Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory searches this plugin turns up in, and which way each one is moving. WordPress.org publishes no history of search positions, so this starts the day we first tracked a keyword and never backfills.

wp.org is where the directory puts the plugin for that search. On merit is where it would sit if results were ranked on rating, support and updates, without the install boost. The last column is how far the wp.org position moved, from our first reading in the last 90 days to the latest.

955 searches this plugin appeared in over the last 90 days, 20 listed. 888 left out as unrelated or noise (years, numbers, stray words).

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Crossed into this band 8 years ago; a band this size takes about a year or more to cross, which places it about 90% of the way through.

1. ★★★★★ techcts

   6mo ago

   Such a great and simple tool with so many things to leverage and do here.

   Read on wp.org ↗
2. ★★★★★ keithetruesdell

   6mo ago

   I love the ability to have gifts and to gift the service to others. That is such a huge feature and draw and is exactly what I was looking for.

   Read on wp.org ↗
3. ★★★★★ pineapplesquad

   6mo ago

   We’ve tested several subscription plugins and we’re very happy with this one. Furthermore, the support team is very responsive when we have a question, which is increasingly rare these days, thank you.

   Read on wp.org ↗
4. ★★★★★ pendle666

   7mo ago

   I’m not a technical person, so I was fearful of paying for the Basic setup in case I wasted my money. But no, so far the development is working well, and the setup has been very easy. I’m hoping that the transfer to live will go smoothly. I’m happy to recommend.

   Read on wp.org ↗
5. ★★★★★ maxi_k

   8mo ago

   I have been working with Paid Member Subscriptions Pro for about a year now, and although my membership site is not yet launched, it seems PMS Pro is going to play a very important part in it. In fact, I already have several membership projects planned and ready to roll out once the first one is running smoothly with Paid Member Subscriptions Pro, which may mean upgrading to the Agency plan.

   Read on wp.org ↗
6. ★★★★★ John Webber

   8mo ago

   Working great so far. No complaints.Thank you for developing this! I used AI to get a few things set up, like getting my browser extension to make an API call and see if the user has an active subscription

   Read on wp.org ↗
7. ★★★★★ therber2

   9mo ago

   Didn’t like how the default form theme looked so I purchased the pro version, and all of the css with the paid form themes clash badly with Kadence theme. The pms plugin overrides the inherit font colors randomly disables js in other locations on the page. Looks even worse than the free version. The billing is messed up too. The other day the plugin sent “Subscription expired” email to all of my valid paying customers. Made my company look really bad and I lost a few paying subs. Not recommended. This topic was modified 3 months, 1 week ago by therber2.

   Read on wp.org ↗
8. ★★★★★ AsphodelB

   9mo ago

   Edited: the PMS Pro team addressed all the issues mentioned below. A truly great experience. I’ve been using PMS Pro for some times and it’s been working great. A couple of things need attention, though:– It would be great if PMS registration didn’t allow spaces on usernames as it breaks some functions for user later down the road; – It would be great if group members could be invited not only via email but via a link that can be sent out by the group curator or site admin Otherwise, it’s great. Support is great. This topic was modified 5 months ago by AsphodelB. Reason: Issues have been addressed

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 3.0.8 Enhancement: Added the possibility to always show a summary box at the end of the form. Enable from Settings -> Misc -> Payments -> Order Summary Fix: Include the security issue fixes regarding the change subscription fu 3.0.8
2. — Version 3.0.9 Feature: Added Gutenberg blocks for the Payment History and Edit Profile shortcodes Enhancement: Action Scheduler for renewals is now enabled by default for all sites. Recurring payments are processed hourly. You can swi 3.0.9
3. — Version 3.1.0 Enhancement: Gutenberg block editor scripts are no longer loaded on WordPress versions below 6.6 when react-jsx-runtime is unavailable Fix: Security issue regarding PayPal Standard recurring IPN recurring payments that d 3.1.0
4. — Version 3.1.1 Fix: Stripe iDEAL, Bancontact, and Sofort subscriptions now store the reusable SEPA payment method used for renewals without a webhook being received Fix: Stripe free trial checkouts with redirect payment methods such as 3.1.1
5. — Version 3.1.2 Fix: Improve security for the Members and Payments list queries. Thanks to Deva Parekh and the Patchstack team for the report Fix: Stripe Connect checkouts with Alipay, WeChat Pay and voucher methods such as Multibanco w 3.1.2
6. — Version 3.1.3 Enhancement: Stripe Connect recurring Apple Pay checkouts request a merchant token so renewals keep working after a device change, and the Apple Pay sheet shows the amount that will be billed Fix: Security issue regardin 3.1.3

All 29 disclosed vulnerabilities are patched in the current version (3.1.3). Sites still on an older version should update.

