SiteOrigin Widgets Bundle

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 27% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. A declining trend compresses what a buyer would pay.

1. ★★★★★ prellyan1

   1.4y ago

   Honestly, incredibly impressed with the support this team offers. the plugins themselves are great and make life as a non-coder so easy but wow, team went above and beyond thanks!

   Read on wp.org ↗
2. ★★★★★ jaywren

   1.6y ago

   Site Origin themes and plugins are powerful tools for developing beautiful, dynamic websites.

   Read on wp.org ↗
3. ★★★★★ jimaul

   2.3y ago

   The buttons lost their shape and became small, as did the message inside the buttons

   Read on wp.org ↗
4. ★★★★★ paulstenning

   2.4y ago

   This plugin works well and is fully supported, but the amount of updates is excessive – 12 so far this year. This can make it more difficult to ensure our websites are kept up to date.

   Read on wp.org ↗
5. ★★★★★ firefighter

   2.5y ago

   Well working plugin! And I am amazed how fast and constructive the support works, IF there is a problem.

   Read on wp.org ↗
6. ★★★★★ Sparen

   3.7y ago

   Siteorigin really does a great job by developing & upgrade their plugins and deliver one of the best support for the wordpress community!

   Read on wp.org ↗
7. ★★★★★ Monica Haught

   3.9y ago

   I love this plugin – I use it for all my sites. I have the premium version and the support is spectacular! Easy to learn and use, tons of awesome features!

   Read on wp.org ↗
8. ★★★★★ Richard Gates

   4.4y ago

   Feel free to call me bias. Not because I work for SiteOrigin but because SiteOrigin works for me. We have been using SiteOrigin premium since 2018 and we build EVERYTHING with it. Fanboy for the Widgets Bundle Too!

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 1.74.1 Hero, Layout Slider: Fixed empty or zero mobile height so the slide inherits the desktop height instead of collapsing. Image: Preserved custom image size dimensions on save so manually entered width and height are retain 1.74.1
2. — Version 1.74.0 Accordion, Tabs: Reset filter-owned title slots at render and escaped title output in templates. Posts Field: Restored listing of all public post types in the Post Type selector regardless of the current user’s edit capa 1.74.0
3. — Version 1.73.2 Blog: Fixed font field initialization lag by lazy-populating font selects on focus while preserving the saved value on save. Video: Removed the hard-coded sandbox from cached oEmbed output and added the siteorigin_widget 1.73.2
4. — Version 1.73.1 General: Corrected release package version metadata to prevent WordPress from repeatedly offering the same update after installing 1.73.0. 1.73.1
5. — Version 1.73.0 Cards Carousel: Scoped overflow handling to the panel to preserve sibling cell sizing in Layout Builder. Image Grid: Loaded preview assets in the Block Editor and restored repeater media field setup. Widget Block: Improv 1.73.0
6. — Version 1.72.0 Anything Carousel: Added bottom-right arrows navigation layout. Features: Linked the title when the column link overlay is enabled. Hero: Fixed FitText refresh on mobile devices. Slider: Fixed cover background tiling. Vi 1.72.0

11 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. Medium · 5.4 SiteOrigin Widgets Bundle <= 1.70.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Shortcode Execution ↗
   2026-02-17 CVE-2026-2127 Missing Authorization Affects <= 1.70.4 Patched in 1.71.0
2. Medium · 6.4 SiteOrigin Widgets Bundle <= 1.68.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via `data-url` DOM Element Attribute ↗
   2025-06-24 CVE-2025-5585 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.68.5 Patched in 1.69.0
3. Medium · 4.3 SiteOrigin Widgets Bundle <= 1.64.0 - Missing Authorization ↗
   2024-12-10 CVE-2024-54268 Missing Authorization Affects <= 1.64.0 Patched in 1.64.1
4. Medium · 6.4 SiteOrigin Widgets Bundle <= 1.62.2 - Authenticated (Contributor+) Stored Cross-Site Scripting in Image Grid widget ↗
   2024-07-30 CVE-2024-5901 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.62.2 Patched in 1.62.3
5. Medium · 6.4 SiteOrigin Widgets Bundle <= 1.61.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via SiteOrigin Blog Widget ↗
   2024-06-10 CVE-2024-5090 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.61.1 Patched in 1.62.0
6. Medium · 6.4 SiteOrigin Widgets Bundle <= 1.60.0 - - Authenticated (Contributor+) Stored Cross-Site Scripting via 'siteorigin_widget' Shortcode ↗
   2024-05-21 CVE-2024-4362 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.60.0 Patched in 1.61.0
7. Medium · 6.4 SiteOrigin Widgets Bundle <= 1.58.7 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
   2024-03-04 CVE-2024-1723 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.58.7 Patched in 1.58.8
8. Medium · 6.4 SiteOrigin Widgets Bundle <= 1.58.2 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
   2024-02-12 CVE-2024-1070 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.58.2 Patched in 1.58.3
9. Medium · 6.4 SiteOrigin Widgets Bundle <= 1.58.3 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
   2024-02-12 CVE-2024-1058 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.58.3 Patched in 1.58.4
10. Medium · 6.4 SiteOrigin Widgets Bundle <= 1.58.1 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2024-01-29 CVE-2024-0961 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.58.1 Patched in 1.58.2
11. Medium · 5.9 SiteOrigin Widgets Bundle < 1.51.0 - Authenticated (Admin+) Local File Inclusion ↗
    2023-11-27 CVE-2023-6295 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') Affects <= 1.50.1 Patched in 1.51.0

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0

Translated into 94 languages, 5 at 90% or more

Plus 70 more locales with partial translations.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2025-10-25 500K+ → 400K+ down after 433 days in tier
2. 2024-08-18 600K+ → 500K+ down after 370 days in tier
3. 2023-08-14 700K+ → 600K+ down after 270 days in tier
4. 2022-11-17 800K+ → 700K+ down after 1 days in tier
5. 2022-11-16 700K+ → 800K+ up after 1 days in tier
6. 2022-11-15 800K+ → 700K+ down

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• JetFormBuilder — Dynamic Blocks Form Builder 80K+ installs · 4.1★ · 2 shared tags A
• HT Slider For Elementor 20K+ installs · 3.9★ · 2 shared tags B
• Sinatra Core 8K+ installs · 3.7★ · 2 shared tags D
• H HootKit 8K+ installs · 4.2★ · 2 shared tags A
• Latest Posts Block – Dynamic Posts Grid, Posts List, Posts Tile with Stunning Layouts for WordPress Blogs & Pages 6K+ installs · 3.9★ · 2 shared tags B
• Slide everything for Elementor 6K+ installs · 4.2★ · 2 shared tags C

Embed this report card

Drop a live Pulse card for SiteOrigin Widgets Bundle into a readme, a review or a deck. It updates itself.

SiteOrigin Widgets Bundle: 400K+ active installs, 4.9★ (134 reviews). Plugin Pulse (WP Mayor), as of 2026-08-25. https://plugins.wpmayor.com/plugin/so-widgets-bundle