WP Manifestindependent plugin directory
manifest / content / acf-mui-page-builder

ACF MUI Page builder WP RegistryHigh-severity findings · 1 findingOpen the reportC-

Enable page builder field

by IT Consultis · github.com/yao3060/acf-mui-page-builder

★ 0stars
1composer installs
v2.0.3latest · 2mo ago

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/yao3060/acf-mui-page-builder/archive/refs/heads/main.zip

On Packagist as yao3060/itc-acf-mui-page-builder:

composer require yao3060/itc-acf-mui-page-builder
No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.
Readme github.com/yao3060/acf-mui-page-builder ↗

WordPress 插件，为 Advanced Custom Fields (ACF) 提供「Page Builder」字段类型，配合外部 MUI 编辑器进行可视化页面搭建。

要求

可选：

  • FileBird — 若已安装，媒体库接口将使用 FileBird；否则使用内置媒体库接口
  • WPML — 若已安装，可为每种语言单独配置编辑器 URL

安装

  1. 将本插件放入 wp-content/plugins/acf-mui-page-builder，或在后台通过「安装插件」上传。
  2. 在 WordPress 后台启用 ACF MUI Page builder。

配置

  1. 在后台进入 设置 → MUI Page builder。
  2. 设置 Editor URL：指向你的 MUI 页面编辑器前端地址（若使用 WPML，可为每种语言设置不同 URL）。
  3. 在 ACF 中创建字段组，添加字段类型 Page builder，并绑定到需要的文章类型（如「页面」）。

功能概览

  • Page Builder 字段：在编辑页中嵌入 iframe，加载外部 MUI 编辑器；保存时通过 ACF 将 blocks 数据写入 blocks 字段。
  • Revisions：每次保存页面时对 blocks 做一次快照，在页面编辑页的「Page Builder Revisions」 metabox 中可查看/删除历史；最多保留 20 条（可在 MuiPageBuilderRevisions::MAX_REVISIONS 中修改）。WordPress 自带页面修订已对本插件关闭（wp_page_revisions_to_keep 设为 0）。
  • 单栏编辑页：页面编辑屏幕强制单栏布局，便于大屏编辑器使用。

开发

./composer install   # 若有依赖（使用仓库根目录的 Docker 封装脚本，而非系统 composer）

前端编辑器入口为 AcfFieldMuiPageBuilder 引用的 dist/main.js，需在仓库外或本仓库内单独构建后放入 dist/。

许可证

GPL-3.0-or-later

Releases

6 releases.

Tag
Published
v2.0.3 latest
Aug 13, 2026 2mo ago
v2.0.2
May 9, 2026 5mo ago
v2.0.1
May 9, 2026 5mo ago
v2.0.0
May 9, 2026 5mo ago
v1.0.1
Mar 31, 2026 6mo ago
v0.0.1
Mar 14, 2025 1 year ago

These releases are tags only. The author does not attach a packaged zip, so there are no download counts to report.

C- grade

Security

ACF MUI Page builder 2.0.3 · audited by WP Registry

High-severity findings.

1 high
Audited release
2.0.3
Findings
1
Worst severity
high
Content hash
227966ddd89fd0a0d04e3296…

Findings

  • high Unauthenticated post/term autocomplete enumerates non-public content

    information_disclosure

    muipagebuilder/v1/autocomplete has permission_callback that returns true. getPosts() SELECTs from wp_posts with no post_status restriction (includes draft/private/pending) and returns id, title, status, type, name, and permalink path. Unauthenticated callers can enumerate unpublished content titles and slugs.

    MuiPageBuilderAutocomplete.php:11-45,100-130

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.

Full report on WP Registry →