website builder <= 2.0.5 - Authenticated (Author+) Insecure Direct Object Reference ↗
   2025-11-12 CVE-2025-12366 Authorization Bypass Through User-Controlled Key Affects <= 2.0.5 Patched in 2.0.6
7. Patched Medium · 4.7 Page Builder: Pagelayer – Drag and Drop website builder <= 2.0.0 - Reflected Cross-Site Scripting via login_url Parameter ↗
   2025-05-23 CVE-2025-4223 Improper Neutralization of Input During Web Page Generation Affects <= 2.0.0 Patched in 2.0.1
8. Patched Medium · 6.4 Page Builder: Pagelayer – Drag and Drop website builder <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Link ↗
   2025-05-23 CVE-2024-13427 Improper Neutralization of Input During Web Page Generation Affects <= 2.0.0 Patched in 2.0.1
9. Patched Medium · 4.3 Page Builder: Pagelayer – Drag and Drop website builder <= 1.9.9 - Missing Authorization to Authenticated (Contributor+) Post Publication ↗
   2025-03-12 CVE-2025-2104 Missing Authorization Affects <= 1.9.8 Patched in 2.0.0
10. Patched Medium · 4.3 Page Builder: Pagelayer – Drag and Drop website builder <= 1.9.8 - Authenticated (Contributor+) Private Post Disclosure in pagelayer_builder_posts_shortcode ↗
    2025-03-11 CVE-2024-13430 Improper Access Control Affects <= 1.9.8 Patched in 1.9.9
11. Patched Medium · 4.3 Page Builder: Pagelayer – Drag and Drop website builder <= 1.9.8 - Cross-Site Request Forgery (CSRF) To Post Contents Modification ↗
    2025-03-09 CVE-2025-1926 Cross-Site Request Forgery Affects <= 1.9.8 Patched in 1.9.9
12. Patched Medium · 6.4 PageLayer <= 1.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2025-01-24 CVE-2025-24573 Improper Neutralization of Input During Web Page Generation Affects <= 1.9.4 Patched in 1.9.5
13. Patched Medium · 4.4 Page Builder: Pagelayer <= 1.8.9 - Authenticated (Admin+) Stored Cross-Site Scripting ↗
    2024-09-04 CVE-2024-8618 Improper Neutralization of Input During Web Page Generation Affects <= 1.8.9 Patched in 1.9.0
14. Patched Medium · 4.4 PageLayer <= 1.8.7 - Authenticated (Administrator+) Stored Cross-Site Scripting ↗
    2024-08-28 CVE-2024-43972 Improper Neutralization of Input During Web Page Generation Affects <= 1.8.7 Patched in 1.8.8
15. Patched Medium · 4.4 Page Builder: Pagelayer <= 1.8.7 - Authenticated (Admin+) Stored Cross-Site Scripting ↗
    2024-07-28 CVE-2024-8426 Improper Neutralization of Input During Web Page Generation Affects <= 1.8.7 Patched in 1.8.8
16. Patched Medium · 4.3 PageLayer <= 1.8.1 - Missing Authorization ↗
    2024-03-28 CVE-2024-30465 Missing Authorization Affects <= 1.8.1 Patched in 1.8.2
17. Patched Medium · 6.4 Page Builder: Pagelayer – Drag and Drop website builder <= 1.8.4 - Authenticated(Contributor+) Stored Cross-Site Scripting via custom attributes ↗
    2024-03-21 CVE-2024-2504 Improper Neutralization of Input During Web Page Generation Affects <= 1.8.4 Patched in 1.8.5
18. Patched Medium · 6.4 Page Builder: Pagelayer – Drag and Drop website builder <= 1.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Attributes ↗
    2024-03-07 CVE-2024-2127 Improper Neutralization of Input During Web Page Generation Affects <= 1.8.3 Patched in 1.8.4
19. Patched Medium · 4.6 Page Builder: Pagelayer – Drag and Drop website builder <= 1.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button ↗
    2024-02-22 CVE-2024-1590 Improper Neutralization of Input During Web Page Generation Affects <= 1.8.2 Patched in 1.8.3
20. Patched Medium · 4.4 Pagelayer <= 1.7.9 - Authenticated(Administrator+) Stored Cross-Site Scripting via Header/Footer code ↗
