Code-quality fixes from the WordPress.org review; no change in what a copy looks like.<\/p>","1.2.4":"
Stylesheets in copies are now rebuilt from an allowlist of standard CSS; the editor runtime loads as a script file.<\/p>","1.2.3":"
Adds one-click insert from the wpgraft section Library on wpgraft.com.<\/p>","1.2.2":"
Closing the panel no longer leaves an old rating card in front of the next copy's Insert button.<\/p>","1.2.1":"
Required for Elementor 4.3: without it every copy is refused with "title: invalid_value".<\/p>","1.0.2":"
Direct-download build only.<\/p>","1.0.1":"
Hardening: script, PHP and invalid CSS are stripped from every copy for every user.<\/p>","1.0.0":"
First stable release.<\/p>","0.1.2":"
Adds Beaver Builder and Divi 5, and stops duplicate media on re-import.<\/p>"},"ratings":[],"assets_icons":{"icon-128x128.png":{"filename":"icon-128x128.png","revision":3771313,"resolution":"128x128","location":"assets","locale":"","width":128,"height":128},"icon-256x256.png":{"filename":"icon-256x256.png","revision":3771313,"resolution":"256x256","location":"assets","locale":"","width":256,"height":256}},"assets_banners":{"banner-1544x500.png":{"filename":"banner-1544x500.png","revision":3771313,"resolution":"1544x500","location":"assets","locale":"","width":1544,"height":500},"banner-772x250.png":{"filename":"banner-772x250.png","revision":3771313,"resolution":"772x250","location":"assets","locale":"","width":772,"height":250}},"assets_blueprints":{},"all_blocks":[],"tagged_versions":["1.2.5"],"block_files":[],"assets_screenshots":{"screenshot-1.png":{"filename":"screenshot-1.png","revision":3771313,"resolution":"1","location":"assets","locale":"","width":1280,"height":800},"screenshot-2.png":{"filename":"screenshot-2.png","revision":3771313,"resolution":"2","location":"assets","locale":"","width":1280,"height":800},"screenshot-3.png":{"filename":"screenshot-3.png","revision":3771313,"resolution":"3","location":"assets","locale":"","width":1280,"height":800}},"screenshots":{"1":"The copied section inside your builder's own editor \u2014 a real section with\nreal fields, editable like anything you built by hand.","2":"How a section gets from their page to yours: point at it, wpgraft rebuilds\nit into your builder's format, this plugin drops it into your open editor.","3":"Picking the section on the source page with the browser extension."}},"plugin_section":[],"plugin_tags":[148857,2814,2738,87,1084],"plugin_category":[59],"plugin_contributors":[289300],"plugin_business_model":[],"class_list":["post-364168","plugin","type-plugin","status-publish","hentry","plugin_tags-block-editor","plugin_tags-clone","plugin_tags-copy","plugin_tags-import","plugin_tags-page-builder","plugin_category-utilities-and-tools","plugin_contributors-sasagugunovic","plugin_committers-sasagugunovic"],"banners":{"banner":"https:\/\/ps.w.org\/wpgraft\/assets\/banner-772x250.png?rev=3771313","banner_2x":"https:\/\/ps.w.org\/wpgraft\/assets\/banner-1544x500.png?rev=3771313","banner_rtl":false,"banner_2x_rtl":false},"icons":{"svg":false,"icon":"https:\/\/ps.w.org\/wpgraft\/assets\/icon-128x128.png?rev=3771313","icon_2x":"https:\/\/ps.w.org\/wpgraft\/assets\/icon-256x256.png?rev=3771313","generated":false},"screenshots":[{"src":"https:\/\/ps.w.org\/wpgraft\/assets\/screenshot-1.png?rev=3771313","caption":"The copied section inside your builder's own editor \u2014 a real section with\nreal fields, editable like anything you built by hand."},{"src":"https:\/\/ps.w.org\/wpgraft\/assets\/screenshot-2.png?rev=3771313","caption":"How a section gets from their page to yours: point at it, wpgraft rebuilds\nit into your builder's format, this plugin drops it into your open editor."},{"src":"https:\/\/ps.w.org\/wpgraft\/assets\/screenshot-3.png?rev=3771313","caption":"Picking the section on the source page with the browser extension."}],"raw_content":"\n
wpgraft copies a section of any public web page and rebuilds it inside your own\npage builder \u2014 Elementor, the block editor (Gutenberg), Divi, Bricks, Beaver\nBuilder, Breakdance or Oxygen \u2014 not as an embedded screenshot, not as a block of\npasted HTML, but as the builder's own elements, with the styles written into the\nbuilder's own fields. Once it lands you edit it the way you edit anything else\nyou built by hand.<\/p>\n\n
