Skip to content
PluginCanary

Page Builder: Pagelayer - Drag and Drop website builder

by Softaculous · 400,000+ active installs · Checked 3 Nov 2026
Healthy

Healthy: 12 vulnerabilities published in the last 24 months.

82/ 100 Canary Score
Sub-scores for Page Builder: Pagelayer - Drag and Drop website builder
Ownership100
Maintenance100
Security60
Support70
Reputation75

How the score works

Active signals

Facts we detected, with links to the source.

  • InfoSEC-312 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence
  • InfoMOM-2Downloads in the last 4 weeks are down more than half vs the 26-week average. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
plugin-master6 Apr 2019 to 6 Apr 2019, 1 commits
pagelayer8 Apr 2019 to 18 Feb 2025, 224 commits
softaculous19 Sep 2024 to 24 Sep 2026, 54 commits

3 committers recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
41 days ago
Releases, 24 months
30
Tested up to
7.0 vs 7.1
Requires PHP
5.5 supported 8.2+
Releases per quarter for Page Builder: Pagelayer - Drag and Drop website builder
Q1 20245
Q2 20240
Q3 20246
Q4 20244
Q1 20255
Q2 20251
Q3 20253
Q4 20253
Q1 20262
Q2 20264
Q3 20269
Q4 20260

Last release 24 Sep 2026. Tested up to 7.0, 1 major version behind WordPress 7.1.

Support

0% of 1 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
12 Jun 2026Pagelayer <= 2.0.9 - Incorrect Authorization to Authenticated (Contributor+) Mail Relay Configuration via 'contacts'4.3<= 2.0.92.1.00
12 Jun 2026Page Builder: Pagelayer – Drag and Drop website builder <= 2.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Anchor Block6.4<= 2.0.92.1.00
7 Apr 2026Page Builder: Pagelayer <= 2.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Widget Custom Attributes6.4<= 2.0.82.0.90
27 Mar 2026Pagelayer <= 2.0.7 - Improper Neutralization of CRLF Sequences to Unauthenticated Email Header Injection via 'email'5.3<= 2.0.72.0.80
12 Mar 2026PageLayer <= 2.0.8 - Authenticated (Contributor+) Information Exposure4.3<= 2.0.82.0.90
12 Nov 2025Page Builder: Pagelayer – Drag and Drop website builder <= 2.0.5 - Authenticated (Author+) Insecure Direct Object Reference4.3<= 2.0.52.0.60
23 May 2025Page Builder: Pagelayer – Drag and Drop website builder <= 2.0.0 - Reflected Cross-Site Scripting via login_url Parameter4.7<= 2.0.02.0.10
23 May 2025Page Builder: Pagelayer – Drag and Drop website builder <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Link6.4<= 2.0.02.0.10
12 Mar 2025Page Builder: Pagelayer – Drag and Drop website builder <= 1.9.9 - Missing Authorization to Authenticated (Contributor+) Post Publication4.3<= 1.9.82.0.00
11 Mar 2025Page Builder: Pagelayer – Drag and Drop website builder <= 1.9.8 - Authenticated (Contributor+) Private Post Disclosure in pagelayer_builder_posts_shortcode4.3<= 1.9.81.9.90
9 Mar 2025Page Builder: Pagelayer – Drag and Drop website builder <= 1.9.8 - Cross-Site Request Forgery (CSRF) To Post Contents Modification4.3<= 1.9.81.9.90
24 Jan 2025PageLayer <= 1.9.4 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 1.9.41.9.50
4 Sep 2024Page Builder: Pagelayer <= 1.8.9 - Authenticated (Admin+) Stored Cross-Site Scripting4.4<= 1.8.91.9.015
28 Aug 2024PageLayer <= 1.8.7 - Authenticated (Administrator+) Stored Cross-Site Scripting4.4<= 1.8.71.8.80
28 Jul 2024Page Builder: Pagelayer <= 1.8.7 - Authenticated (Admin+) Stored Cross-Site Scripting4.4<= 1.8.71.8.818
28 Mar 2024PageLayer <= 1.8.1 - Missing Authorization4.3<= 1.8.11.8.20
21 Mar 2024Page Builder: Pagelayer – Drag and Drop website builder <= 1.8.4 - Authenticated(Contributor+) Stored Cross-Site Scripting via custom attributes6.4<= 1.8.41.8.50
7 Mar 2024Page Builder: Pagelayer – Drag and Drop website builder <= 1.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Attributes6.4<= 1.8.31.8.40
22 Feb 2024Page Builder: Pagelayer – Drag and Drop website builder <= 1.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button4.6<= 1.8.21.8.31
31 Jan 2024Pagelayer <= 1.7.9 - Authenticated(Administrator+) Stored Cross-Site Scripting via Header/Footer code4.4< 1.8.01.8.00
3 Jan 2024PageLayer <= 1.7.8 - Authenticated(Contributor+) Stored Cross-Site Scripting via meta fields5.4<= 1.7.81.7.90
24 Dec 2023Page Builder: Pagelayer <= 1.7.9 - Authenticated (Admin+) Stored Cross-Site Scripting4.4<= 1.7.91.8.125
1 Dec 2023PageLayer <= 1.7.7 - Cross-Site Request Forgery via pagelayer_load_plugin5.3<= 1.7.71.7.80
25 Sep 2023Page Builder: Pagelayer <= 1.7.7 - Authenticated (Author+) Stored Cross-Site Scripting via Header/Footer6.4<= 1.7.71.7.80
25 Sep 2023Page Builder: Pagelayer – Drag and Drop website builder <= 1.7.6 - Missing Authorization to Stored Cross-Site Scripting7.2<= 1.7.61.7.70

