Bold Page Builder · Version history
Bold Page Builder changelog and version history
- Latest version
- 5.9.11
- Nov 3, 2026 (6 days ago)
- Releases
- 21
- since 2024
- In the last year
- 20
- about one every 13 days
- Tested up to
- WordPress 7.0.8
Releases each year
- 20241 release
- 202620 releases
202620 releases
Bold Page Builder 5.9.11Latest
- Rank Math SEO: content analysis now reads the rendered page built with the builder instead of its raw shortcodes, so headings (including an H1 set on a Headline element), images, links and word count are detected. The analysis updates while you edit, without saving first, and Rank Math’s Recalculat…
- Yoast SEO: the analysis now updates while you edit instead of only after saving, and the first analysis on page load waits for the rendered page rather than starting from raw shortcodes.
- The Yoast SEO integration now loads only when Yoast SEO is active, and no longer overrides the builder’s own AJAX settings.
- Clicking a duplicated slide in an infinitely looping slider with lightbox enabled now opens the lightbox at the right image; previously those slides did nothing.
- New “Separator (Medium)” section template, a separator with no line; the existing template is now named “Separator (Solid)”.
Bold Page Builder 5.9.10
- Security: the Section element’s YouTube video settings are now read into a fixed list of known settings, checked against the type each one expects, and written to the page as data rather than as JavaScript, preventing a stored XSS where a crafted value closed the settings object and ran script for…
- Security: the bundled YouTube background player no longer evaluates any of its settings as JavaScript.
- The YouTube video settings field now only accepts the settings the background player actually has, so a misspelled or unsupported setting is ignored instead of being passed on. Values must be written in the form the player documents, for example startAt:20, mute:true, anchor:'center,center'.
- Note for developers: the new bt_bb_yt_video_settings_schema filter adds a setting to that list, and bt_bb_yt_video_settings adjusts the finished set of settings for an element.
Bold Page Builder 5.9.9
- Security: the additional settings on both slider elements can no longer carry HTML in any encoding, preventing a stored XSS where an entity-encoded tag survived escaping, was decoded again when the browser read the slider configuration attribute, and was then built as markup by the slider (authenti…
- The Additional settings field on the Slider and Content Slider elements no longer accepts HTML, so a slider configured with custom arrow markup falls back to the built-in arrows.
- Note for developers: the new bt_bb_slick_additional_settings filter is the supported way to put markup back into a slider configuration. A callback that overrides it is responsible for escaping what it returns.
Bold Page Builder 5.9.8
- Security: element link URLs are now checked against an allow list of schemes after control characters are removed, so a scheme disguised with an embedded control character or entity can no longer run script when the link is clicked (authenticated, content-editing users) — reported by Minaruzzaman S…
- Security: the Section element’s background video settings and the Image element’s content background colour are now escaped before they are written into the rendered markup, preventing a stored XSS via a crafted attribute value (authenticated, content-editing users) — reported by Revanth Hari Naray…
- Security: the Content Slider element now escapes its additional settings before writing them into the slider configuration attribute, preventing a stored XSS via a crafted attribute value (authenticated, content-editing users) — reported by Luka Zimonjic (CVE-2025-5286).
- Security: escaped the remaining unescaped element attributes found while reviewing the above — the number of slides in both slider elements, the Post Grid category filter, the Icon element’s text, and the grid pagination class.
- The publish and expiry dates on elements now use the site’s timezone and the exact minute they are set to; previously they were evaluated in UTC and the minute was read incorrectly. Elements with no publish or expiry date set are unaffected.
- Note for developers: javascript: URLs are no longer accepted in element link fields for any user. A site that needs an additional scheme can add one with the new bt_bb_allowed_url_schemes filter.
Bold Page Builder 5.9.7
- Security: the Raw Content element now sanitizes its output with wp_kses_post() unless the post author is allowed to publish unfiltered HTML, so a crafted element can no longer execute script for other users (authenticated, content-editing users).
- Security: the builder’s save-time element gate now runs after WordPress’ own kses filter and matches the content in its stored form, closing a bypass that hid a restricted element behind markup kses removed afterwards.
