What GeneratePress does on your site
GeneratePress is a classic theme: it provides the header, navigation, sidebars, footer and blog templates, and its settings live under Appearance > Customize. Global colors, the font and typography managers, container width, navigation location and sidebar layouts are all grouped there. In the editor, a “Layout” panel changes the sidebar, footer widgets or content container of a single page, for example to make a page full width.
The theme is built to stay light: according to its wordpress.org listing, a fresh install adds less than 10 KB (gzipped) to a page. Icons are SVG, the layout uses flexbox, and the CSS generated from your settings can be cached. GeneratePress works with the block editor as well as with Elementor or Beaver Builder, and it is often paired with the free GenerateBlocks plugin from the same developer for layout blocks.
The developer is EDGE22 Studios Ltd., Tom Usborne’s company, which has published the theme since 2014. Advanced features live in the GP Premium plugin, now sold only as part of GeneratePress One, which also bundles GenerateBlocks Pro, GenerateCloud (a pattern library shared across your sites) and GeneratePress AI. GP Premium adds Elements (headers, footers and templates built with blocks), sticky and off-canvas menus, mega menus, column and masonry blog layouts, WooCommerce settings and more than 80 starter sites.
Which sites GeneratePress is a good fit for
GeneratePress makes sense when you want a fast, clean foundation that you then build out with blocks:
- Speed-conscious blogs and publishing sites: little CSS and JavaScript out of the box, which leaves headroom for ads and analytics tools.
- Sites built with the block editor: with GenerateBlocks, you lay out pages without a heavy page builder.
- Freelancers and agencies: GeneratePress One covers up to 100 sites, client sites included, and local or staging sites don’t count.
- Sites built with Elementor or Beaver Builder: the theme gets out of the way page by page with the full-width container.
It’s not the best pick if you want a sticky header, a mega menu or ready-to-import starter sites without paying: those features are reserved for GeneratePress One. Compare it with Kadence, whose free version goes further on the header. If you want to control everything from the WordPress Site Editor, choose a block theme instead: GeneratePress is still a classic theme.
GeneratePress strengths and limitations
Strengths
- Very lightweight. Under 10 KB gzipped added to a page according to the developer, with SVG icons and cached dynamic CSS.
- No published theme vulnerabilities. WPScan and Patchstack list no vulnerability in the free theme.
- Code designed to be extended. Hooks and filters let you change most elements without editing the theme files.
- A generous license. The 100-site plan also comes as a lifetime license, and local or staging sites don’t count.
Limitations
- A bare-bones free version. Sticky menu, mega menu, Elements, starter sites and advanced blog layouts are paid features.
- “Built with GeneratePress” credit. The free footer shows it; changing it takes the paid plan or a PHP filter.
- No standalone purchase. GP Premium is no longer sold on its own: you need GeneratePress One, from $99 per year for one site.
- Google Fonts loaded from Google. The free theme calls them from fonts.googleapis.com; local hosting is part of the paid plan.
The GeneratePress settings we recommend
All these settings exist in the current free theme. Most are under Appearance > Customize; a few only appear on sites first installed with an older version of the theme.
| Setting | Recommended value | Why |
|---|---|---|
| Auto-updates Appearance > Themes > GeneratePress (theme details) | Enabled | Theme fixes arrive without waiting for you to log in. |
| Cache dynamic CSS Appearance > Customize > General | Enabled (default) | The CSS produced by your settings is stored instead of being rebuilt on every page. |
| Icon Type Same screen | SVG (default) | Icons are inlined in the markup, with no icon font file to download. |
| Structure Same screen (older sites only) | Flexbox, after testing on staging | The theme warns that switching from Floats to Flexbox can change how the site displays: check every template. |
| Use dynamic typography system Same screen (older sites only) | Enabled, after review | It’s the theme’s current system; font rendering may change, so review your pages. |
| Google font-display Appearance > Customize > Typography | Swap, if you use a Google font | Text shows right away in a fallback font instead of staying invisible while the font loads. |
| Content Container Layout panel in the editor | Full Width for a page built with a page builder | The page builder then handles the page’s margins and width itself. |
- View a page’s source: if you haven’t picked any Google font, no
fonts.googleapis.comURL should appear. - To change the footer credit without the paid plan, use the
generate_copyrightfilter in a plugin like Code Snippets, not in the theme files. - With GP Premium, check under Plugins that you run at least version 2.5.6 and that updates come through: they arrive via your license, not wordpress.org.
GeneratePress security: a clean theme, a plugin to watch
The free theme has no published vulnerability on WPScan or Patchstack, like most of the popular themes covered in our article on vulnerabilities in popular WordPress themes. The known issues affect GP Premium:
- CVE-2023-6807, up to 2.3.2: stored XSS through custom meta output, with a contributor account.
- CVE-2024-3469, fixed in 2.4.1: reflected XSS through a URL parameter, exploitable without an account if a logged-in user clicks a crafted link (CVSS 6.1).
- CVE-2026-66627, fixed in 2.5.6: dangerous file upload by a contributor account, which can lead to code execution (CVSS 9.9).
Version 2.5.6 shipped at the end of May 2026, almost three months before the public advisory in August: an up-to-date site was protected before the flaw was known. So turn on auto-updates for the theme and GP Premium (see our guide to plugin auto-updates), and keep contributor accounts for people you trust. WP Masquerade Pro renames the theme folder, the generate, generatepress and gp script and stylesheet handles and the uploads/generatepress folder, while the generate-* classes stay visible: that makes the site harder for bots to spot, but it doesn’t replace updating.
What WP Masquerade hides for GeneratePress
Pro Handled by WP Masquerade Pro only
The free version does not know the traces specific to GeneratePress: without Pro, only generator tags are removed, as for any plugin.
Free version
Handled by WP Masquerade Pro only
With Pro
- folder name
- tag IDs
- generated-file folders
Still visible
- JavaScript variables
generatepressMenu - CSS classes
gp-icon, generate-*
These traces stay because the plugin needs them to work (scripts, styles, cookies) or because they come from the server.
GeneratePress FAQ
Is the free version of GeneratePress enough?
For a blog or a simple business site, often yes: global colors, typography, sidebar layouts and the full-width container are free, and GenerateBlocks fills out the editor. The paid plan is worth it if you want block-built headers and templates, a sticky menu, a mega menu or an importable starter site.
How much does GeneratePress One cost?
The pricing page lists $99 per year for one site, $149 per year for up to 10 sites, $199 per year for up to 100 sites, or $596 once for 100 sites for life. Every plan comes with a 30-day refund.
I already have a GP Premium license. Do I need GeneratePress One?
No. According to the developer, an existing GP Premium license keeps working and renewing; GeneratePress One only makes sense if you also want GenerateBlocks Pro, GenerateCloud or GeneratePress AI.
GeneratePress or Astra: which one should I choose?
Both are lightweight classic themes. Astra includes a free drag-and-drop header and footer builder; GeneratePress leans on the block editor with GenerateBlocks and keeps block-built headers for its paid plan.