by
Jonathan Horowitz
4.8 (101 reviews)
Content Visibility for Divi Builder
Content Visibility for Divi Builder.
Content Visibility for Divi Builder ranks #4,876 among WordPress.org plugins with 2,000+ active installations, a 4.8/5 rating from 101 reviews, and was last updated Jun 5, 2026. Data from WordPress.org, refreshed twice daily — see methodology.
Tested up to WP 7 (Current: 7.1.1)
v5.03
Current Version v5.03
Updated 3 months ago
Last Update on 05 Jun, 2026
Refreshed 7 hours ago
Last Refreshed on
Top 10% by installs
Downloads -20.5% this week
Rank
#4,876
+6 this week
Active Installs
2K+
-29.8%
KW Avg Position
60.6
—
No change
Downloads
69.2K
+12 today
Support Resolved
0%
—
No change
Rating
96%
Review 4.8 out of 5
4.8
(101 reviews)
Next Milestone 3K
2K+
3K+
688
Ranks to Climb
-
Growth Needed
8,000,000
Active Installs
Pro
Unlock Exact Install Count
See the precise estimated active installs for this plugin, calculated from real-time ranking data.
- Exact install estimates within tiers
- Track install growth over time
- Milestone progress predictions
Need 171 more installs to reach 3K+
Rank Changes
Current
#4,876
Change
Best
#
Downloads Growth
Downloads
Growth
Peak
Upgrade to Pro
Unlock 30-day, 90-day, and yearly download history charts with a Pro subscription.
Upgrade NowReviews & Ratings
4.8
101 reviews
Overall
96%
5
94
(93%)
4
2
(2%)
3
0
(0%)
2
2
(2%)
1
3
(3%)
Security History
Source: WPVulnerability1 known vulnerability on record · 1 in the last 24 months · checked 1 month ago
-
Content Visibility for Divi Builder [content-visibility-for-divi-builder] < 5.00
CVE-2026-1829 · Fixed in v5.00
Track This Plugin
Get detailed analytics, keyword tracking, and position alerts delivered to your inbox.
Start Tracking FreePlugin Details
- Version
- 5.03
- Last Updated
- Jun 05, 2026
- Requires WP
- 5.5+
- Tested Up To
- 7
- PHP Version
- 7.0 or higher
- Author
- Jonathan Horowitz
Support & Rating
- Rating
- ★ ★ ★ ★ ★ 4.8
- Reviews
- 101
- Support Threads
- 0
- Resolved
- 0%
Keywords
Upgrade to Pro
Unlock keyword rankings, search positions, and detailed analytics with a Pro subscription.
Upgrade Now
TL;DR
AI summary of the plugin's readmeThis plugin is for Divi theme and Divi Builder plugin (version 3+) users who build pages with Sections and Modules. It solves the need to conditionally display or hide content by evaluating a PHP boolean expression, with developer filters to control which functions, tokens, characters, and callables are allowed in those expressions.
- Show/hide Sections and Modules
- PHP boolean expression evaluation
- Works with standalone Divi theme
- Compatible with Divi Builder plugin
- Filter blocked function names
- Filter allowed PHP token types
- Filter allowed single-character tokens
- Filter allowed callables allowlist
Frequently Asked Questions
Common questions about Content Visibility for Divi Builder
Yes! In Divi 4 and below: This plugin detects and modifies Modules and Sections by class inheritance. As long as Elegant Themes continues to have a single root class for everything, this plugin should detect all of them, including third party ones! In Divi 5: This plugin detects and modifies Modules and Sections by instrumenting all Gutenberg block render callbacks. As long as Elegant Themes continues to utilize Gutenberg blocks with render callbacks for everything, this plugin should detect all of them, including third party ones!
Yes. If you decide to deactivate or uninstall this plugin, the "Content Visibility" configuration option will disappear from the Divi Builder, and will not have any effect on the frontend output. Of course, the "Content Visibility" settings that were defined for a particular Section or Module will continue to persist in the database, until that post/page is updated. This can be a good thing, however, as you may want to reinstall/reactivate in the future and not have to re-enter all of your "Content Visibility" expressions!