1. Patched Medium · 5.3 Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 3.1.2 - Missing Authorization ↗
   2026-10-20 CVE-2026-112842 Missing Authorization Affects <= 3.1.2 Patched in 3.1.3
2. Patched Medium · 6.5 Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 3.1.1 - Authenticated (Subscriber+) SQL Injection ↗
   2026-10-05 CVE-2026-105317 Improper Neutralization of Special Elements used in an SQL Command Affects <= 3.1.1 Patched in 3.1.2
3. Patched Medium · 5.3 Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 3.0.9 - Unauthenticated Unauthorized Subscription Activation ↗
   2026-09-28 CVE-2026-97249 Client-Side Enforcement of Server-Side Security Affects <= 3.0.9 Patched in 3.1.0
4. Patched Medium · 5.3 Paid Member Subscriptions <= 3.0.0 - Unauthenticated CAPTCHA Bypass ↗
   2026-09-21 CVE-2026-90950 Guessable CAPTCHA Affects <= 3.0.0 Patched in 3.1.0
5. Patched Medium · 5.3 Paid Member Subscriptions <= 3.0.0 - Missing Authorization ↗
   2026-09-21 CVE-2026-90951 Incorrect Authorization Affects <= 3.0.0 Patched in 3.1.0
6. Patched Medium · 5.3 Paid Member Subscriptions <= 3.0.8 - Unauthenticated Payment Bypass ↗
   2026-09-15 CVE-2026-90922 Client-Side Enforcement of Server-Side Security Affects <= 3.0.8 Patched in 3.0.9
7. Patched Medium · 4.3 Paid Member Subscriptions <= 3.0.7 - Missing Authorization to Authenticated (Subscriber+) Cross-User Subscription Hijack ↗
   2026-07-27 CVE-2026-14848 Missing Authorization Affects <= 3.0.7 Patched in 3.0.8
8. Patched Medium · 4.3 Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 3.0.7 - Insecure Direct Object Reference ↗
   2026-07-23 CVE-2026-59539 Authorization Bypass Through User-Controlled Key Affects <= 3.0.7 Patched in 3.0.8
9. Patched Medium · 5.3 Paid Member Subscriptions <= 3.0.6 - Unauthenticated Information Exposure ↗
   2026-07-13 CVE-2026-14849 Files or Directories Accessible to External Parties Affects <= 3.0.6 Patched in 3.0.7
10. Patched Medium · 4.3 Paid Member Subscriptions <= 3.0.6 - Insecure Direct Object Reference to Authenticated (Subscriber+) Payment Data Disclosure ↗
    2026-07-13 CVE-2026-14847 Authorization Bypass Through User-Controlled Key Affects <= 3.0.6 Patched in 3.0.7
11. Patched Medium · 6.1 Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 3.0.4 - Unauthenticated Server-Side Request Forgery ↗
    2026-07-01 CVE-2026-57348 Server-Side Request Forgery Affects <= 3.0.4 Patched in 3.0.5
12. Patched Medium · 6.1 Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.17.3 - Reflected Cross-Site Scripting ↗
    2026-04-20 CVE-2026-39514 Improper Neutralization of Input During Web Page Generation Affects <= 2.17.3 Patched in 3.0.0
13. Patched Medium · 4.3 Paid Member Subscriptions <= 2.16.8 - Authenticated (Subscriber+) Insecure Direct Object Reference ↗
    2026-02-11 CVE-2025-68514 Authorization Bypass Through User-Controlled Key Affects <= 2.16.8 Patched in 2.16.9
14. Patched Medium · 5.3 Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.16.4 - Missing Authorization to Unauthenticated Arbitrary Member Subscription Auto Renewal ↗
    2025-11-04 CVE-2025-11835 Missing Authorization Affects <= 2.16.4 Patched in 2.16.5
15. Patched Medium · 5.3 Paid Member Subscriptions <= 2.15.9 - Missing Authorization ↗
    2025-09-03 CVE-2025-58600 Missing Authorization Affects <= 2.15.9 Patched in 2.16.0
16. Patched High · 8.1 Paid Membership Subscriptions <= 2.15.5 - Unauthenticated Local File Inclusion ↗
    2025-07-29 CVE-2025-54017 Improper Control of Filename for Include/Require Statement in PHP Program Affects <= 2.15.4 Patched in 2.15.5
17. Patched High · 8.1 Paid Membership Subscriptions <= 2.15.5 - Unauthenticated Local File Inclusion ↗
    2025-07-29 CVE-2025-54017 Improper Control of Filename for Include/Require Statement in PHP Program Affects <= 2.15.4 Patched in 2.15.5
