WP Manifestindependent plugin directory
manifest / editor / page-blocks-builder

GT Page Blocks Builder WP Registry grade A-. Low-severity findings · 1 findingWP RegistryLow-severity findings · 1 findingOpen the reportA-

Build layouts inside WordPress block editor using plain HTML, CSS and JS using CodePen like UI

★ 1stars
65release downloads
v4.2.0latest · 15d ago

Install

Download page-blocks-builder-v4.2.0.zip From the v4.2.0 release on GitHub, Oct 8, 2026

Upload it under Plugins → Add New Plugin → Upload Plugin, then activate.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/wpgaurav/page-blocks-builder/releases/download/v4.2.0/page-blocks-builder-v4.2.0.zip
Updates itself. It ships its own updater (Update URI header), so new versions appear under Dashboard → Updates.

Build, reuse, and place custom HTML/CSS/JS sections anywhere in WordPress — through a visual Gutenberg block, a full-page frontend builder, a reusable block library, theme regions, a shortcode, and a REST API. Works with any theme; pairs especially well with a minimal "blank hybrid" theme that delegates its layout to Page Blocks regions.

Originally part of Marketers Delight's Page Blocks dropin (2018–2026, © Kolakube), now a standalone plugin.

Requires: WordPress 6.0+, PHP 8.1+ · Current version: 3.0.0


What's in the box

Area What you get
Gutenberg block gt-page-block/page-block — an HTML/CSS/JS section with a live, theme-styled preview right in the editor
Visual builder Full-page frontend builder with section list, CodeMirror editors, live preview, and AI generation
Library Reusable blocks stored in a custom table, managed in a card-grid admin panel
Theme building Assign library blocks to theme regions/hooks; themes render them with one function call
Shortcode [page_block id="…"] / [page_block slug="…"]
REST API pbb/v1 — full CRUD, duplicate, and server-render endpoints
WP-CLI wp gt-pb migrate-blocks (block names) and wp gt-pb migrate-library (dropin library import)

The Page Block (block editor)

Insert Page Block (category: Page Blocks) into any post or page.

Preview mode (default when the block has content)

  • Renders your section in an auto-sizing iframe with the active theme's stylesheet, so the canvas shows what visitors will see.
  • Header bar with HTML/CSS/JS/PHP badges and quick actions.
  • Responsive presets: desktop / tablet (768px) / mobile (390px).
  • Dark-scheme toggle: sets data-theme="dark" inside the preview document (works with themes that support that convention).
  • Save to library (admins): promote the inline block to a reusable library block.
  • When Execute PHP or wpautop is enabled, the preview is server-rendered, so PHP output previews accurately.

Code mode

  • Three CodeMirror tabs (HTML / CSS / JS) with line numbers, code folding, bracket matching, undo/redo isolation from Gutenberg, and Tab indentation.
  • Theme class autocompletion: type class="…" in the HTML tab and press Ctrl/Cmd+Space — suggestions are scanned from your active theme's stylesheets.
  • Automatic PHP syntax mode when the HTML contains <?php.
  • Collapsible live preview pane beneath the editor, re-rendering ~400ms after you stop typing, with the same viewport/dark controls.
  • Copy button for the active tab.

Browse library

The block toolbar's Browse library button opens a searchable modal of published library blocks, with two ways to use one:

  • Copy code — pulls the block's full code and settings into this Page Block. The copy is independent from then on.
  • Link — points this Page Block at the library row (blockId). The code stays in one place and every linked placement updates together.

Linked blocks

A Page Block with a non-zero blockId renders the library row instead of its own attributes, and the editor reflects that:

  • The header bar shows the library block's title, ID, and badges, not the block's own (empty) code.
  • The preview comes from the library's /render route, so PHP, shortcodes, and wpautop run exactly as they will on the front end.
  • The HTML/CSS/JS editors are hidden, and the inspector's settings are read-only — edits there would be discarded at render time.
  • Edit in library opens the source block; Change re-points the link; Unlink copies the library code into this block's own attributes and drops the reference.
  • A link whose target is missing or unpublished is called out in place, rather than silently rendering nothing.

Blocks migrated from the Marketers Delight dropin arrive already linked, so this is how those sections appear.

Block settings (inspector)

  • JavaScript Location: footer (default) or inline.
  • WordPress formatting (wpautop): run content through the_content-style formatting.
  • Execute PHP code: run PHP in the block's HTML on the front end (see Security).

