Themify Builder

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. A small install base leaves thin data to model from.

1. ★★★★★ wilm0

   1.6y ago

   I have been using it for almost a year now and I love it. no hidden purchases or having to pay extra for the simplest features 🙂Love it This topic was modified 1 year, 5 months ago by wilm0.

   Read on wp.org ↗
2. ★★★★★ tspin625

   2.0y ago

   Nifty plugin that gives suprisingly enough power to create many layouts and designs. Keep it up!

   Read on wp.org ↗
3. ★★★★★ Droic

   2.8y ago

   Themify is great for extremely simple websites, like 1 page brochure websites or display a restaurant menu or something like that. If you want any more advanced features in perpetuity (over WordPress version updates or Themify theme/plugin updates) be prepared to pore over your sites looking for bugs introduced during update processes. It is at the point that I am afraid to update larger websites that I have set up because I simply don’t have the time to check if each and every page to see if things have gone awry. Some examples of errors I’ve found (just in the update process of random versions, there are more when using the software in general): Site shortcodes or HTML was backed up for the update, and then restored with escape characters present. So if you had a contactform7 shortcode on the side like [contact form=”1″] then it would be restored after an update as [contact form=\”1\”], and displaying “Contact form could not be found” on the front end. Same issue with embedded iframes, other shortcodes, tables, formatted text, etc. Certain Settings or CSS properties are restored but not completely – for example there’s an option to have a “Frame” border on the sides of a row or section. I had many frames at the bottom of sections with custom colors and styles. The colors and styles were retained through the update, but the frame was positioned at the default “top” position resulting in a hard horizontal line and then the frame upside down from how I set it. More than I can remember… Support is generally responsive if you’ve paid for a level of membership but don’t expect a whole lot.So if you like babysitting a theme and bugfixing it every time you make an update, this is the theme for you. Otherwise I’d recommend trying to find an alternative WYSIWYG theme “builder”.

   Read on wp.org ↗
4. ★★★★★ diamondartdotlove

   3.5y ago

   who literally tried ALL the builders LOL. But Themify won me over hands down. Unfortunately for me it was also, literally, the last one I tried! I was able to figure out the navigation and tools very simply and build an amazing test site in the time I was still debating with the others each time if it was just me! Thank-you Themify, I’m on my way to purchase the Master Pack here soon. Update: I began having major issues with some things, and was told by numerous tech support folks it was the builder/themes wreaking all the havoc. Themify support was/is in my top five, and very close to the top of it. They reached out and provided support that was above and beyond. Not only was I surprised, but very grateful because as you can tell by the first raving review that I left, I very much like the builder and the themes. I prefer it to any of the top names I have tried. Thanks Themify. This topic was modified 3 years, 4 months ago by diamondartdotlove. Reason: Update

   Read on wp.org ↗
5. ★★★★★ phoenixwaller

   4.0y ago

   I created an account just to leave this review to prevent aybody else from the frustrations I feel every time I deal with this hot garbage. This is single handedly the worst builder I’ve ever encountered in 15+ years of using wordpress. Only bother with this plugin if you hate yourself, and plan to never update your website EVER. I inherited maintenance of several websites using this plugin and these are the infuriating problems I encounter every time I try to do even so much as change a sentence. —Am forced to use the front-end editor, despite full tools being available in the backend, they don’t actually DO anything. You can save and update the page as many times as you like. They don’t work in the backend, at all. —Have to copy the HTML for whatever I’m working on before starting because it only goes downhill from here. —Have to make IDENTICAL changes in both the WYSIWYG <b>AND</b> the HTML (don’t forget to backup your HTML again), or nothing changes at all and it reverts to whatever you started with… if you’re lucky. If you’re not lucky you might get an even older version of what you’re working on for some bizarre reason, even if you’ve successfully saved incremental steps. —Save and pray, because 99.99% chance all your work just reverted and you have to start over. Changes so simple that they should take only a matter of minutes can turn into a project of several hours because of how awful this builder is. Do yourself and anybody you might have look at your website a favor and DO NOT USE THIS.

   Read on wp.org ↗
6. ★★★★★ ariefsalafudin

   4.2y ago

   I am happy when use the builder,fast speed builder and many menu to build better website

   Read on wp.org ↗
7. ★★★★★ pipetko

   4.3y ago

   Good, light and easy builder. Works good, fast speed of all pages made with it. Also Themify themes are easy to use and with a very good page speed etc. This topic was modified 3 years, 1 month ago by pipetko.

   Read on wp.org ↗
8. ★★★★★ billfish

   4.5y ago

   I thought I should submit a review stating that I had a problem with a Themify theme breaking another plugin, but Themify technical support stuck with me until my problem was resolved. (I paid for the theme, and am in my first, supported, year.) I submitted a support ticket and was amazed when I got a response from a support person within 24 hours. The support person stuck with me, answering questions and giving me solutions, until the problem was solved. This took about a week, but each response came within 24 hours, pretty much. I’m not used to getting support this good.