18. Patched High · 7.5 Paid Member Subscriptions <= 2.15.1 - Unauthenticated SQL Injection ↗
    2025-07-03 CVE-2025-49870 Improper Neutralization of Special Elements used in an SQL Command Affects <= 2.15.1 Patched in 2.15.2
19. Patched Medium · 6.4 Paid Member Subscriptions <= 2.14.3 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2025-03-28 CVE-2025-31088 Improper Neutralization of Input During Web Page Generation Affects <= 2.14.3 Patched in 2.14.4
20. Patched Critical · 9.8 Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.13.7 - Authentication Bypass via pms_payment_id ↗
    2025-01-13 CVE-2024-12919 Improper Authentication Affects <= 2.13.7 Patched in 2.13.8
21. Patched Medium · 5.3 Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.13.4 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure ↗
    2024-12-17 CVE-2024-11291 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 2.13.4 Patched in 2.13.5
22. Patched High · 7.3 Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.13.0 - Unauthenticated Arbitrary Shortcode Execution ↗
    2024-11-08 CVE-2024-10261 Improper Control of Generation of Code Affects <= 2.13.0 Patched in 2.13.1
23. Patched Medium · 6.1 Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.12.8 - Reflected Cross-Site Scripting ↗
    2024-10-01 CVE-2024-9222 Improper Neutralization of Input During Web Page Generation Affects <= 2.12.8 Patched in 2.12.9
24. Patched Medium · 4.3 Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.11.0 - Cross-Site Request Forgery to Notice Dismissal ↗
    2024-04-22 CVE-2024-32728 Cross-Site Request Forgery Affects <= 2.11.0 Patched in 2.11.1
25. Patched Medium · 4.3 Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.11.1 - Missing Authorization via creating_pricing_table_page ↗
    2024-02-13 CVE-2024-1390 Missing Authorization Affects <= 2.11.1 Patched in 2.11.2
26. Patched Medium · 5.3 Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.11.1 - Missing Authorization via pms_stripe_connect_handle_authorization_return ↗
    2024-02-13 CVE-2024-1389 Missing Authorization Affects <= 2.11.1 Patched in 2.11.2
27. Patched Medium · 4.3 Paid Member Subscriptions <= 2.10.4 - Cross-Site Request Forgery via ajax_add_log_entry ↗
    2023-12-27 CVE-2023-51522 Cross-Site Request Forgery Affects <= 2.10.4 Patched in 2.10.5
28. Patched High · 8.8 Membership & Content Restriction – Paid Member Subscriptions <= 2.4.1 - SQL Injection ↗
    2021-08-06 CVE-2021-24728 Improper Neutralization of Special Elements used in an SQL Command Affects <= 2.4.1 Patched in 2.4.2
29. Patched Medium · 6.1 Paid Member Subscriptions <= 2.4.1 - Reflected Cross-Site Scripting ↗
    2021-08-06 Improper Neutralization of Input During Web Page Generation Affects < 2.4.2 Patched in 2.4.2

Translated into 113 languages, 1 at 90% or more

Plus 89 more locales with partial translations.

Whether ChatGPT and Claude name this plugin when asked the category question, and whether the readme gives them something to quote.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2018-11-01 9K+ → 10K+ up after 122 days in tier
2. 2018-07-02 8K+ → 9K+ up after 122 days in tier
3. 2018-03-02 7K+ → 8K+ up after 33 days in tier
4. 2018-01-28 6K+ → 7K+ up after 193 days in tier
5. 2017-07-19 4K+ → 6K+ up after 208 days in tier
6. 2016-12-23 2K+ → 4K+ up after 270 days in tier
7. 2016-03-28 600+ → 2K+ up after 113 days in tier
8. 2015-12-06 10+ → 600+ up

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

Embed this report card

Drop a live Pulse card for Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction into a readme, a review or a deck. It updates itself.

Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction: 10K+ active installs, 4.7★ (270 reviews). Plugin Pulse (WP Mayor), as of 2026-11-01. https://plugins.wpmayor.com/plugin/paid-member-subscriptions