Skip to content
PluginCanary

Bold Page Builder

by boldthemes · 40,000+ active installs · Checked 3 Nov 2026
Healthy

Healthy: maintained, last release 3 Nov 2026, 70 releases in 24 months, no unpatched vulnerabilities.

80/ 100 Canary Score
Sub-scores for Bold Page Builder
Ownership100
Maintenance100
Security60
Support70
Reputation60

How the score works

Quick answers

Is Bold Page Builder still maintained?
Yes. Last release 3 Nov 2026, 70 releases in the last 24 months. 3 Nov 2026 · wordpress.org
Who owns Bold Page Builder, and has it changed hands?
No change recorded. Main committer boldthemes since Jan 2017. 3 Nov 2026 · SVN log
Was Bold Page Builder removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
Is Bold Page Builder safe?
46 known vulnerabilities, all fixed (latest in 5.7.3). Not on the exploited list. 29 Sep 2026 · Wordfence Intelligence
Is the latest Bold Page Builder update safe to install?
No ownership change before 5.9.11. No one-star spike after it. 3 Nov 2026 · Release history

Active signals

Facts we detected, with links to the source.

  • InfoMOM-2Downloads in the last 4 weeks are down more than half vs the 26-week average. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
boldthemes13 Jan 2017 to 3 Nov 2026, 564 commits

1 committer recorded. No ownership change since 2017.

Maintenance

Last release
yesterday
Releases, 24 months
70
Tested up to
7.0 vs 7.1
Requires PHP
not stated supported 8.2+
Releases per quarter
Releases per quarter for Bold Page Builder
Q1 202441
Q2 202414
Q3 202412
Q4 20249
Q1 20254
Q2 202511
Q3 20257
Q4 202510
Q1 202616
Q2 202612
Q3 20265
Q4 20261

Last release 3 Nov 2026. Tested up to 7.0, 1 major version behind WordPress 7.1.

Reputation

Last 90 days: no reviews. Lifetime: 3.6.

Average rating per quarter for Bold Page Builder
Q4 20235.0
Q2 20245.0
Q3 20241.0
Q4 20241.7
Q1 20252.3
Q2 20253.0

Average rating fell from 5.0 to 3.0 between Q4 2023 and Q2 2025.

Rating distribution
5 star35
4 star5
3 star4
2 star6
1 star16
Latest low reviews

Security record

28 vulnerabilities in 24 months (46 on record), all patched (latest fixed in 5.7.3).

Show 46 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
29 Sep 2026Bold Page Builder <= 5.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_service title6.4<= 5.7.25.7.3Patched before disclosure
29 Sep 2026Bold Page Builder <= 5.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'background_image' Parameter6.4<= 5.7.25.7.3Patched before disclosure
29 Sep 2026Bold Page Builder <= 5.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_css_image_grid 'images' Shortcode Attribute6.4<= 5.7.25.7.3Patched before disclosure
29 Sep 2026Bold Page Builder <= 5.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'target' Shortcode Attribute6.4<= 5.7.25.7.3Patched before disclosure
29 Sep 2026Bold Page Builder <= 5.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'caption' Parameter6.4<= 5.7.25.7.3Patched before disclosure
15 Sep 2026Bold Page Builder <= 5.9.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'shortcode_content' Parameter6.4<= 5.9.65.9.7Patched before disclosure
11 Sep 2026Bold Page Builder <= 5.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 5.9.95.9.10Patched before disclosure
6 Sep 2026Bold Page Builder < 5.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4< 5.9.95.9.9Patched before disclosure
5 Sep 2026Bold Page Builder < 5.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4< 5.9.85.9.8Patched before disclosure
5 Sep 2026Bold Page Builder < 5.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4< 5.9.85.9.8Patched before disclosure
15 Aug 2026Bold Page Builder <= 5.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 5.6.85.6.9Patched before disclosure
13 May 2026Bold Page Builder <= 5.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_button Shortcode6.4<= 5.6.85.6.9Patched before disclosure
6 Feb 2026Bold Page Builder <= 5.9.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4<= 5.9.65.9.7202
6 Feb 2026Bold Page Builder <= 5.6.3 - Authenticated (Author+) Stored DOM-based Cross-Site Scripting in Post Grid6.4<= 5.6.35.6.432
6 Feb 2026Bold Builder <= 5.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_tabs Shortcode6.4<= 5.5.35.5.4Patched before disclosure
6 Feb 2026Bold Page Builder <= 5.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_accordion_item Shortcode6.4<= 5.6.15.6.319
20 Jan 2026Bold Page Builder <= 5.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 5.6.95.7.058
27 Nov 2025Bold Page Builder <= 5.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 5.5.25.5.349
23 Oct 2025Bold Page Builder <= 5.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via `percentage` Parameter6.4<= 5.4.55.4.612
27 Aug 2025Bold Page Builder <= 5.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 5.4.35.4.468
16 Jul 2025Bold Page Builder <= 5.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 5.4.15.4.251
2 Jul 2025Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Magnific Popups JavaScript Library6.4<= 5.1.25.1.3Patched before disclosure
28 May 2025Bold Builder <= 5.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via additional_settings Parameter6.4<= 5.3.65.3.740
17 May 2025Bold Page Builder <= 5.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-text' Parameter6.4<= 5.3.55.3.645
7 May 2025Bold Page Builder <= 5.3.0 - Authenticated (Administrator+) Stored Cross-Site Scripting4.4<= 5.3.05.3.11

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

0% of 1 support threads resolved in the last 2 months.

Momentum

40,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Bold Page Builder
4 May 202611,458
11 May 202624,220
18 May 20263,959
25 May 202612,777
1 Jun 202617,787
8 Jun 20262,621
15 Jun 20261,575
22 Jun 202621,633
29 Jun 202612,616
6 Jul 20263,673
13 Jul 20261,529
20 Jul 20261,431
27 Jul 20261,332
3 Aug 202613,649
10 Aug 20262,021
17 Aug 20261,632
24 Aug 202612,305
31 Aug 202622,558
7 Sep 202613,361
14 Sep 20263,914
21 Sep 20262,490
28 Sep 20261,503
5 Oct 20261,444
12 Oct 20261,222
19 Oct 20261,844
26 Oct 20261,439
2 Nov 2026228

Weekly downloads over the last 4 weeks are 84% below the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

Beaver Builder Page BuilderScore 83 · 100,000+Colibri Page BuilderScore 83 · 80,000+Kubio AI Page BuilderScore 83 · 80,000+Page BuilderScore 82 · 400,000+IbtanaScore 82 · 10,000+

Facts

Version5.9.11
Authorboldthemes
Added5 Jan 2017
Last updated3 Nov 2026
Active installs40,000+
Requires WordPress5.0
Tested up to7.0.8
Requires PHPnot stated
CategoryDesign & Themes > Page Builders & Visual Editors
Tagseditor, page builder, site-builder, drag-and-drop, wordpress page builder

Other plugins by this author: Bold Timeline Lite, AIKO - AI Developer Lite, Customize Twenty Seventeen, Customize Twenty Sixteen, Hero Posts Lite, OpenGraphiq Lite, Filter Everything Extra

Questions

Is Bold Page Builder still maintained?

Yes. Last release 3 Nov 2026, 70 releases in the last 24 months.

Who owns Bold Page Builder, and has it changed hands?

No change recorded. Main committer boldthemes since Jan 2017.

Was Bold Page Builder removed from wordpress.org?

No. Listed on wordpress.org as of 3 Nov 2026.

Is Bold Page Builder safe?

46 known vulnerabilities, all fixed (latest in 5.7.3). Not on the exploited list.

Is the latest Bold Page Builder update safe to install?

No ownership change before 5.9.11. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 3 Nov 2026.Report a data issue