{
    "title": "GeneratePress",
    "seo_title": "GeneratePress: review, recommended settings and limits",
    "h1": "GeneratePress",
    "description": "GeneratePress free or GeneratePress One: strengths, limitations, pricing, recommended settings and patched GP Premium vulnerabilities, to help you decide.",
    "lead": "GeneratePress is a very lightweight classic WordPress theme, configured in the Customizer and built to work with the block editor. Our take on the free theme and the GeneratePress One plan, the settings worth checking and the GP Premium vulnerabilities you should know about.",
    "language": "en",
    "locale": "en-US",
    "type": "plugin-sheet",
    "url": "https://www.wp-masquerade.com/features/camouflaged-plugins/generatepress/",
    "canonical": "https://www.wp-masquerade.com/features/camouflaged-plugins/generatepress/",
    "markdown": "https://www.wp-masquerade.com/features/camouflaged-plugins/generatepress/index.md",
    "json": "https://www.wp-masquerade.com/features/camouflaged-plugins/generatepress/index.json",
    "published": "2026-11-04T08:00:00+00:00",
    "modified": "2026-11-05T21:09:38+00:00",
    "site": {
        "name": "WP Masquerade",
        "url": "https://www.wp-masquerade.com/"
    },
    "translations": [
        {
            "language": "en",
            "hreflang": "en-US",
            "title": "GeneratePress",
            "url": "https://www.wp-masquerade.com/features/camouflaged-plugins/generatepress/",
            "markdown": "https://www.wp-masquerade.com/features/camouflaged-plugins/generatepress/index.md",
            "json": "https://www.wp-masquerade.com/features/camouflaged-plugins/generatepress/index.json"
        },
        {
            "language": "fr",
            "hreflang": "fr-FR",
            "title": "GeneratePress",
            "url": "https://www.wp-masquerade.com/fr/fonctionnalites/extensions-camouflees/generatepress/",
            "markdown": "https://www.wp-masquerade.com/fr/fonctionnalites/extensions-camouflees/generatepress/index.md",
            "json": "https://www.wp-masquerade.com/fr/fonctionnalites/extensions-camouflees/generatepress/index.json"
        },
        {
            "language": "es",
            "hreflang": "es-ES",
            "title": "GeneratePress",
            "url": "https://www.wp-masquerade.com/es/funcionalidades/plugins-camuflados/generatepress/",
            "markdown": "https://www.wp-masquerade.com/es/funcionalidades/plugins-camuflados/generatepress/index.md",
            "json": "https://www.wp-masquerade.com/es/funcionalidades/plugins-camuflados/generatepress/index.json"
        },
        {
            "language": "de",
            "hreflang": "de-DE",
            "title": "GeneratePress",
            "url": "https://www.wp-masquerade.com/de/funktionen/getarnte-plugins/generatepress/",
            "markdown": "https://www.wp-masquerade.com/de/funktionen/getarnte-plugins/generatepress/index.md",
            "json": "https://www.wp-masquerade.com/de/funktionen/getarnte-plugins/generatepress/index.json"
        },
        {
            "language": "it",
            "hreflang": "it-IT",
            "title": "GeneratePress",
            "url": "https://www.wp-masquerade.com/it/funzionalita/plugin-camuffati/generatepress/",
            "markdown": "https://www.wp-masquerade.com/it/funzionalita/plugin-camuffati/generatepress/index.md",
            "json": "https://www.wp-masquerade.com/it/funzionalita/plugin-camuffati/generatepress/index.json"
        },
        {
            "language": "pt",
            "hreflang": "pt-BR",
            "title": "GeneratePress",
            "url": "https://www.wp-masquerade.com/pt/recursos/plugins-wordpress-camuflados/generatepress/",
            "markdown": "https://www.wp-masquerade.com/pt/recursos/plugins-wordpress-camuflados/generatepress/index.md",
            "json": "https://www.wp-masquerade.com/pt/recursos/plugins-wordpress-camuflados/generatepress/index.json"
        },
        {
            "language": "nl",
            "hreflang": "nl-NL",
            "title": "GeneratePress",
            "url": "https://www.wp-masquerade.com/nl/functies/gecamoufleerde-plugins/generatepress/",
            "markdown": "https://www.wp-masquerade.com/nl/functies/gecamoufleerde-plugins/generatepress/index.md",
            "json": "https://www.wp-masquerade.com/nl/functies/gecamoufleerde-plugins/generatepress/index.json"
        }
    ],
    "headings": [
        {
            "level": 1,
            "text": "GeneratePress"
        },
        {
            "level": 2,
            "text": "What GeneratePress does on your site"
        },
        {
            "level": 2,
            "text": "Which sites GeneratePress is a good fit for"
        },
        {
            "level": 2,
            "text": "GeneratePress strengths and limitations"
        },
        {
            "level": 3,
            "text": "Strengths"
        },
        {
            "level": 3,
            "text": "Limitations"
        },
        {
