Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 68% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Modeled within the band wp.org reports; tightens as we track daily.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. A declining trend compresses what a buyer would pay.

1. ★★★★★ techcts

   3mo ago

   Such a great and simple tool with so many things to leverage and do here.

   Read on wp.org ↗
2. ★★★★★ keithetruesdell

   3mo ago

   I love the ability to have gifts and to gift the service to others. That is such a huge feature and draw and is exactly what I was looking for.

   Read on wp.org ↗
3. ★★★★★ pineapplesquad

   4mo ago

   We’ve tested several subscription plugins and we’re very happy with this one. Furthermore, the support team is very responsive when we have a question, which is increasingly rare these days, thank you.

   Read on wp.org ↗
4. ★★★★★ pendle666

   5mo ago

   I’m not a technical person, so I was fearful of paying for the Basic setup in case I wasted my money. But no, so far the development is working well, and the setup has been very easy. I’m hoping that the transfer to live will go smoothly. I’m happy to recommend.

   Read on wp.org ↗
5. ★★★★★ maxi_k

   5mo ago

   I have been working with Paid Member Subscriptions Pro for about a year now, and although my membership site is not yet launched, it seems PMS Pro is going to play a very important part in it. In fact, I already have several membership projects planned and ready to roll out once the first one is running smoothly with Paid Member Subscriptions Pro, which may mean upgrading to the Agency plan.

   Read on wp.org ↗
6. ★★★★★ John Webber

   5mo ago

   Working great so far. No complaints.Thank you for developing this! I used AI to get a few things set up, like getting my browser extension to make an API call and see if the user has an active subscription

   Read on wp.org ↗
7. ★★★★★ therber2

   7mo ago

   Didn’t like how the default form theme looked so I purchased the pro version, and all of the css with the paid form themes clash badly with Kadence theme. The pms plugin overrides the inherit font colors randomly disables js in other locations on the page. Looks even worse than the free version. The billing is messed up too. The other day the plugin sent “Subscription expired” email to all of my valid paying customers. Made my company look really bad and I lost a few paying subs. Not recommended. This topic was modified 3 months, 1 week ago by therber2.

   Read on wp.org ↗
8. ★★★★★ AsphodelB

   7mo ago

   Edited: the PMS Pro team addressed all the issues mentioned below. A truly great experience. I’ve been using PMS Pro for some times and it’s been working great. A couple of things need attention, though:– It would be great if PMS registration didn’t allow spaces on usernames as it breaks some functions for user later down the road; – It would be great if group members could be invited not only via email but via a link that can be sent out by the group curator or site admin Otherwise, it’s great. Support is great. This topic was modified 5 months ago by AsphodelB. Reason: Issues have been addressed

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 3.0.8 Enhancement: Added the possibility to always show a summary box at the end of the form. Enable from Settings -> Misc -> Payments -> Order Summary Fix: Include the security issue fixes regarding the change subscription fu 3.0.8
2. — Version 3.0.9 Feature: Added Gutenberg blocks for the Payment History and Edit Profile shortcodes Enhancement: Action Scheduler for renewals is now enabled by default for all sites. Recurring payments are processed hourly. You can swi 3.0.9

