WP-Safety

DPLab Page Studio Security & Risk Analysis

wordpress.org/plugins/dplab-pagestudio

A powerful FREE visual layout builder for WordPress with drag-and-drop interface, 17 widgets, and responsive design.

0 active installs v1.0.12 PHP 7.4+ WP 6.0+ Updated Feb 12, 2026
drag-and-droplayout-builderpage-buildertemplatevisual-builder
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Download
Safety Verdict

Is DPLab Page Studio Safe to Use in 2026?

Generally Safe

Score 100/100

DPLab Page Studio has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 1mo ago
Risk Assessment

The "dplab-pagestudio" v1.0.12 plugin exhibits a strong security posture based on the provided static analysis. All identified entry points, including AJAX handlers and REST API routes, appear to have proper authentication and permission checks, indicating good development practices in mitigating unauthorized access. The code also shows excellent output escaping, with 97% of outputs being properly handled, significantly reducing the risk of cross-site scripting (XSS) vulnerabilities. Furthermore, the absence of dangerous functions, file operations, external HTTP requests, and known vulnerability history (CVEs) are all positive indicators of a secure plugin.

Key Concerns

  • SQL queries not consistently using prepared statements
Vulnerabilities
None known

DPLab Page Studio Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 17, 2026

DPLab Page Studio Code Analysis

Dangerous Functions
0
Raw SQL Queries
11
2 prepared
Unescaped Output
7
215 escaped
Nonce Checks
2
Capability Checks
20
File Operations
0
External Requests
0
Bundled Libraries
0

SQL Query Safety

15% prepared13 total queries

Output Escaping

97% escaped222 total outputs
Data Flows
All sanitized

Data Flow Analysis

2 flows
dplab_ps_render_fullscreen_editor (includes\dplab-ps-fullscreen-editor.php:104)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

DPLab Page Studio Attack Surface

Entry Points20
Unprotected0

REST API Routes 19

GET/wp-json/dplab-ps/v1/global-partsincludes\dplab-ps-global-parts.php:64
POST/wp-json/dplab-ps/v1/global-partsincludes\dplab-ps-global-parts.php:73
GET/wp-json/dplab-ps/v1/global-parts/(?P<id>\d+)includes\dplab-ps-global-parts.php:82
PUT/wp-json/dplab-ps/v1/global-parts/(?P<id>\d+)includes\dplab-ps-global-parts.php:91
DELETE/wp-json/dplab-ps/v1/global-parts/(?P<id>\d+)includes\dplab-ps-global-parts.php:100
POST/wp-json/dplab-ps/v1/global-parts/(?P<id>\d+)/set-defaultincludes\dplab-ps-global-parts.php:109
GET/wp-json/dplab-ps/v1/layout-templatesincludes\dplab-ps-layouts.php:47
POST/wp-json/dplab-ps/v1/layout-templatesincludes\dplab-ps-layouts.php:56
GET/wp-json/dplab-ps/v1/layout-templates/(?P<id>\d+)includes\dplab-ps-layouts.php:65
PUT/wp-json/dplab-ps/v1/layout-templates/(?P<id>\d+)includes\dplab-ps-layouts.php:74
DELETE/wp-json/dplab-ps/v1/layout-templates/(?P<id>\d+)includes\dplab-ps-layouts.php:83
POST/wp-json/dplab-ps/v1/render-previewincludes\dplab-ps-preview-api.php:20
POST/wp-json/dplab-ps/v1/render-widgetincludes\dplab-ps-preview-api.php:29
GET/wp-json/dplab-ps/v1/layoutspagestudio.php:778
POST/wp-json/dplab-ps/v1/layoutspagestudio.php:787
GET/wp-json/dplab-ps/v1/layouts/(?P<id>\d+)pagestudio.php:796
PUT/wp-json/dplab-ps/v1/layouts/(?P<id>\d+)pagestudio.php:805
DELETE/wp-json/dplab-ps/v1/layouts/(?P<id>\d+)pagestudio.php:814
GET/wp-json/dplab-ps/v1/menuspagestudio.php:823

Shortcodes 1

[dplab_pagestudio_layout] pagestudio.php:1304
WordPress Hooks 20
actionadmin_menuincludes\dplab-ps-fullscreen-editor.php:28
actionadmin_enqueue_scriptsincludes\dplab-ps-fullscreen-editor.php:99
filtershow_admin_barincludes\dplab-ps-fullscreen-editor.php:142
actioninitincludes\dplab-ps-global-parts.php:56
actionrest_api_initincludes\dplab-ps-global-parts.php:117
actioninitincludes\dplab-ps-layouts.php:39
actionrest_api_initincludes\dplab-ps-layouts.php:91
actionadmin_menuincludes\dplab-ps-migration.php:30
actionrest_api_initincludes\dplab-ps-preview-api.php:37
actionwp_enqueue_scriptsincludes\dplab-ps-template-renderer.php:120
filterdplab_ps_admin_script_dataincludes\dplab-ps-widget-registry.php:155
actionwp_footerpagestudio.php:123
actionwp_footerpagestudio.php:139
actioninitpagestudio.php:158
actionadmin_menupagestudio.php:245
actionadmin_enqueue_scriptspagestudio.php:419
actionadmin_enqueue_scriptspagestudio.php:707
actionwp_enqueue_scriptspagestudio.php:770
actionrest_api_initpagestudio.php:831
filtertemplate_includepagestudio.php:1325
Maintenance & Trust

DPLab Page Studio Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedFeb 12, 2026
PHP min version7.4
Downloads140

Community Trust

Rating0/100
Number of ratings0
Active installs0
Alternatives

DPLab Page Studio Alternatives

LoftBuilder

LoftBuilder

loftbuilder

A
85

Create stunning and responsive pages with LoftBuilder. An intuitive front-end looking, drag & drop page builder.

10 No CVEs
Themify Builder

Themify Builder

themify-builder

A
94

Build responsive layouts that work for desktop, tablets, and mobile using intuitive drag & drop editor with live preview.

5K 10 CVEs
Kopa Page Builder

Kopa Page Builder

kopa-page-builder

A
85

Kopa Page Builder plugin helps you create static pages by manually adding, editing or moving the widgets to the expected sidebars.

200 No CVEs
Mesh – Page Builder

Mesh – Page Builder

mesh

A
85

A page builder, simplified. Get the most flexibility to display content by adding multiple content sections within Pages, Posts, or Custom Post Types.

70 No CVEs
Octonis Page Builder

Octonis Page Builder

octonis-page-builder

A
85

Build amazing web pages or website without any programming skills. Just choose and customize blocks. Focus on the goal, not on technical issues .

10 No CVEs
Developer Profile

DPLab Page Studio Developer Profile

dplabapp

1 plugin · 0 total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect DPLab Page Studio

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/dplab-pagestudio/build/css/frontend.css/wp-content/plugins/dplab-pagestudio/build/js/frontend.js/wp-content/plugins/dplab-pagestudio/build/css/editor.css/wp-content/plugins/dplab-pagestudio/build/js/editor.js
Script Paths
/wp-content/plugins/dplab-pagestudio/build/js/frontend.js/wp-content/plugins/dplab-pagestudio/build/js/editor.js
Version Parameters
dplab-pagestudio/build/css/frontend.css?ver=dplab-pagestudio/build/js/frontend.js?ver=dplab-pagestudio/build/css/editor.css?ver=dplab-pagestudio/build/js/editor.js?ver=

HTML / DOM Fingerprints

CSS Classes
dplab-ps-frontenddplab-ps-editor
HTML Comments
<!-- DPLAB PAGE STUDIO: Begin Frontent Data --><!-- DPLAB PAGE STUDIO: End Frontent Data -->
Data Attributes
data-dplab-ps-layoutdata-dplab-ps-options
JS Globals
dplab_ps_frontend_datadplab_ps_editor_data
FAQ

Frequently Asked Questions about DPLab Page Studio