            "level": 2,
            "text": "The GeneratePress settings we recommend"
        },
        {
            "level": 2,
            "text": "GeneratePress security: a clean theme, a plugin to watch"
        },
        {
            "level": 2,
            "text": "GeneratePress FAQ",
            "id": "faq"
        }
    ],
    "body": "## The essentials\n\n- Best for fast blogs and sites built with the block editor that want a very light foundation.\n- Main caveat: sticky menu, mega menu, Elements and starter sites require the paid plan.\n- Free; GeneratePress One costs $99 per year for one site, or $596 once for 100 sites.\n\n## What GeneratePress does on your site\n\nGeneratePress is a classic theme: it provides the header, navigation, sidebars, footer and blog templates, and its settings live under Appearance > Customize. Global colors, the font and typography managers, container width, navigation location and sidebar layouts are all grouped there. In the editor, a “Layout” panel changes the sidebar, footer widgets or content container of a single page, for example to make a page full width.\n\nThe theme is built to stay light: according to its wordpress.org listing, a fresh install adds less than 10 KB (gzipped) to a page. Icons are SVG, the layout uses flexbox, and the CSS generated from your settings can be cached. GeneratePress works with the block editor as well as with Elementor or Beaver Builder, and it is often paired with the free [GenerateBlocks](https://www.wp-masquerade.com/features/camouflaged-plugins/generateblocks/) plugin from the same developer for layout blocks.\n\nThe developer is EDGE22 Studios Ltd., Tom Usborne’s company, which has published the theme since 2014. Advanced features live in the GP Premium plugin, now sold only as part of GeneratePress One, which also bundles GenerateBlocks Pro, GenerateCloud (a pattern library shared across your sites) and GeneratePress AI. GP Premium adds Elements (headers, footers and templates built with blocks), sticky and off-canvas menus, mega menus, column and masonry blog layouts, WooCommerce settings and more than 80 starter sites.\n\n![Diagram: GeneratePress works on visitors and bots, wordpress, database and files. Public traces: folder name (hidden with Pro); tag IDs (hidden with Pro); generated-file folders (hidden with Pro); JavaScript variables (still visible); CSS classes (still visible).](https://www.wp-masquerade.com/media/wpm-sheets/generatepress/diagram-en.svg?v=a5f88291)\n\n## Which sites GeneratePress is a good fit for\n\nGeneratePress makes sense when you want a fast, clean foundation that you then build out with blocks:\n\n- **Speed-conscious blogs and publishing sites**: little CSS and JavaScript out of the box, which leaves headroom for ads and analytics tools.\n- **Sites built with the block editor**: with GenerateBlocks, you lay out pages without a heavy page builder.\n- **Freelancers and agencies**: GeneratePress One covers up to 100 sites, client sites included, and local or staging sites don’t count.\n- **Sites built with Elementor or Beaver Builder**: the theme gets out of the way page by page with the full-width container.\n\nIt’s not the best pick if you want a sticky header, a mega menu or ready-to-import starter sites without paying: those features are reserved for GeneratePress One. Compare it with [Kadence](https://www.wp-masquerade.com/features/camouflaged-plugins/kadence/), whose free version goes further on the header. If you want to control everything from the WordPress Site Editor, choose a block theme instead: GeneratePress is still a classic theme.\n\n## GeneratePress strengths and limitations\n\n### Strengths\n\n- **Very lightweight.** Under 10 KB gzipped added to a page according to the developer, with SVG icons and cached dynamic CSS.\n- **No published theme vulnerabilities.** WPScan and Patchstack list no vulnerability in the free theme.\n- **Code designed to be extended.** Hooks and filters let you change most elements without editing the theme files.\n- **A generous license.** The 100-site plan also comes as a lifetime license, and local or staging sites don’t count.\n\n### Limitations\n\n- **A bare-bones free version.** Sticky menu, mega menu, Elements, starter sites and advanced blog layouts are paid features.\n- **“Built with GeneratePress” credit.** The free footer shows it; changing it takes the paid plan or a PHP filter.\n- **No standalone purchase.** GP Premium is no longer sold on its own: you need GeneratePress One, from $99 per year for one site.\n- **Google Fonts loaded from Google.** The free theme calls them from fonts.googleapis.com; local hosting is part of the paid plan.\n\n## The GeneratePress settings we recommend\n\nAll these settings exist in the current free theme. Most are under Appearance > Customize; a few only appear on sites first installed with an older version of the theme.