WP-Members Membership Plugin
by Chad Butler · Login & Users
Also makes 1 other plugin · 50K+ installs across the portfolio →
The original WordPress membership plugin with content restriction, user login, custom registration fields, user profiles, and more.
Try it live opens a temporary test site in your browser, which can take about 20 seconds to load. Plugins that rely on outside services or a full server may not work completely there.
Health
B 84/100
no flags
Active installs
50K+
≈55K estimated
Momentum
+4%
downloads vs prior 30d
Biggest opportunity: Swap “authentication”, “login” and “registration” for “member”, “concurrent login” and “memberships”. “authentication” isn't earning its slot: you're not in the first 24 results for its own search. “member” sits at #4 untagged, close enough for a declared tag to move it up. “login” isn't earning its slot: you're not in the first 24 results for its own search. “concurrent login” sits at #8 untagged, close enough for a declared tag to move it up. “registration” isn't earning its slot: you're not in the first 24 results for its own search. “memberships” sits at #8 untagged, close enough for a declared tag to move it up. All five slots are taken, so one has to go.
84 health vs 61 average across 2,203 Login & Users plugins
Install conversion
How it's measured →1.2%
of downloads still active
At least 50K of 4.1M lifetime downloads are still running, above its category: the median Login & Users plugin keeps 0.7%, across 1,476 plugins.
Downloads count every update, not just first installs, so older and more frequently released plugins read lower. Compare against other Login & Users plugins, not across the directory. wp.org reports active installs as the bottom of a band, so the real rate is this or higher.
This plugin shipped 10 releases in the last 12 months, and every existing install that updated counted as another download. wp.org publishes no split between first installs and updates, so we show the raw rate rather than guess at one.
Details
Directory ranking optimization
How it's scored →How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.
Excellent listing optimization
Most to gain: Support resolution
Updated 5 days ago
Tested up to WordPress 7.1.4, the current branch or newer
4.6★ over 272 reviews, smoothed to 4.52★
5 of 5 tags set · short description in place
2 of 5 support threads resolved in the last 2 months
To rank higher: Mark more forum threads resolved — the resolved ratio feeds the ranking.
Get the full rank-higher report →Search visibility
How it's tracked →Directory searches this plugin turns up in, and which way each one is moving. WordPress.org publishes no history of search positions, so this starts the day we first tracked a keyword and never backfills.
61
Momentum
Gaining ground
+2.1
Velocity
places per keyword, 28d
58%
Breadth
of keywords climbing, 28d
+1.8
Acceleration
recent half vs earlier
wp.org is where the directory puts the plugin for that search. On merit is where it would sit if results were ranked on rating, support and updates, without the install boost. The last column is how far the wp.org position moved, from our first reading in the last 90 days to the latest.
| Keyword | wp.org | On merit | wp.org move, 90 days |
|---|---|---|---|
| wp members | #2 | #2 | 0 |
| members | #3 | #3 | 0 |
| membership plugin | #4 | #4 | up 1 |
| membership your tag | #6 | #7 | up 3 |
| members only | #4 | #3 | down 1 |
| member | #4 | #4 | up 1 |
| members registration | #3 | #3 | down 1 |
| free for members | #3 | #3 | 0 |
| advanced members | #3 | #3 | up 1 |
| members profiles | #3 | #3 | up 1 |
| memberships | #8 | #7 | up 9 |
| concurrent login | #8 | #6 | up 2 |
| original | #12 | #10 | up 12 |
| membership plugin for site | #5 | #5 | up 1 |
| membership site | #5 | #6 | up 3 |
| membership plugins | #5 | #5 | 0 |
| wp registration | #12 | #11 | up 4 |
| custom registration fields | #18 | #15 | up 1 |
| content restriction | #18 | #12 | up 5 |
| restriction your tag | #23 | #16 | down 1 |
| authentication your tag | Not in the top 24 | ||
| login your tag | Not in the top 24 | ||
| registration your tag | Not in the top 24 | ||
250 searches this plugin appeared in over the last 90 days, 20 listed. 218 left out as unrelated or noise (years, numbers, stray words). 3 of its tags aren't in the top 24 for their own search.
What to do about it
- Swap “authentication”, “login” and “registration” for “member”, “concurrent login” and “memberships”. “authentication” isn't earning its slot: you're not in the first 24 results for its own search. “member” sits at #4 untagged, close enough for a declared tag to move it up. “login” isn't earning its slot: you're not in the first 24 results for its own search. “concurrent login” sits at #8 untagged, close enough for a declared tag to move it up. “registration” isn't earning its slot: you're not in the first 24 results for its own search. “memberships” sits at #8 untagged, close enough for a declared tag to move it up. All five slots are taken, so one has to go.
