Skip to content
PluginCanary

Page Builder by SiteOrigin

by Greg - SiteOrigin · 400,000+ active installs · Checked 4 Nov 2026
Healthy

Healthy: maintained, last release 19 Oct 2026, 28 releases in 24 months, no unpatched vulnerabilities.

81/ 100 Canary Score
Sub-scores for Page Builder by SiteOrigin
Ownership100
Maintenance100
Security60
Support70
Reputation70

How the score works

Quick answers

Is Page Builder by SiteOrigin still maintained?
Yes. Last release 19 Oct 2026, 28 releases in the last 24 months. 19 Oct 2026 · wordpress.org
Who owns Page Builder by SiteOrigin, and has it changed hands?
No change recorded. Main committer SiteOrigin since Dec 2020. 4 Nov 2026 · SVN log
Was Page Builder by SiteOrigin removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
Is Page Builder by SiteOrigin safe?
12 known vulnerabilities, all fixed (latest in 2.38.0). Not on the exploited list. 28 Oct 2026 · Wordfence Intelligence
Is the latest Page Builder by SiteOrigin update safe to install?
No ownership change before 2.38.0. No one-star spike after it. 19 Oct 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
gpriday13 Apr 2013 to 30 Sep 2020, 345 commits
SiteOrigin3 Dec 2020 to 19 Oct 2026, 268 commits

2 committers recorded. No ownership change since 2013.

Maintenance

Last release
15 days ago
Releases, 24 months
28
Tested up to
7.1 current
Requires PHP
7.0.0 supported 8.2+
Releases per quarter
Releases per quarter for Page Builder by SiteOrigin
Q1 202411
Q2 20247
Q3 20244
Q4 20245
Q1 20252
Q2 20255
Q3 20253
Q4 20252
Q1 20262
Q2 20264
Q3 20264
Q4 20262

Last release 19 Oct 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: 1.0 (1 review). Lifetime: 4.8.

Average rating per quarter for Page Builder by SiteOrigin
Q1 20244.0
Q4 20245.0
Q2 20255.0
Q3 20261.0

Average rating fell from 4.0 to 1.0 between Q1 2024 and Q3 2026.

Rating distribution
5 star936
4 star32
3 star9
2 star5
1 star23
Latest low reviews

Security record

7 vulnerabilities in 24 months (12 on record), all patched (latest fixed in 2.38.0).

Show 12 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
28 Oct 2026Page Builder by SiteOrigin < 2.38.0 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4< 2.38.02.38.0Patched before disclosure
28 Oct 2026Page Builder by SiteOrigin < 2.38.0 - Authenticated (Contributor+) Information Exposure4.3< 2.38.02.38.0Patched before disclosure
30 Sep 2026Page Builder by SiteOrigin <= 2.36.0 - Authenticated (Editor+) PHP Object Injection6.6<= 2.36.02.36.1Patched before disclosure
26 Jun 2026Page Builder by SiteOrigin <= 2.34.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via panels_data Parameter6.4<= 2.34.32.34.4Patched before disclosure
2 Mar 2026Page Builder by SiteOrigin <= 2.33.5 - Authenticated (Contributor+) Local File Inclusion8.8<= 2.33.52.34.0Patched before disclosure
28 Feb 2025Page Builder by SiteOrigin <= 2.31.4 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 2.31.42.31.5Patched before disclosure
13 Jan 2025Page Builder by SiteOrigin <= 2.31.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Row Label Parameter6.4<= 2.31.02.31.1Patched before disclosure
20 May 2024Page Builder by SiteOrigin <= 2.29.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'siteorigin_widget' Shortcode6.4<= 2.29.152.29.16Patched before disclosure
22 Mar 2024Page Builder by SiteOrigin <= 2.29.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Legacy Image Widget6.4<= 2.29.62.29.7Patched before disclosure
11 May 2020Page Builder by SiteOrigin <= 2.10.15 - Cross-Site Request Forgery to Reflected Cross-Site Scripting8.8< 2.10.162.10.16Patched before disclosure
5 May 2020Page Builder by SiteOrigin <= 2.10.15 - Cross-Site Request Forgery to Reflected Cross-Site Scripting8.8<= 2.10.152.10.161
1 Dec 2015Page Builder by SiteOrigin < 2.0.5 - Reflected Cross-Site Scripting5.3< 2.0.52.0.5135

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

100% of 2 support threads resolved in the last 2 months.

Momentum

400,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Page Builder by SiteOrigin
4 May 20267,943
11 May 202615,678
18 May 2026301,143
25 May 202637,408
1 Jun 202619,989
8 Jun 202616,046
15 Jun 202613,927
22 Jun 2026150,311
29 Jun 2026167,368
6 Jul 202635,346
13 Jul 2026161,428
20 Jul 202630,614
27 Jul 202620,544
3 Aug 2026170,713
10 Aug 202623,982
17 Aug 202617,903
24 Aug 202625,095
31 Aug 202617,689
7 Sep 202611,993
14 Sep 202612,327
21 Sep 2026146,745
28 Sep 202673,329
5 Oct 2026133,218
12 Oct 202624,883
19 Oct 2026166,900
26 Oct 202638,533
2 Nov 20263,537

Weekly downloads over the last 4 weeks are 14% below the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

Beaver Builder Page BuilderScore 83 · 100,000+Kubio AI Page BuilderScore 83 · 80,000+Colibri Page BuilderScore 83 · 80,000+BrizyScore 83 · 60,000+Page BuilderScore 82 · 400,000+

Facts

Version2.38.0
AuthorGreg - SiteOrigin
Added13 Apr 2013
Last updated19 Oct 2026
Active installs400,000+
Requires WordPress5.9
Tested up to7.1.4
Requires PHP7.0.0
CategoryDesign & Themes > Page Builders & Visual Editors
Tagspage builder, drag-and-drop, visual editor, website builder, responsive design

Other plugins by this author: SiteOrigin Widgets Bundle, SiteOrigin CSS, Masonry Widget, Focus Videos, Simple Options, Secure Image Resizer, Exercise Images by Everkinetic, Theme Checklist, Easy Reader

Questions

Is Page Builder by SiteOrigin still maintained?

Yes. Last release 19 Oct 2026, 28 releases in the last 24 months.

Who owns Page Builder by SiteOrigin, and has it changed hands?

No change recorded. Main committer SiteOrigin since Dec 2020.

Was Page Builder by SiteOrigin removed from wordpress.org?

No. Listed on wordpress.org as of 4 Nov 2026.

Is Page Builder by SiteOrigin safe?

12 known vulnerabilities, all fixed (latest in 2.38.0). Not on the exploited list.

Is the latest Page Builder by SiteOrigin update safe to install?

No ownership change before 2.38.0. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 4 Nov 2026.Report a data issue