This plugin is the WordPress half of that. The copying happens in the wpgraft\nbrowser extension; this plugin receives the result, shows it in a panel inside\nthe editor, inserts it into the page you have open, and pulls the images it needs into\nyour Media Library.<\/p>\n\n
Supported editors<\/strong><\/p>\n\n What the plugin itself does<\/strong><\/p>\n\n What it will never insert<\/strong><\/p>\n\n The plugin has no code editor, no CSS box and no field where anyone types code.\nWhat arrives is a page description the conversion service produced; before any\nof it is stored the plugin removes every What it does not do<\/strong><\/p>\n\n No account to connect here, no licence key, no options page to fill in \u2014 the\nsettings screen is a status readout and nothing else. Nothing in this plugin is\nmetered, counted, time-limited or held back for a paid plan: there is no licence\ncheck anywhere in the code, no usage counter and no upgrade prompt. It inserts\nwhatever the extension hands it, on any site, for as long as you keep it\ninstalled. It reads no visitor data and writes nothing to your pages that you\ndid not insert yourself. What it stores: the queue of sections waiting to be\ninserted (per user, removed on insert or discard), the images and embedded\nfonts a copy brings (Media Library and uploads), and the styling of inserted\ncopies in post meta and the builder's own settings.<\/p>\n\n Requires a paid wpgraft plan (an external service)<\/strong><\/p>\n\n This plugin is free software and always will be, but on its own it does nothing:\nsections reach it from the wpgraft browser extension, and the extension converts\na captured page through the wpgraft conversion service. That service is paid:\ncopying requires a wpgraft account with a paid plan \u2014 Pro monthly, Pro yearly or\nLifetime. There is no free tier and no trial. Plans and prices are at\nhttps:\/\/wpgraft.com\/#pricing. The plan is checked there \u2014 in the browser\nextension and on our server, before anything reaches WordPress \u2014 never by this\nplugin. See the section below for exactly what is sent where.<\/p>\n\n Not affiliated with<\/strong> Elementor, Bricks, Elegant Themes (Divi), Beaver\nBuilder, Soflyy (Oxygen, Breakdance) or any other builder vendor. Those names\nappear here to describe compatibility, and they belong to their owners.<\/p>\n\n Bundled resources.<\/strong> The plugin ships the Cooper Hewitt typeface\n( This plugin is a companion to the wpgraft browser extension and the wpgraft\nconversion service, operated by wpgraft (https:\/\/wpgraft.com).<\/p>\n\n 1. The wpgraft conversion service \u2014 used by the extension, not by this plugin.<\/strong>\nWhen you copy a section, the browser extension sends the captured HTML and CSS\nof the page you chose to Plans and prices: https:\/\/wpgraft.com\/#pricing<\/p><\/li>\n Terms: https:\/\/wpgraft.com\/terms<\/p><\/li>\n 2. Downloading the assets a copied section uses.<\/strong> When a section references\nimages, your WordPress site downloads them from the URLs the\ncapture recorded \u2014 usually the site you copied from \u2014 and stores them in your\nMedia Library. That traffic goes from your server to that site directly; it\ndoes not pass through wpgraft. Only users who can already upload files can\ntrigger it. A file is accepted by its own bytes, not its name: raster images,\nweb fonts, and SVG \u2014 every SVG is rebuilt by a sanitizer that removes scripts,\nevent handlers and external references before it is stored. An image that is\nnot imported (the import was switched off, or it failed) keeps its original\naddress, so your visitors' browsers load it from the site it was copied from.<\/p>\n\n 3. The quality rating \u2014 only if you fill it in and press the button.<\/strong> After a\ncopy is inserted, the panel asks how it turned out: a score from 1 to 5, an\noptional comment, and a tick-box that decides whether the copy itself is sent\nback to wpgraft so the fault can be reproduced and fixed. Pressing the button\nsends the score, the comment, the tick, your site's HOSTNAME and this plugin's\nversion to Nothing is sent unless you press that button. Dismissing the card sends nothing.