Bold Page Builder

79 Quality Score

Active Installs

21/30

With 40,000 active installs and a popularity score of 69, the plugin has a modest user base that is dwarfed by Elementor's 10 million installs.

Update Freshness

25/25

A perfect 100 maintenance score is supported by a recent update on June 29, 2026, and confirmed compatibility with WordPress 7.0.

User Rating

11/15

The 72 out of 100 rating from 66 users is acceptable but not strong, suggesting mixed experiences among the small pool of reviewers.

Support Health

8/15

A support health score of 50 and a 0 percent resolution rate across 2 threads is a real concern for anyone who may need help troubleshooting.

WP Compatibility

15/15

A perfect 100 compatibility score reflects tested support for WordPress 7.0 and a low minimum requirement of WordPress 5.0.

Scores higher than 71% of indexed plugins

About

Free Page Builder and Visual Composer - Build stunning responsive post and page layouts with easy to use drag and drop builder - no coding required.

Active Installs 40k+

Rating ★★★½ 3.6/5

Last Updated 2026-09-09 12:02pm GMT

Requires WordPress 5.0+

Tested Up To 7.0.4

Security History

41 known vulnerabilities, all patched

2 High 38 Medium 1 Low

Most recent: September 15, 2026

View details ▸

Bold Page Builder <= 5.9.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'shortcode_content' Parameter Medium

September 15, 2026 Patched in ["5.9.7"] CVE-2026-5920

Bold Page Builder <= 5.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting Medium

September 11, 2026 Patched in ["5.9.10"] CVE-2026-62110

Bold Page Builder < 5.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting Medium

September 6, 2026 Patched in ["5.9.9"] CVE-2026-84028

Bold Page Builder < 5.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting Medium

September 5, 2026 Patched in ["5.9.8"] CVE-2026-84021

Bold Page Builder < 5.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting Medium

September 5, 2026 Patched in ["5.9.8"] CVE-2026-84022

Bold Page Builder <= 5.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting Medium

August 15, 2026 Patched in ["5.6.9"] CVE-2026-2357

Bold Page Builder <= 5.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_button Shortcode Medium

May 13, 2026 Patched in ["5.6.9"] CVE-2026-3694

Bold Page Builder <= 5.9.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Medium

February 6, 2026 Patched in ["5.9.7"] CVE-2025-12159

Bold Page Builder <= 5.6.3 - Authenticated (Author+) Stored DOM-based Cross-Site Scripting in Post Grid Medium

February 6, 2026 Patched in ["5.6.4"] CVE-2025-13463

Bold Builder <= 5.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_tabs Shortcode Medium

February 6, 2026 Patched in ["5.5.4"] CVE-2025-12803

Bold Page Builder <= 5.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_accordion_item Shortcode Medium

February 6, 2026 Patched in ["5.6.3"] CVE-2025-15267

Bold Page Builder <= 5.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting Medium

January 20, 2026 Patched in ["5.7.0"] CVE-2026-25451

Bold Page Builder <= 5.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting Medium

November 27, 2025 Patched in ["5.5.3"] CVE-2025-66057

Bold Page Builder <= 5.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via `percentage` Parameter Medium

October 23, 2025 Patched in ["5.4.6"] CVE-2025-7730

Bold Page Builder <= 5.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting Medium

August 27, 2025 Patched in ["5.4.4"] CVE-2025-58194

Bold Page Builder <= 5.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting Medium

July 16, 2025 Patched in ["5.4.2"] CVE-2025-54006

Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Magnific Popups JavaScript Library Medium

July 2, 2025 Patched in ["5.1.3"] CVE-2024-5647

Bold Builder <= 5.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via additional_settings Parameter Medium

May 28, 2025 Patched in ["5.3.7"] CVE-2025-5286

Bold Page Builder <= 5.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-text' Parameter Medium

May 17, 2025 Patched in ["5.3.6"] CVE-2025-3715

Bold Page Builder <= 5.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting Medium

May 7, 2025 Patched in ["5.3.3"] CVE-2025-47488

Bold Page Builder <= 5.3.0 - Authenticated (Administrator+) Stored Cross-Site Scripting Medium

May 7, 2025 Patched in ["5.3.1"] CVE-2025-47525

Bold Page Builder <= 5.1.5 - Authenticated (Editor+) Path Traversal Low

December 11, 2024 Patched in ["5.1.6"] CVE-2024-54382

Bold Page Builder <= 5.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting Medium

December 2, 2024 Patched in ["5.2.2"] CVE-2024-53801

Bold Page Builder <= 5.1.3 - Missing Authorization Medium

October 24, 2024 Patched in ["5.1.4"] CVE-2024-50417

Bold Page Builder <= 5.1.- - Authenticated (Contributor+) Stored Cross-Site Scripting Medium

September 30, 2024 Patched in ["5.1.1"] CVE-2024-47391

Bold Page Builder <= 5.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting Medium

September 24, 2024 Patched in ["5.1.2"] CVE-2024-47298

Bold Page Builder <= 5.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_button Shortcode Medium

July 29, 2024 Patched in ["5.0.3"] CVE-2024-7100

Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Separator Element Medium

April 9, 2024 Patched in ["4.8.9"] CVE-2024-2733

Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via AI Features Medium

April 9, 2024 Patched in ["4.8.9"] CVE-2024-2734

Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via "Price List" Element Medium

April 9, 2024 Patched in ["4.8.9"] CVE-2024-2735

Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via HTML Tags Medium

April 9, 2024 Patched in ["4.8.9"] CVE-2024-2736

Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget URL Attribute Medium

April 5, 2024 Patched in ["4.8.9"] CVE-2024-3266

Bold Page Builder <= 4.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_price_list Shortcode Medium

April 5, 2024 Patched in ["4.8.9"] CVE-2024-3267

Bold Page Builder <= 4.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via class Medium

March 25, 2024 Patched in ["4.7.7"] CVE-2024-30179

Bold Page Builder <= 4.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Icon Link Medium

February 12, 2024 Patched in ["4.8.1"] CVE-2024-1160

Bold Page Builder <= 4.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button URL Medium

February 12, 2024 Patched in ["4.8.1"] CVE-2024-1157

Bold Page Builder <= 4.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Raw Content Medium

February 12, 2024 Patched in ["4.8.1"] CVE-2024-1159

Bold Page Builder <= 4.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting Medium

December 5, 2023 Patched in ["4.7.0"] CVE-2023-49823

Bold Page Builder <= 4.3.2 - Authenticated (Admin+) Stored Cross-Site Scripting Medium

June 20, 2022 Patched in ["4.3.3"] CVE-2022-2089

Bold Page Builder <= 3.1.5 - PHP Object Injection High

August 2, 2021 Patched in ["3.1.6"] CVE-2021-24579

Bold Page Builder <= 2.3.1 - Missing Authorization to Settings Update High

August 23, 2019 Patched in ["2.3.2"] CVE-2019-15821

What It Does

Bold Page Builder is a drag and drop front-end editor that lets WordPress users assemble responsive page and post layouts without writing code. It includes prebuilt elements such as buttons, images, sliders, and content blocks that can be combined into custom layouts. The plugin focuses on a visual editing workflow aimed at users who want design control without touching HTML or CSS.

Who It's For

This plugin fits small businesses, freelancers, and solo site owners who need a quick way to build custom landing pages or portfolio layouts without hiring a developer. It works well for the listed use cases like real estate agent listings, restaurant sites, and wedding photographer portfolios where a tailored visual design matters more than deep e-commerce or membership features. Users with simple content sites who do not want the overhead of a larger ecosystem will find it a reasonable fit.

Who Should Skip It

Anyone building a high-traffic, content-heavy, or e-commerce driven site should skip this plugin, since it has only 40,000 installs and a support resolution rate of 0 percent across 2 threads. Power users who need a large template library, theme building, or deep third-party integrations will be better served by Elementor or SeedProd.

The Bottom Line

Bold Page Builder is a competently maintained drag and drop option that delivers the basics for small brochure-style sites, with a recent update and strong compatibility signals. However, its small install base, mediocre rating, and unaddressed support threads make it a second tier choice compared to Elementor, SeedProd, or the Gutenberg-based alternatives. Pick it if you want a simple free builder and are comfortable troubleshooting on your own.

Related Plugins

Elementor Website Builder 95/100

Choose Elementor if you want the largest ecosystem, the most templates, and the deepest third-party integration support in the WordPress page builder space.

Spectra Legacy 95/100

Pick Spectra if you prefer building inside the native Gutenberg editor with block based workflows rather than a separate visual canvas.

Kadence Blocks 89/100

Go with Kadence Blocks if you want lightweight Gutenberg enhancements focused on performance and design control without a full standalone builder.

Classic Widgets 89/100

Classic Widgets is not a real alternative here; it only restores old widget screens and should not be considered for page building.

Website Builder by SeedProd 88/100

Choose SeedProd if your priority is fast landing pages, coming soon screens, and maintenance mode alongside a polished visual builder.