WP Manifestindependent plugin directory
manifest / builders / bbdraftutility

Beaver Builder Drafts Utility WP Registry grade C-. High-severity findings · 1 findingWP RegistryHigh-severity findings · 1 findingOpen the reportC-

Provides utilities for Beaver Builder drafts, including scheduling and draft notices

★ 7stars
1.4latest · 1 year ago

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/zackpyle/bbdraftutility/archive/refs/heads/main.zip
Updates itself. It ships its own updater, so new versions appear under Dashboard → Updates.

Beaver Builder Draft Utility

Provides utilities for Beaver Builder drafts, including scheduling and draft notices

Draft Notices

You will be notified that there is a saved Beaver Builder draft in the following ways:

  1. A modal will pop up when you open Beaver Builder:
    Screenshot 2024-08-25 at 07 22 23
  2. In the post list it will say Saved Draft:
    Screenshot 2024-08-25 at 08 09 35
  3. In the post's edit screen, it will display this warning:
    (Respects white label naming)
    Screenshot 2024-08-25 at 07 20 18
  4. The green Beaver Builder status dot will be yellow instead of green in the row actions
    Screenshot 2024-08-25 at 08 09 35
    and in the admin bar
    Screenshot 2024-08-25 at 08 19 36

Schedule Drafts to Publish

(See hooks below if you want to disable this feature)

You can click on the Saved Draft link from the post list to bring up a modal to schedule a date/time for your draft to go live. You can also unschedule and delete drafts from that modal as well.
(Respects white label naming)
Screenshot 2024-08-25 at 07 26 41

After you schedule a draft, a calendar icon will appear next to the Saved Draft link. The scheduled date/time will appear in the modal and when you hover over the calendar icon.
Screenshot 2024-08-25 at 08 22 33

Hooks for Customizing Beaver Builder Draft Utility

The Beaver Builder Draft Utility plugin provides several hooks that allow you to customize its behavior. Below are the available hooks and instructions on how to use them.

1. bb_draft_utility_enable_scheduling

This filter allows you to disable the scheduling feature for drafts. By default, scheduling is enabled, but you can override this behavior by returning false.

Example Usage:

/**
 * Disable the scheduling feature for Beaver Builder drafts.
 *
 * @param bool $enable_scheduling The current state of the scheduling feature.
 * @return bool False to disable scheduling.
 */
add_filter( 'bb_draft_utility_enable_scheduling', function( $enable_scheduling ) {
    return false; // Disable draft scheduling feature
});

2. bb_draft_utility_branding

This filter allows you to override the default branding name for Beaver Builder.

  • If have the agency version of Beaver Builder, this plugin will respect your white label naming.
  • If you are white labeling it in a different way, you can change the builder name using this hook since we dynamically add the name with javascript in some places where php text replacements or translations would not apply.

Example Usage:

/**
 * Override the branding for Beaver Builder drafts.
 *
 * @param string $branding The default branding name.
 * @return string The customized branding name.
 */
add_filter( 'bb_draft_utility_branding', function( $branding ) {
    return 'Awesome Page Builder'; // Replace with your branding
});

3. bb_draft_utility_show_saved_info

This filter determines whether to show the draft author and date saved information in the modals. By default, this information is shown, but you can hide it if needed by returning false.

Example Usage:

/**
 * Hide the "Draft saved by" and "on" information.
 *
 * @param bool $show_saved_info Whether to display the saved information.
 * @return bool False to hide the saved information.
 */
add_filter( 'bb_draft_utility_show_saved_info', function( $show_saved_info ) {
    return false; // Hide the saved info
});

Project inspired by @pross's gist

Releases

5 releases.

Tag
Published
1.4 latest
Apr 14, 2025 1 year ago
1.3
Aug 25, 2024 2 years ago
Aug 25, 2024 2 years ago
1.2
Aug 23, 2024 2 years ago
1.1
Aug 22, 2024 2 years ago

These releases are tags only. The author does not attach a packaged zip, so there are no download counts to report.

C- grade

Security

Beaver Builder Drafts Utility 1.4 · audited by WP Registry

High-severity findings.

1 high
Audited release
1.4
Findings
1
Worst severity
high
Content hash
c8c2ea023f9e916ed63f6ea0…

Findings

  • high Missing capability checks on Beaver Builder draft schedule/delete AJAX

    missing_capability

    The wp_ajax handlers fl_schedule_changes, fl_remove_schedule, and fl_delete_draft only call check_ajax_referer('bb_draft_utility_nonce'). WordPress allows any authenticated user to mint a valid nonce for that action via wp_create_nonce. There is no current_user_can('edit_post', $post_id) (or equivalent). A Subscriber can therefore schedule publication of an existing BB draft to live _fl_builder_data for any post, clear schedules, or delete draft meta on posts they cannot edit.

    includes/bb-draft-scheduler.php:25-128

    Recommendation

    After nonce verification, require current_user_can('edit_post', $post_id) (and ideally FLBuilderModel edit capability). Reject unauthorized requests with wp_send_json_error and HTTP 403.

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.