\nUnticking the box sends the score and the comment and no page content at all.\nThe HTML and CSS of the copy do not come from your site \u2014 this plugin never had\nthem \u2014 they are uploaded separately by the browser extension, from the account\nthat made the copy, and only for ratings you consented to.<\/p>\n\n 4. Google Fonts, for the typeface a copied page uses.<\/strong> When a copy names a\nfont, the page it was inserted into links a stylesheet from\n https:\/\/fonts.googleapis.com, so your visitors' browsers load that font from\nGoogle. Only Google Fonts URLs are accepted. A site that wants no third-party\nrequests can drop them with the This build of the plugin's PHP contacts wpgraft.com for nothing at all<\/strong> \u2014\nupdates come from WordPress.org like any other plugin here, and your server\nmakes no request to us. The one request above is made by your browser, from the\neditor screen, when you press the button on the rating card.<\/p>\n\n\n The plugin needs no configuration. Settings \u2192 wpgraft shows which builder it\ndetected, whether the in-editor runtime loaded, and the REST base the extension\ntalks to \u2014 useful when something does not arrive.<\/p>\n\n\n Elementor (both the classic v3 and the atomic v4 document models), Bricks,\nDivi 5, Beaver Builder, Breakdance, Oxygen 6, Oxygen Classic, and the\nWordPress block editor. Each one gets a document written in its own native\nformat, so a copied section arrives as Elementor widgets, Bricks elements,\nDivi modules, Beaver Builder modules or core blocks \u2014 whichever builder you\nopened.<\/p><\/dd>\n Yes. The plugin is the receiving end; nothing is copied without the extension.<\/p><\/dd>\n That is the point of it. Each builder gets its own document written in its own\nformat, with the styles in the builder's own style fields, so you edit, restyle\nand delete the elements normally. Where a builder has no field for something the\nsource page did, the plugin says so rather than faking it with a raw HTML block.<\/p><\/dd>\n No. The plugin itself is free and has no licence check, but every section it\nreceives is converted by the wpgraft conversion service, and that service needs\na paid wpgraft plan \u2014 Pro monthly, Pro yearly or Lifetime. There is no free tier\nand no trial. Without a plan the extension copies nothing, so nothing reaches\nthis plugin. Plans and prices: https:\/\/wpgraft.com\/#pricing<\/p><\/dd>\n No. Your server never contacts wpgraft.com, and updates come from WordPress.org.\nThe only request to wpgraft.com is the rating card's, made by your browser when\nyou press its Send button (see External services, 3).<\/p><\/dd>\n Inserting requires No. The plugin never stores or prints JavaScript or PHP for any user. Script\nelements, event-handler attributes and PHP open tags are removed from every\ncopy before it is stored, the JavaScript field of every builder code element\nis emptied, and every stylesheet is rebuilt from an allowlist of standard CSS.\nNothing the plugin hands a builder is something that builder executes. Links\nthat point at executable code ( Oxygen 6 saves the page itself, in its own request; this plugin is not part of\nthat request. Oxygen's selectors are site-wide, and whenever a save changes\nthem (a pasted copy adds its own), Oxygen rebuilds the stylesheet of every\nselector on the whole site. The time that takes grows much faster than the\nnumber of selectors: a site with a few thousand saves in seconds, one with tens\nof thousands can take minutes. So a site that has received many copies saves\nmore and more slowly, whatever the size of the copy being saved. When the\nrebuild runs past PHP's maximum execution time (often 30 to 120 seconds on\nshared hosting) the save fails.<\/p>\n\n Yes. Whole-page copies and section copies arrive through the same panel and are\ninserted by the same code \u2014 this plugin treats them identically and puts no\nlimit on either. Copying either kind needs a paid wpgraft plan; the plan is\nchecked by the remote conversion service, not by this plugin.<\/p><\/dd>\n\n<\/dl>\n\n\n\n
\n
wpgraft\/v1<\/code>, each one gated on both a capability\ncheck and the wp_rest<\/code> nonce.<\/li>\n<\/ul>\n\nscript<\/code> element, event-handler\nattribute and PHP open tag, and empties every JavaScript field a builder element\nmay have. Every stylesheet in it is parsed and rebuilt from an allowlist: a\ndeclaration is kept only when its property is a standard CSS property and its\nvalue is made of standard CSS values and functions, a selector only when it is\nmade of selector syntax, an at-rule only when it is one of a short list\n(@media<\/code>, @supports<\/code>, @font-face<\/code>, @keyframes<\/code>, \u2026), and url()<\/code> only for\nhttp(s), image and font addresses. Everything else is dropped and reported, and\nno markup character survives in a stored stylesheet. That happens for every\nuser, administrators included, because the content was copied off somebody\nelse's page. On top of that, page-level CSS is only stored\nfor users who hold edit_css<\/code> or unfiltered_html<\/code> \u2014 the capability WordPress\nitself requires for Additional CSS \u2014 and raw-HTML builder elements are only\nkept for users who hold unfiltered_html<\/code>; everyone else gets the section with\nthose parts removed and a warning saying so. Styles are written into each\nbuilder's own fields, so you edit them where you edit everything else.<\/p>\n\nassets\/fonts\/<\/code>), used only for the wordmark on its own settings screen, under\nthe SIL Open Font License 1.1 \u2014 the full text is in\n assets\/fonts\/LICENSE-OFL.txt. Everything else in the plugin is GPLv2 or later.<\/p>\n\nExternal services<\/h3>\n\n
https:\/\/wpgraft.com\/api\/convert<\/code>, together with your\naccount token, and receives the builder document that this plugin then inserts.\nThat request is made by the extension in your browser. This plugin does not make\nit and does not hold your account credentials. Sections picked in the wpgraft\nsection Library (https:\/\/wpgraft.com\/library) arrive the same way, through the\nextension. The service is paid: it converts only for accounts with a paid\nwpgraft plan (Pro monthly, Pro yearly or Lifetime); there is no free tier.<\/p>\n\n\n
https:\/\/wpgraft.com\/api\/feedback<\/code>, from your browser, using a\nsingle-use ticket that came with the copy. No account credential of yours and no\nWordPress credential is involved, and the request carries no cookie. The\ntick-box is ticked by default and the button says what will be sent (\"Send\nrating & copy\" or \"Send rating only\"). The reply is a short thank-you message,\nand for a 5 it may carry a link to leave a review.<\/p>\n\n\n
wpgraft_capture_font_links<\/code> filter.<\/p>\n\n\n
\n
\n
Which page builders does it work with?<\/h3><\/dt>\n
Do I need the browser extension?<\/h3><\/dt>\n
Is a copied section really editable?<\/h3><\/dt>\n
Does it work without a paid plan?<\/h3><\/dt>\n
Does the plugin phone home?<\/h3><\/dt>\n
Which user can use it?<\/h3><\/dt>\n
edit_post<\/code> on the post being edited; importing assets\nrequires upload_files<\/code>. Anything that writes raw HTML or CSS additionally\nrequires unfiltered_html<\/code> \/ edit_css<\/code>, so a contributor cannot smuggle markup\nin through a copied section.<\/p><\/dd>\nCan a copied page inject JavaScript or PHP into my site?<\/h3><\/dt>\n
javascript:<\/code> URLs) are disabled. Each of those\nremovals is reported in the editor panel so you know what was left out.<\/p><\/dd>\nOxygen 6 shows an error or takes minutes when I save a copied page<\/h3><\/dt>\n
\n
max_execution_time<\/code> for the site to 300 seconds (your hosting\npanel, php.ini<\/code> or .user.ini<\/code>, or ask your host).<\/li>\nWill it copy a whole page?<\/h3><\/dt>\n
1.2.5<\/h4>\n\n
\n
1.2.4<\/h4>\n\n
\n
1.2.3<\/h4>\n\n
\n
1.2.2<\/h4>\n\n
\n
1.2.1<\/h4>\n\n
\n
1.2.0<\/h4>\n\n
\n
@font-face<\/code> blocks with embedded data:<\/code>\nfonts are accepted).<\/li>\n1.1.0<\/h4>\n\n
\n
1.0.2<\/h4>\n\n
\n
1.0.1<\/h4>\n\n
\n
style<\/code> element; the settings screen's\nstyling moved to a stylesheet file.<\/li>\n<\/ul>\n\n1.0.0<\/h4>\n\n
\n
0.1.2<\/h4>\n\n
\n
0.1.1<\/h4>\n\n
\n
0.1.0<\/h4>\n\n
\n