On a linked block these mirror the library row and are disabled — unlink to control them here.


Visual builder

A full-page frontend builder for editing all Page Block sections of a post in one place:

  • Launch from the admin bar on any enabled post type, or directly: /?build=page-blocks&post_id={ID}&pb_nonce={nonce}.
  • Sections map 1:1 to gt-page-block/page-block blocks in post_content — Gutenberg remains the source of truth; other blocks are preserved in place.
  • CodeMirror editors with Emmet expansion, live preview with your theme's CSS, page-template switching, and frontend-preview handoff.
  • Sections linked to a library block round-trip their link and render through it; their editors are locked, since edits there would never reach the front end.
  • AI generation (optional): bring your own OpenAI / Anthropic / Gemini API key (Settings page); generate or edit a section's HTML — bundled `

Releases

Newest 25 of 28 recorded releases. Each count is every asset in that release; expand a row for the breakdown.

Tag
Published
Assets
Downloads
v4.2.0 latest
Oct 8, 2026 15d ago
page-blocks-builder-v4.2.0.zip
3
Oct 1, 2026 22d ago
page-blocks-builder-v4.1.0.zip
4
Sep 30, 2026 23d ago
page-blocks-builder-v4.0.0.zip
1
Sep 23, 2026 1mo ago
page-blocks-builder-v3.1.0.zip
3
Sep 21, 2026 1mo ago
page-blocks-builder-v3.0.3.zip
4
Sep 20, 2026 1mo ago
page-blocks-builder-v3.0.2.zip
7
Sep 20, 2026 1mo ago
page-blocks-builder-v3.0.1.zip
1
Sep 5, 2026 1mo ago
page-blocks-builder-v3.0.0.zip
7
Sep 5, 2026 1mo ago
page-blocks-builder-v3.0.0-rc.3.zip
2
Sep 5, 2026 1mo ago
page-blocks-builder-v2.8.1.zip
4
Aug 29, 2026 1mo ago
page-blocks-builder-v2.8.0.zip
1
Aug 28, 2026 1mo ago
page-blocks-builder-v2.7.5.zip
1
Aug 28, 2026 1mo ago
page-blocks-builder-v2.7.4.zip
1
Aug 28, 2026 1mo ago
page-blocks-builder-v2.7.3.zip
1
Aug 28, 2026 1mo ago
page-blocks-builder-v2.7.2.zip
2
Aug 28, 2026 1mo ago
page-blocks-builder-v2.7.1.zip
3
Jun 10, 2026 4mo ago
page-blocks-builder-v2.6.0.zip
3
Apr 14, 2026 6mo ago
page-blocks-builder-v2.4.0.zip
2
Apr 14, 2026 6mo ago
page-blocks-builder-v2.0.2.zip
0
Apr 14, 2026 6mo ago
page-blocks-builder-v2.0.1.zip
2
Apr 14, 2026 6mo ago
page-blocks-builder-v2.0.0.zip
1
Feb 20, 2026 8mo ago
page-blocks-builder-1.3.5.zip
5
Feb 20, 2026 8mo ago
page-blocks-builder-v1.3.3.zip
3
Feb 17, 2026 8mo ago
page-blocks-builder-v1.1.3.zip
1
Feb 17, 2026 8mo ago
tag only
—
All releases on GitHub →
A- grade

Security

GT Page Blocks Builder 4.2.0 · audited by WP Registry

Low-severity findings only.

1 low
Audited release
4.2.0
Findings
1
Worst severity
low
Content hash
1ac3ffcfec6639091b5fabf2…

Findings

  • low Admin-gated PHP execution in page blocks (eval by design)

    eval_by_design

    Library and inline blocks can run stored PHP via execute_php() when php_exec is set. Enabling php_exec on save requires manage_options; library execution is checksum-bound; inline PHP additionally requires GT_PB_ALLOW_INLINE_PHP / MD_ALLOW_INLINE_PHP. This is an intentional admin feature that expands RCE blast radius if an admin account is compromised, not an unauthenticated or subscriber RCE.

    page-blocks-builder/page-blocks-builder.php:3045-3065,3375-3380,3809-3811

    Recommendation

    Keep php_exec restricted to manage_options; prefer disabling inline PHP on production unless required; monitor checksum mismatches.

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.