- Fixed the Custom Menu element discarding its responsive parameter overrides, so per-breakpoint values such as font size now apply instead of only the desktop value.
Bold Page Builder 5.9.6
- Security: the Post Grid and Image Grid elements now build their lazy-loaded images through DOM attributes instead of HTML string concatenation, preventing a stored XSS via a crafted attachment ALT text or title (authenticated, media-uploading users).
- Security: the Service element now validates its title HTML tag against an allow list, preventing a stored XSS via a crafted tag name (authenticated, content-editing users).
Bold Page Builder 5.9.5
- Security: escaped the shortcode bb_version attribute before it is written into the rendered output, preventing a stored XSS via a crafted attribute value (authenticated, content-editing users).
- Security: added a capability check and nonce verification to the builder link-search AJAX endpoint, so it can no longer be used to enumerate posts, pages, and media URLs/metadata by low-privileged or cross-site requests.
Bold Page Builder 5.9.4
- Fixed colored-icon SVGs being stripped in the front-end editor preview (added inline SVG to the editor re-render kses allowlist).
Bold Page Builder 5.9.3
- Redesigned the Row “Columns layout” control: row width and column structure are now selected separately, with the column structure shown as layout preview thumbnails.
- Fixed horizontal page overflow on rows configured with large gaps.
Bold Page Builder 5.9.2
- Security: hardened the Raw Content save filter against a null-byte / control-character bypass that could allow Contributor-level users to store executable scripts (CVE-2026-5920).
Bold Page Builder 5.9.1
- Fixed CSS Post Grid not rendering the excerpt, share, date, and super/subheadline when those options were enabled.
- Fixed category filtering on the CSS Post Grid and Masonry Post Grid for categories with encoded (non-ASCII) slugs.
Bold Page Builder 5.9.0
- Added 1300, 1500, and 1600 pixel boxed row widths to the Section and Row “Columns layout” / “Row width” dropdowns (alongside the existing 1200 and 1400 options).
- Fixed an unwanted border that appeared around colored headlines on recent WordPress versions.
- Fixed Latest Posts author meta rendering as literal HTML markup instead of a clickable author link.
Bold Page Builder 5.8.2
- Minor bug fixes and improvements.
Bold Page Builder 5.8.1
- Fixed JavaScript errors triggered by clicks on SVG elements from third-party plugins (cookie banners, social widgets, etc.).
- Fixed unresponsive Front-end editor clicks on macOS / Safari — the edit drawer now opens reliably on the first click.
- Publish until / Hide until scheduling now uses the site timezone with minute precision; leaving the field blank correctly means “no limit”.
- Hardened AJAX input handling, output escaping, and external HTTP calls.
- Replaced legacy database lookups and cURL calls with WordPress core APIs (wp_remote_*, get_page_by_path) for better compatibility and caching.
- Improved security.
Bold Page Builder 5.8.0
- Hardened all plugin PHP files against direct file access.
- Reduced scroll jitter on parallax background sections in Chrome.
- Improved security.
- Renamed text domain from bold-builder to bold-page-builder to match the WordPress.org plugin slug. Existing translations using the old text domain will need to be re-imported under the new domain.
Bold Page Builder 5.7.3
- Improved security.
Bold Page Builder 5.7.2
- Minor bug fixes.
Bold Page Builder 5.7.1
- Improved security.
Bold Page Builder 5.7.0
- Improved security.
Bold Page Builder 5.6.9
- Improved security.
20241 release
Bold Page Builder 4.9.8
Questions about Bold Page Builder’s releases
What is the latest version of Bold Page Builder?
5.9.11, released on Nov 3, 2026 (6 days ago). It’s tested up to WordPress 7.0.8.
How often is Bold Page Builder updated?
20 releases in the last year, about one every 13 days. Its first release on WordPress.org dates from May 2024.
Know when your rivals ship
Track your plugin and its rivals: TrackWP sees each new release in the nightly snapshot and alerts you, with what it did to their rank.
Start freeRelease dates come from the day each version’s folder was made in Bold Page Builder’s WordPress.org SVN repository; the notes from its readme’s changelog, as its authors wrote it.