    2024-01-31 CVE-2023-5124 Improper Neutralization of Input During Web Page Generation Affects < 1.8.0 Patched in 1.8.0
21. Patched Medium · 5.4 PageLayer <= 1.7.8 - Authenticated(Contributor+) Stored Cross-Site Scripting via meta fields ↗
    2024-01-03 CVE-2023-6738 Improper Input Validation Affects <= 1.7.8 Patched in 1.7.9
22. Patched Medium · 4.4 Page Builder: Pagelayer <= 1.7.9 - Authenticated (Admin+) Stored Cross-Site Scripting ↗
    2023-12-24 CVE-2023-7115 Improper Neutralization of Input During Web Page Generation Affects <= 1.7.9 Patched in 1.8.1
23. Patched Medium · 5.3 PageLayer <= 1.7.7 - Cross-Site Request Forgery via pagelayer_load_plugin ↗
    2023-12-01 CVE-2023-49196 Missing Authorization Affects <= 1.7.7 Patched in 1.7.8
24. Patched High · 7.2 Page Builder: Pagelayer – Drag and Drop website builder <= 1.7.6 - Missing Authorization to Stored Cross-Site Scripting ↗
    2023-09-25 CVE-2023-4687 Missing Authorization Affects <= 1.7.6 Patched in 1.7.7
25. Patched Medium · 6.4 Page Builder: Pagelayer <= 1.7.7 - Authenticated (Author+) Stored Cross-Site Scripting via Header/Footer ↗
    2023-09-25 CVE-2023-5087 Improper Neutralization of Input During Web Page Generation Affects <= 1.7.7 Patched in 1.7.8
26. Patched Medium · 6.4 PageLayer <= 1.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2023-09-13 Improper Neutralization of Input During Web Page Generation Affects < 1.7.7 Patched in 1.7.7
27. Patched Medium · 6.1 Page Builder: Pagelayer – Drag and Drop website builder < 1.3.5 - Reflected Cross-Site Scripting via font-size ↗
    2020-12-10 CVE-2020-36383 Improper Neutralization of Input During Web Page Generation Affects < 1.3.5 Patched in 1.3.5
28. Patched Medium · 6.1 Page Builder: Pagelayer – Drag and Drop website builder < 1.3.5 - Reflected Cross-Site Scripting via Color Settings ↗
    2020-12-10 CVE-2020-36384 Improper Neutralization of Input During Web Page Generation Affects < 1.3.5 Patched in 1.3.5
29. Patched High · 8.8 Page Builder: Pagelayer – Drag and Drop website builder <= 1.1.1 - Cross-Site Request Forgery to Cross-Site Scripting ↗
    2020-05-28 CVE-2020-35944 Cross-Site Request Forgery Affects < 1.1.2 Patched in 1.1.2
30. Patched High · 7.4 Page Builder: Pagelayer – Drag and Drop website builder <= 1.1.1 - Missing Authorization to Cross-Site Scripting ↗
    2020-05-28 CVE-2020-35947 Improper Neutralization of Input During Web Page Generation Affects < 1.1.2 Patched in 1.1.2

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0

Translated into 17 languages, 6 at 90% or more

Whether ChatGPT and Claude name this plugin when asked the category question, and whether the readme gives them something to quote.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2025-07-07 300K+ → 400K+ up after 114 days in tier
2. 2025-03-15 200K+ → 300K+ up after 100 days in tier
3. 2024-12-05 100K+ → 200K+ up after 246 days in tier
4. 2024-04-03 200K+ → 100K+ down after 1432 days in tier
5. 2020-05-02 100K+ → 200K+ up after 170 days in tier
6. 2019-11-14 90K+ → 100K+ up

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

Embed this report card

Drop a live Pulse card for Page Builder: Pagelayer – Drag and Drop website builder into a readme, a review or a deck. It updates itself.

Page Builder: Pagelayer – Drag and Drop website builder: 400K+ active installs, 3.9★ (104 reviews). Plugin Pulse (WP Mayor), as of 2026-10-31. https://plugins.wpmayor.com/plugin/pagelayer