Source: Wordfence Intelligence.

Reputation

Average rating per quarter for Page Builder: Pagelayer - Drag and Drop website builder
Q4 20233.0
Q1 20245.0
Q2 20243.0
Q4 20242.5
Q1 20255.0
Q2 20255.0
Q4 20251.0
Q2 20261.0
Q3 20265.0
Q4 20265.0

Average rating rose from 3.0 to 5.0 between Q4 2023 and Q4 2026.

Rating distribution
5 star70
4 star5
3 star2
2 star1
1 star26
Latest low reviews

Momentum

400,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Page Builder: Pagelayer - Drag and Drop website builder
4 May 20266,344
11 May 202620,541
18 May 202611,000
25 May 20269,753
1 Jun 20268,674
8 Jun 202688,539
15 Jun 202614,757
22 Jun 202687,932
29 Jun 202614,751
6 Jul 202688,902
13 Jul 202616,642
20 Jul 202612,815
27 Jul 202699,414
3 Aug 202689,685
10 Aug 202617,980
17 Aug 202689,976
24 Aug 202612,295
31 Aug 202687,764
7 Sep 202685,393
14 Sep 202693,709
21 Sep 202692,814
28 Sep 202614,596
5 Oct 202612,055
12 Oct 20268,603
19 Oct 20269,933
26 Oct 20269,028
2 Nov 20261,219

Weekly downloads over the last 4 weeks are 82% below the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

Fusion Page BuilderScore 87 · 3,000+SKT Page BuilderScore 87 · 2,000+Landing Page Builder - Coming Soon page, Maintenance Mode, Lead Page, WordPress Landing PagesScore 86 · 8,000+Beaver Builder Page Builder - Drag and Drop Website BuilderScore 83 · 100,000+Colibri Page BuilderScore 83 · 80,000+

Facts

Version2.2.2
AuthorSoftaculous
Added8 Apr 2019
Last updated24 Sep 2026
Active installs400,000+
Requires WordPress4.7
Tested up to7.0.8
Requires PHP5.5
CategoryDesign & Themes > Page Builders & Visual Editors
Tagseditor, landing page, page builder, drag-and-drop, gutenberg blocks

Other plugins by this author: Loginizer, Backuply - Backup, Restore, Migrate and Clone, SpeedyCache - Cache, Optimization, Performance, GoSMTP - SMTP for WordPress, SiteSEO - SEO Simplified, CookieAdmin - Cookie Consent Banner, FileOrganizer - WordPress File Manager, FormLayer, SocialFeeds, Softaculous, ShareMyPost, Kanbanz

Questions

Is Page Builder: Pagelayer - Drag and Drop website builder still maintained?

Page Builder: Pagelayer - Drag and Drop website builder was last updated on 24 Sep 2026. Its Canary status is Healthy.

Is Page Builder: Pagelayer - Drag and Drop website builder safe?

Page Builder: Pagelayer - Drag and Drop website builder has no open unpatched vulnerabilities on record. 12 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns Page Builder: Pagelayer - Drag and Drop website builder?

The wordpress.org author is Softaculous. Recent committers: softaculous, pagelayer, plugin-master. We have recorded no ownership change.

What can I use instead of Page Builder: Pagelayer - Drag and Drop website builder?

Plugins in the same category with a higher Canary Score: Fusion Page Builder, SKT Page Builder, Landing Page Builder - Coming Soon page, Maintenance Mode, Lead Page, WordPress Landing Pages, Beaver Builder Page Builder - Drag and Drop Website Builder, Colibri Page Builder.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue