WP Frontend Profile

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 67% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. A small install base leaves thin data to model from.

1. ★★★★★ lordkahler

   5mo ago

   One of the easiest plugins to use

   Read on wp.org ↗
2. ★★★★★ Hossein

   3.2y ago

   Hi,Thanks for creating this good and super useful plugin.

   Read on wp.org ↗
3. ★★★★★ Hermann Matthias

   4.2y ago

   Basicly a vey good idea, but it should have options to choose: – yes/no LOGIN page – yes/no REGISTER page – yes/no those 2 PROFILE PAGES in many cases the user has already a special styled login or register page, the profile form ist not really fitting, but that we can ajust with the editor and nice regards from the Philipines

   Read on wp.org ↗
4. ★★★★★ sorenaphysio

   4.7y ago

   Simple and Easy to use with many options

   Read on wp.org ↗
5. ★★★★★ Claudio

   4.8y ago

   There is no form customization. Apparently there is no way to user upload a picture for their own profile. It would be good if the pages created by the plugin could be shown under the user profile picture as a user menu. I hope I am helping to increase the plugin capability. This topic was modified 4 years, 7 months ago by Claudio. Reason: Forgot stars

   Read on wp.org ↗
6. ★★★★★ Liang

   5.1y ago

   The newest version causes some conflict with my website and I have to use the 0.2.2 version. Overall, I do recommend the author, developer focus on improving the “frontend user editing” instead of the “login page”. The “frontend user editing” is the thing we only needed. Thanks for developing such an awesome plugin. This topic was modified 4 years, 9 months ago by Liang. This topic was modified 4 years, 7 months ago by Liang.

   Read on wp.org ↗
7. ★★★★★ SVPelakova

   10.6y ago

   Hello from France, This plugin perfectly matches my expectations! Thank you for your work. 🙂

   Read on wp.org ↗
8. ★★★★★ Frank

   11.2y ago

   Hi, why don’t you provide a shortcode instead of a “template tag”? Using a template tag you have to run your code and load your styles and scripts on every single page of a site – since your plugin cannot know where the function is put by the admin. Further: template tags make sense if you use them with a template, meaning: several times. This is obviously not the case with a front end profile. You need it once, on one page. So, including all your stuff when the shortcode is found would be far more efficient. But maybe I’m wrong – However, the tabs feature is cool and would be a nice to have … Cheers, Frank

   Read on wp.org ↗

8 disclosed vulnerabilities on record for this plugin, 2 still affect the current version.

1. Medium · 4.3 WP Frontend Profile <= 1.3.8 - Cross-Site Request Forgery to Unauthorized User Account Approval or Rejection ↗
   2026-03-06 CVE-2026-1644 Cross-Site Request Forgery (CSRF) Affects <= 1.3.8 Patched in 1.3.9
2. Medium · 5.3 Frontend Profile <= 1.3.9 - Missing Authorization ↗
   2026-02-23 CVE-2026-39688 Missing Authorization Affects <= 1.3.9 No patch available
3. Critical · 9.8 WP Frontend Profile <= 1.3.1 - Unauthenticated Privilege Escalation ↗
   2023-12-27 CVE-2023-51483 Missing Authorization Affects <= 1.3.1 Patched in 1.3.2
4. Medium · 6.1 Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get ↗
   2023-07-18 CVE-2023-33999 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects 1.2.1 - 1.3.0 No patch available
5. Medium · 6.3 Freemius SDK <= 2.4.2 - Missing Authorization Checks ↗
   2022-03-04 CVE-2022-4974 Missing Authorization Affects < 1.2.5 Patched in 1.2.5
6. High · 8.8 WP Frontend Profile <= 1.2.1 - Cross-Site Request Forgery ↗
   2020-05-19 Cross-Site Request Forgery (CSRF) Affects <= 1.2.1 Patched in 1.2.2
7. Medium · 6.4 WP Front End Profile <= 0.2.1 - Stored Cross-Site Scripting ↗
   2016-09-14 CVE-2019-15110 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 0.2.1 Patched in 0.2.2
8. Critical · 9.8 WP Front End Profile <= 0.2.1 - Privilege Escalation ↗
   2016-09-14 CVE-2019-15111 Improper Privilege Management Affects <= 0.2.1 Patched in 0.2.2

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0.1

Translated into 3 languages, 0 at 90% or more

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-04-17 200+ → 100+ down after 1 days in tier
2. 2026-04-16 100+ → 200+ up after 5 days in tier
3. 2026-04-11 200+ → 100+ down after 1 days in tier
4. 2026-04-10 100+ → 200+ up after 1 days in tier
5. 2026-04-09 200+ → 100+ down after 1 days in tier
6. 2026-04-08 100+ → 200+ up after 10 days in tier
7. 2026-03-29 200+ → 100+ down after 1 days in tier
8. 2026-03-28 100+ → 200+ up after 1 days in tier

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• Simple Local Avatars 100K+ installs · 4.5★ · 2 shared tags A
• One User Avatar | User Profile Picture 100K+ installs · 4.5★ · 2 shared tags A
• Theme My Login 60K+ installs · 3.7★ · 2 shared tags B
• Basic User Avatars 20K+ installs · 4.5★ · 2 shared tags C
• Force Authentification Before Checkout for WooCommerce 5K+ installs · 4.8★ · 2 shared tags A
• Disable User Login 5K+ installs · 4.3★ · 2 shared tags B

Embed this report card

Drop a live Pulse card for WP Frontend Profile into a readme, a review or a deck. It updates itself.

WP Frontend Profile: 100+ active installs, 4.3★ (9 reviews). Plugin Pulse (WP Mayor), as of 2026-08-31. https://plugins.wpmayor.com/plugin/wp-front-end-profile