Once the plugin is installed and activated, a "Content Visibility" option will appear in each Section or Module's settings on either the Advanced tab under Visibility (for Divi 4.x or higher) or the General Settings / Content tab (for Divi 3.x or lower.) You may enter any PHP boolean expression you would like, (e.g. is_user_logged_in()), and the Section or Module will only display if the expression evaluates to true. NOTE: Complex expressions are usually best entered as a custom function call defined in a child theme or plugin! So, for example, you could enter my_custom_function() in the Content Visibility option, and then define that function (returning true or false) in your child theme's functions.php. If there are several common boolean expressions you use, this also has the added benefit of allowing you to change the behavior of your content by simply modifying the function body once instead of re-entering Content Visibility options all over the place.
Starting in version 5.00, the plugin includes expression validation that checks visibility expressions before they are evaluated. This prevents potentially dangerous PHP code (such as system commands, file operations, or network calls) from being executed via visibility expressions. Expression validation works by: Tokenizing the expression using PHP's built-in tokenizer. Checking each token against allowlists of safe token types and operators (function calls, literals, comparison and logical operators, etc.). Checking each callable against a denylist of dangerous functions (e.g. exec, system, file_put_contents, eval, etc.) first, so an accidental allowlist entry never lets a destructive function through. Checking each callable (function or static-method name) against an allowlist of known-safe names. The default list ships WordPress conditional tags (is_user_logged_in, current_user_can, etc.); admins add custom helpers via the content_visibility_for_divi_builder_allowed_callables filter. Detecting attempts to use strings as callable functions (e.g. 'system'('ls')). New installs have validation enabled automatically. Existing installs upgrading to 5.00 will see a non-dismissible admin notice directing them to the Expression Validation tab under Tools > Content Visibility for Divi Builder API Reference. That tab provides a content scanner that checks all existing posts for expressions that would be blocked, plus a copy-paste filter snippet that pre-allowlists every custom callable found in current content. Paste the snippet into a site-specific plugin or your theme's functions.php, re-scan to verify zero remaining errors, then click "Enable Validation". Validation can be disabled later (a "Disable Validation" form appears once it is enabled, requiring you to type DISABLE to confirm). Use this if validation causes unexpected behavior on your site while you investigate. When validation is enabled and an expression is blocked, the content will be shown (not hidden) and an email notification is sent to the site admin with details about the blocked expression. Publishing posts whose content contains expressions that fail validation is blocked at the editor - Gutenberg / the Divi 5 Visual Builder surface a clear error, and the classic editor and the Divi 3 & 4 builders abort the save before any database write so the existing post is left exactly as it was (a published page stays published with its previous content; in-progress edits remain in the editor for you to fix and re-save).
Validation uses a curated allowlist of safe callables (WordPress conditional tags) plus an extension filter for adding your own. Out of the box the following work:
current_user_can('editor')
Numeric / string literals, true / false / null Custom callables (e.g. my_custom_helper() or MyTheme::shouldBeVisible()) are NOT allowlisted by default - admins explicitly add them via the content_visibility_for_divi_builder_allowed_callables filter (a ready-to-paste snippet is generated by the content scanner on the Expression Validation tab). The following types of expressions are blocked: Unknown callables: function or static-method calls not on the allowlist - fix by adding to the allowlist filter or removing from content Bare identifiers: wtf (without parens) - must be a function call, static method, class constant access, or a true/false/null literal Dangerous functions: system('ls'), update_option(...), wp_mail(...), etc. - built-in denylist (filterable) Variable access: $_GET['cmd'] - $ and T_VARIABLE are not allowed String-as-callable: 'system'('ls') - string literal followed by ( Object instantiation: new ReflectionFunction(...) - new keyword blocked (write a static helper that does the new internally instead) Instance method chains: Foo::bar()->baz() - cannot be reliably analyzed; rewrite as a static helper Code execution keywords: eval(...), include(...) - blocked token types Backtick execution: `ls` - backtick character blocked Assignment: $x = 1 - both $ and = are blocked characters
Yes! Three filters are available for developers to customize validation behavior. See the "Developer Filters" section below for details.