   Read on wp.org ↗

15 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. Medium · 5.3 Themify Builder <= 7.8.0 - Missing Authorization to Unauthenticated Arbitrary Builder Data Modification via 'tb_update_old_data' AJAX Action ↗
   2026-08-21 CVE-2026-75027 Missing Authorization Affects <= 7.8.0 Patched in 7.8.1
2. Medium · 4.3 Themify Builder <= 7.7.7 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Stylesheet Write/Delete via tb_generate_on_fly AJAX Action ↗
   2026-07-15 CVE-2026-15407 Missing Authorization Affects <= 7.7.7 Patched in 7.7.8
3. Medium · 6.4 Themify Builder <= 7.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Map Module 'b_width_map' Field ↗
   2026-07-10 CVE-2026-15096 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 7.7.6 Patched in 7.7.7
4. Medium · 6.4 Themify Builder <= 7.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'height_slider' Slider Module Field ↗
   2026-07-10 CVE-2026-15097 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 7.7.6 Patched in 7.7.7
5. High · 7.2 Themify Builder <= 7.7.4 - Unauthenticated Stored Cross-Site Scripting ↗
   2026-07-07 CVE-2026-57369 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 7.7.4 Patched in 7.7.5
6. Medium · 6.4 Themify Builder <= 7.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
   2025-09-23 CVE-2025-9353 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 7.6.9 Patched in 7.7.0
7. Medium · 4.3 Themify Builder <= 7.6.7 - Missing Authorization ↗
   2025-08-20 CVE-2025-49396 Missing Authorization Affects <= 7.6.7 Patched in 7.6.8
8. Medium · 6.1 Themify Builder <= 7.6.5 - Reflected Cross-Site Scripting ↗
   2025-01-21 CVE-2024-13319 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 7.6.5 Patched in 7.6.6
9. High · 8.8 Themify Builder <= 7.6.3 - Authenticated (Contributor+) Local File Inclusion ↗
   2024-12-19 CVE-2024-56216 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') Affects <= 7.6.3 Patched in 7.6.5
10. Medium · 6.4 Themify Builder <= 7.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2024-11-13 CVE-2024-52423 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 7.6.5 Patched in 7.6.6
11. Medium · 6.1 Themify Builder <= 7.6.2 - Reflected Cross-Site Scripting ↗
    2024-10-04 CVE-2024-9385 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 7.6.2 Patched in 7.6.3
12. Medium · 4.3 Themify Builder <= 7.6.1 - Missing Authorization to Authenticated (Contributor+) Post Duplication ↗
    2024-08-21 CVE-2024-7836 Incorrect Authorization Affects <= 7.6.1 Patched in 7.6.2
13. Medium · 6.1 Themify Builder <= 7.5.7 - Open Redirect via 'tb_redirect_fail' ↗
    2024-05-23 CVE-2024-3032 URL Redirection to Untrusted Site ('Open Redirect') Affects <= 7.5.7 Patched in 7.5.8
14. Medium · 4.3 Themify Builder <= 7.0.5 - Cross-Site Request Forgery ↗
    2024-02-05 CVE-2024-24872 Cross-Site Request Forgery (CSRF) Affects <= 7.0.5 Patched in 7.0.6
15. Medium · 6.1 Themify Builder <= 5.3.1 - Reflected Cross-Site Scripting ↗
    2021-10-04 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 5.3.1 Patched in 5.3.2

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0.1

Translated into 3 languages, 0 at 90% or more

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-02-12 6K+ → 5K+ down after 94 days in tier
2. 2025-11-10 7K+ → 6K+ down after 4 days in tier
3. 2025-11-06 6K+ → 7K+ up after 10 days in tier
4. 2025-10-27 7K+ → 6K+ down after 6 days in tier
5. 2025-10-21 6K+ → 7K+ up after 1 days in tier
6. 2025-10-20 7K+ → 6K+ down after 1 days in tier
7. 2025-10-19 6K+ → 7K+ up after 1 days in tier
8. 2025-10-18 7K+ → 6K+ down after 8 days in tier

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• SKT Page Builder 2K+ installs · 3.5★ · 3 shared tags B
• CB Custom Beaver Builder Modules 1K+ installs · 4.5★ · 3 shared tags D
• Your Friendly Drag and Drop Page Builder — Make Builder 200+ installs · 3.6★ · 3 shared tags B
• Uix Page Builder 90+ installs · 4.0★ · 3 shared tags B
• Elementor Website Builder – more than just a page builder 10M+ installs · 4.5★ · 2 shared tags A
• Kirki – Freeform Page Builder, Website Builder & Customizer 500K+ installs · 4.4★ · 2 shared tags B

Embed this report card

Drop a live Pulse card for Themify Builder into a readme, a review or a deck. It updates itself.

Themify Builder: 5K+ active installs, 3.9★ (24 reviews). Plugin Pulse (WP Mayor), as of 2026-08-29. https://plugins.wpmayor.com/plugin/themify-builder