Login & Register Forms – Popup, Slider, Profile & WooCommerce

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. A declining trend compresses what a buyer would pay.

1. ★★★★★ Claudia Mezori

   1mo ago

   I experienced a compatibility issue after updating the plugin. The developer responded immediately, investigated the problem, released a fix the very same day, and kept me informed throughout the process. This is exactly the kind of support you hope for when using a plugin. Fast, professional, and highly committed. Highly recommended – thank you!

   Read on wp.org ↗
2. ★★★★★ martin24

   2mo ago

   Plugin provide good looking and smooth login fields.

   Read on wp.org ↗
3. ★★★★★ adaghay

   5mo ago

   Great plugin, simple to use and implement and tweak. Support been active and helpful with us.

   Read on wp.org ↗
4. ★★★★★ nicolefu1979

   7mo ago

   I was using Login & Register Customizer with the added Social Login and Security features. During installation, there were conflicts with other plugins, but customer service provided helpful guidance to resolve the issues.

   Read on wp.org ↗
5. ★★★★★ swierz

   11mo ago

   This free WordPress Login & Register plugin delivers an absolutely premium experience, making it the best solution available for user management today. I was immediately impressed by how easy to use the interface is, allowing for seamless integration and custom form setup in mere minutes without touching any code. What truly sets this apart is the super support provided; getting such responsive, knowledgeable help for a completely free product is practically unheard of. It’s rare to find this combination of robust functionality, professional polish, and dedicated assistance, proving that high quality doesn’t always come with a price tag. Stop paying for features you don’t need—this plugin is highly recommended for anyone looking for powerful user management where all of that is free.

   Read on wp.org ↗
6. ★★★★★ jlahm

   12mo ago

   It provides several ways to create login pop-ups, shortcode and menu entries and does them all well.

   Read on wp.org ↗
7. ★★★★★ sagarbhagdev

   1.0y ago

   No support from the support team. We have clearly mentioned that we want to implement login and signup with mobile number and OTP only. We do not want to collect any other information from the user. But even after entering the mobile number, the registration form still appears asking for first name, last name, email, and password. This is not the required flow, and despite raising the issue, there has been no proper assistance or resolution.

   Read on wp.org ↗
8. ★★★★★ uksentinel

   1.1y ago

   I use Login & Register Customizer and custom registration fields add-on, needed to add an age verification option and support and guidance from Xootix was excellent

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 4.0.0 New – [Profile Builder] New – width attribute for inline forms 4.0.0
2. — Version 3.2.8 New – [Profile Builder] Allow users to update their data using shortcode [xoo_el_profile] 3.2.8
3. — Version 3.2.7 Fix – white page crash fix/ajax failing 3.2.7
4. — Version 3.2.6 Fix – some users faced issues with the login with recent update 3.2.6
5. — Version 3.2.5 Fix – Security related issue 3.2.5
6. — Version 3.2.4 Fix – error in recent update 3.2.2 3.2.4

10 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. High · 8.1 Login & Register Forms – Popup, Slider, Profile & WooCommerce < 3.2.5 - Authentication Bypass via Brute Force ↗
   2026-08-06 CVE-2026-14836 Improper Authentication Affects < 3.2.5 Patched in 3.2.5
2. Medium · 5.3 Login & Register Forms <= 4.0.1 - Unauthenticated Registered User Email Address Disclosure ↗
   2026-08-05 CVE-2026-18470 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 4.0.1 Patched in 4.0.2
3. Medium · 4.4 Login/Signup Popup <= 2.9.4 - Authenticated (Administrator+) Stored Cross-Site Scripting ↗
   2025-06-19 CVE-2025-50027 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.9.4 Patched in 2.9.5
4. Medium · 6.4 Login/Signup Popup ( Inline Form + Woocommerce ) <= 2.8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via xoo_el_action Shortcode ↗
   2025-02-19 CVE-2025-1064 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.8.5 Patched in 2.8.6
5. Medium · 4.3 Login/Signup Popup ( Inline Form + Woocommerce ) 2.7.1 - 2.7.2 - Missing Authorization to Arbitrary Options Exposure ↗
   2024-06-05 CVE-2024-5665 Missing Authorization Affects 2.7.1 - 2.7.2 Patched in 2.7.3
6. High · 8.8 XootiX Framework <= Various Plugin Versions - Missing Authorization to Arbitrary Options Update ↗
   2024-06-05 CVE-2024-5324 Missing Authorization Affects 2.7.1 - 2.7.2 Patched in 2.7.3
7. Medium · 4.3 Login/Signup Popup <= 2.3 - Cross-Site Request Forgery to Settings Reset ↗
   2023-06-26 Cross-Site Request Forgery (CSRF) Affects < 2.4 Patched in 2.4
8. High · 8.8 Login/Signup Popup <= 2.2 - Cross-Site Request Forgery to Arbitrary Options Update ↗
   2022-01-13 CVE-2022-0215 Cross-Site Request Forgery (CSRF) Affects <= 2.2 Patched in 2.3
9. Medium · 6.1 Login/Signup Popup ( Inline Form + Woocommerce ) <= 2.1 - Reflected Cross-Site Scripting ↗
   2021-11-17 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.1 Patched in 2.2
10. High · 7.4 Login/Signup Popup < 1.5 - Missing Authorization ↗
    2020-05-14 CVE-2020-36715 Missing Authorization Affects < 1.5 Patched in 1.5

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0.1

Translated into 20 languages, 1 at 90% or more

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2025-11-29 50K+ → 40K+ down after 321 days in tier
2. 2025-01-12 40K+ → 50K+ up after 1 days in tier
3. 2025-01-11 50K+ → 40K+ down after 31 days in tier
4. 2024-12-11 40K+ → 50K+ up after 1 days in tier
5. 2024-12-10 50K+ → 40K+ down after 23 days in tier
6. 2024-11-17 40K+ → 50K+ up after 3 days in tier
7. 2024-11-14 50K+ → 40K+ down after 35 days in tier
8. 2024-10-10 40K+ → 50K+ up after 382 days in tier

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• OTP Login & Register Woocommerce 1K+ installs · 4.4★ · 2 shared tags A
• Guard Dog 10+ installs · 4.1★ · 2 shared tags B
• D Datascoop – Sign In — installs · 3.6★ · 2 shared tags B
• Wordfence Security – Firewall, Malware Scan, and Login Security 5M+ installs · 4.7★ · 1 shared tag A
• Really Simple Security – Simple and Performant Security (formerly Really Simple SSL) 3M+ installs · 4.9★ · 1 shared tag A
• Limit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force Prevention 1M+ installs · 4.8★ · 1 shared tag A

Embed this report card

Drop a live Pulse card for Login & Register Forms – Popup, Slider, Profile & WooCommerce into a readme, a review or a deck. It updates itself.

Login & Register Forms – Popup, Slider, Profile & WooCommerce: 40K+ active installs, 4.8★ (254 reviews). Plugin Pulse (WP Mayor), as of 2026-08-25. https://plugins.wpmayor.com/plugin/easy-login-woocommerce