\n\n| Setting | Recommended value | Why |\n| --- | --- | --- |\n| **Auto-updates**  Appearance > Themes > GeneratePress (theme details) | Enabled | Theme fixes arrive without waiting for you to log in. |\n| **Cache dynamic CSS**  Appearance > Customize > General | Enabled (default) | The CSS produced by your settings is stored instead of being rebuilt on every page. |\n| **Icon Type**  Same screen | SVG (default) | Icons are inlined in the markup, with no icon font file to download. |\n| **Structure**  Same screen (older sites only) | Flexbox, after testing on staging | The theme warns that switching from Floats to Flexbox can change how the site displays: check every template. |\n| **Use dynamic typography system**  Same screen (older sites only) | Enabled, after review | It’s the theme’s current system; font rendering may change, so review your pages. |\n| **Google font-display**  Appearance > Customize > Typography | Swap, if you use a Google font | Text shows right away in a fallback font instead of staying invisible while the font loads. |\n| **Content Container**  Layout panel in the editor | Full Width for a page built with a page builder | The page builder then handles the page’s margins and width itself. |\n\n- View a page’s source: if you haven’t picked any Google font, no `fonts.googleapis.com` URL should appear.\n- To change the footer credit without the paid plan, use the `generate_copyright` filter in a plugin like [Code Snippets](https://www.wp-masquerade.com/features/camouflaged-plugins/code-snippets/), not in the theme files.\n- With GP Premium, check under Plugins that you run at least version 2.5.6 and that updates come through: they arrive via your license, not wordpress.org.\n\n## GeneratePress security: a clean theme, a plugin to watch\n\nThe free theme has no published vulnerability on WPScan or Patchstack, like most of the popular themes covered in our article on [vulnerabilities in popular WordPress themes](https://www.wp-masquerade.com/popular-wordpress-themes-security-vulnerabilities/). The known issues affect GP Premium:\n\n- **CVE-2023-6807, up to 2.3.2**: stored XSS through custom meta output, with a contributor account.\n- **CVE-2024-3469, fixed in 2.4.1**: reflected XSS through a URL parameter, exploitable without an account if a logged-in user clicks a crafted link (CVSS 6.1).\n- **CVE-2026-66627, fixed in 2.5.6**: dangerous file upload by a contributor account, which can lead to code execution (CVSS 9.9).\n\nVersion 2.5.6 shipped at the end of May 2026, almost three months before the public advisory in August: an up-to-date site was protected before the flaw was known. So turn on auto-updates for the theme and GP Premium (see our guide to plugin auto-updates), and keep contributor accounts for people you trust. WP Masquerade Pro renames the theme folder, the `generate`, `generatepress` and `gp` script and stylesheet handles and the `uploads/generatepress` folder, while the `generate-*` classes stay visible: that makes the site harder for bots to spot, but it doesn’t replace updating.\n\n## GeneratePress FAQ\n\n**Is the free version of GeneratePress enough?**\n\nFor a blog or a simple business site, often yes: global colors, typography, sidebar layouts and the full-width container are free, and GenerateBlocks fills out the editor. The paid plan is worth it if you want block-built headers and templates, a sticky menu, a mega menu or an importable starter site.\n\n**How much does GeneratePress One cost?**\n\nThe pricing page lists $99 per year for one site, $149 per year for up to 10 sites, $199 per year for up to 100 sites, or $596 once for 100 sites for life. Every plan comes with a 30-day refund.\n\n**I already have a GP Premium license. Do I need GeneratePress One?**\n\nNo. According to the developer, an existing GP Premium license keeps working and renewing; GeneratePress One only makes sense if you also want GenerateBlocks Pro, GenerateCloud or GeneratePress AI.\n\n**GeneratePress or Astra: which one should I choose?**\n\nBoth are lightweight classic themes. [Astra](https://www.wp-masquerade.com/features/camouflaged-plugins/astra/) includes a free drag-and-drop header and footer builder; GeneratePress leans on the block editor with GenerateBlocks and keeps block-built headers for its paid plan.\n\n## Key facts\n\n- Category: Builders and themes\n- Vendor: EDGE22 Studios Ltd.\n- Price: Free; GeneratePress One starts at $99 per year for one site\n- Active installations (wordpress.org): 500 000+\n- Version: 3.6.1\n- Official page: https://wordpress.org/themes/generatepress/\n\n## What WP Masquerade hides\n\n- Handled by WP Masquerade Pro only\n- With Pro: folder name, tag IDs, generated-file folders\n- Still visible: JavaScript variables, CSS classes",
    "catalog": "generatepress",
    "essentials": [
        "Best for fast blogs and sites built with the block editor that want a very light foundation.",
        "Main caveat: sticky menu, mega menu, Elements and starter sites require the paid plan.",
        "Free; GeneratePress One costs $99 per year for one site, or $596 once for 100 sites."
    ],
    "format": "application/json"
}