22 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. Medium · 4.3 Paid Member Subscriptions <= 3.0.7 - Missing Authorization to Authenticated (Subscriber+) Cross-User Subscription Hijack ↗
   2026-07-27 CVE-2026-14848 Missing Authorization Affects <= 3.0.7 Patched in 3.0.8
2. Medium · 4.3 Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 3.0.7 - Insecure Direct Object Reference ↗
   2026-07-23 CVE-2026-59539 Authorization Bypass Through User-Controlled Key Affects <= 3.0.7 Patched in 3.0.8
3. Medium · 4.3 Paid Member Subscriptions <= 3.0.6 - Insecure Direct Object Reference to Authenticated (Subscriber+) Payment Data Disclosure ↗
   2026-07-13 CVE-2026-14847 Authorization Bypass Through User-Controlled Key Affects <= 3.0.6 Patched in 3.0.7
4. Medium · 6.1 Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 3.0.4 - Unauthenticated Server-Side Request Forgery ↗
   2026-07-01 CVE-2026-57348 Server-Side Request Forgery (SSRF) Affects <= 3.0.4 Patched in 3.0.5
5. Medium · 6.1 Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.17.3 - Reflected Cross-Site Scripting ↗
   2026-04-20 CVE-2026-39514 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.17.3 Patched in 3.0.0
6. Medium · 4.3 Paid Member Subscriptions <= 2.16.8 - Authenticated (Subscriber+) Insecure Direct Object Reference ↗
   2026-02-11 CVE-2025-68514 Authorization Bypass Through User-Controlled Key Affects <= 2.16.8 Patched in 2.16.9
7. Medium · 5.3 Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.16.4 - Missing Authorization to Unauthenticated Arbitrary Member Subscription Auto Renewal ↗
   2025-11-04 CVE-2025-11835 Missing Authorization Affects <= 2.16.4 Patched in 2.16.5
8. Medium · 5.3 Paid Member Subscriptions <= 2.15.9 - Missing Authorization ↗
   2025-09-03 CVE-2025-58600 Missing Authorization Affects <= 2.15.9 Patched in 2.16.0
9. High · 8.1 Paid Membership Subscriptions <= 2.15.5 - Unauthenticated Local File Inclusion ↗
   2025-07-29 CVE-2025-54017 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') Affects <= 2.15.4 Patched in 2.15.5
10. High · 8.1 Paid Membership Subscriptions <= 2.15.5 - Unauthenticated Local File Inclusion ↗
    2025-07-29 CVE-2025-54017 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') Affects <= 2.15.4 Patched in 2.15.5
11. High · 7.5 Paid Member Subscriptions <= 2.15.1 - Unauthenticated SQL Injection ↗
    2025-07-03 CVE-2025-49870 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 2.15.1 Patched in 2.15.2
12. Medium · 6.4 Paid Member Subscriptions <= 2.14.3 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2025-03-28 CVE-2025-31088 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.14.3 Patched in 2.14.4
13. Critical · 9.8 Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.13.7 - Authentication Bypass via pms_payment_id ↗
    2025-01-13 CVE-2024-12919 Improper Authentication Affects <= 2.13.7 Patched in 2.13.8
14. Medium · 5.3 Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.13.4 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure ↗
    2024-12-17 CVE-2024-11291 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 2.13.4 Patched in 2.13.5
15. High · 7.3 Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.13.0 - Unauthenticated Arbitrary Shortcode Execution ↗
    2024-11-08 CVE-2024-10261 Improper Control of Generation of Code ('Code Injection') Affects <= 2.13.0 Patched in 2.13.1
16. Medium · 6.1 Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.12.8 - Reflected Cross-Site Scripting ↗
    2024-10-01 CVE-2024-9222 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.12.8 Patched in 2.12.9
17. Medium · 4.3 Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.11.0 - Cross-Site Request Forgery to Notice Dismissal ↗
    2024-04-22 CVE-2024-32728 Cross-Site Request Forgery (CSRF) Affects <= 2.11.0 Patched in 2.11.1
18. Medium · 4.3 Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.11.1 - Missing Authorization via creating_pricing_table_page ↗
    2024-02-13 CVE-2024-1390 Missing Authorization Affects <= 2.11.1 Patched in 2.11.2
19. Medium · 5.3 Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.11.1 - Missing Authorization via pms_stripe_connect_handle_authorization_return ↗
    2024-02-13 CVE-2024-1389 Missing Authorization Affects <= 2.11.1 Patched in 2.11.2
20. Medium · 4.3 Paid Member Subscriptions <= 2.10.4 - Cross-Site Request Forgery via ajax_add_log_entry ↗
    2023-12-27 CVE-2023-51522 Cross-Site Request Forgery (CSRF) Affects <= 2.10.4 Patched in 2.10.5
21. High · 8.8 Membership & Content Restriction – Paid Member Subscriptions <= 2.4.1 - SQL Injection ↗
    2021-08-06 CVE-2021-24728 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 2.4.1 Patched in 2.4.2
22. Medium · 6.1 Paid Member Subscriptions <= 2.4.1 - Reflected Cross-Site Scripting ↗
    2021-08-06 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < 2.4.2 Patched in 2.4.2

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0

Translated into 113 languages, 1 at 90% or more

Plus 89 more locales with partial translations.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

No tier crossings observed yet.

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder 50K+ installs · 4.8★ · 3 shared tags A
• Subscriptions & Memberships for PayPal 900+ installs · 3.9★ · 3 shared tags B
• ChamaWP – Monetize With Donations, Memberships, Crowdfunding, Commissions & Restricted Content 10+ installs · 3.6★ · 3 shared tags B
• Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress 100K+ installs · 3.1★ · 2 shared tags B
• Content Control – The Ultimate Content Restriction Plugin! Restrict Content, Create Conditional Blocks & More 40K+ installs · 4.8★ · 2 shared tags B
• Simple Membership 40K+ installs · 4.6★ · 2 shared tags A

Embed this report card

Drop a live Pulse card for Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction into a readme, a review or a deck. It updates itself.

Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction: 10K+ active installs, 4.7★ (265 reviews). Plugin Pulse (WP Mayor), as of 2026-08-25. https://plugins.wpmayor.com/plugin/paid-member-subscriptions