Daily downloads
Since 5 Oct 2022 · 1,488 days · wp.org + Plugin Pulse archive
30-day downloads
Rolling 30-day volume · peak 87K · peaks are release surges
Directory rank vs rivals
wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you
Rating trend
Star average over time · dips mark rough releases
Health trend
Composite health score, snapshotted daily
Update activity
How busy the existing users are, measured as downloads in the last 30 days for every 1,000 active sites. A spike means a new release everyone's pulling; a long, slow decline means an aging user base that updates less.
Release cadence
Actively maintainedHow often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.
10
releases in the last 12 months
5d ago
latest release · v3.5.8.3 · 27 Oct 2026
37
tagged releases on record
Recent releases
What its installed base runs
via wordpress.orgShare of active installs on each version of this plugin · 64% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.
Estimated active installs
The public count shows “50K+”. Our estimate pins where the real number sits.
Crossed into this band 13 months ago; the previous band took 21 months to cross, which places it about 50% of the way through.
Install history since 18 Jul 2021
Latest updates
via wp.org changelogRecent releases and news for this plugin
- — Version 3.5.6 Security update to [wpmem_user_membership_posts] shortcode. Limits the “order” and “order by” options in the shortcode. Bug fix for checking expiration memberships that require a specific role. The bug from 3.5.5 causes 3.5.6
- — Version 3.5.5 Bug fix for wpmem_get_user_count_by_role() that causes it to return a total count of all users no matter the role requested. Bug fix for image field display in profile. Add filter to view posts by restriction status (i.e 3.5.5
- — Version 3.5.4 Bug fix for register form field label links. Bug fix that causes [wpmem_field] shortcode option to be reset when setting other settings or updating. Bug fix for maintaining [wpmem_field] shortcode setting on upgrade from 3.5.4
- — Version 3.5.3 Add link support for field labels. Add wpmem_create_form_label_args filter. Add wpmem_form_label_link filter. Add new CLI commands for memberships (see release notes). Update CLI commands for translation (some were local 3.5.3
- — Version 3.5.2 Fixes a bug in the WP_Members_Dialogs::get_text() for unknown keys (reconfirm_link_before & reconfirm_link). Fixes a bug in the [wpmem_user_memberships] shortcode that breaks the expiration date display. Fixes a bug in t 3.5.2
- — Version 3.5.1 Fixes a bug in the Fields tab edit view that displays two textarea inputs for select, multiselect, multicheckbox, and radio field types. Fixes a bug in the admin email notification that does not display the [fields] shor 3.5.1
Security history
via Wordfence IntelligenceAll 21 disclosed vulnerabilities are patched in the current version (3.5.8.3). Sites still on an older version should update.
- 2026-09-10 CVE-2026-84960 Improper Neutralization of Input During Web Page Generation Affects <= 3.5.6 Patched in 3.5.7
- Patched Medium · 6.5 WP-Members Membership Plugin <= 3.5.5.1 - Authenticated (Contributor+) SQL Injection via 'order_by' Shortcode Attribute ↗2026-03-03 CVE-2026-2363 Improper Neutralization of Special Elements used in an SQL Command Affects <= 3.5.5.1 Patched in 3.5.6
- Patched Medium · 5.4 WP-Members Membership Plugin <= 3.5.4.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Multiple Checkbox and Multiple Select User Profile Fields ↗2026-01-14 CVE-2025-14448 Improper Neutralization of Input During Web Page Generation Affects <= 3.5.4.3 Patched in 3.5.4.4
- Patched Medium · 5.3 WP-Members Membership Plugin <= 3.5.4.4 - Unauthenticated Information Exposure via Unprotected Files ↗2026-01-06 CVE-2025-12648 Files or Directories Accessible to External Parties Affects <= 3.5.4.4 Patched in 3.5.4.5
- Patched Medium · 6.4 WP-Members <= 3.5.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗2025-09-22 CVE-2025-57973 Improper Neutralization of Input During Web Page Generation Affects <= 3.5.4.2 Patched in 3.5.4.3
- Patched Medium · 5.0 WP-Members Membership Plugin <= 3.5.4.2 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via Profile Names ↗2025-09-08 CVE-2025-9489 Improper Control of Generation of Code Affects <= 3.5.4.2 Patched in 3.5.4.3
- Patched Medium · 6.4 WP-Members <= 3.5.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗2025-07-21 CVE-2025-7495 Improper Neutralization of Input During Web Page Generation Affects <= 3.5.4.1 Patched in 3.5.4.2
- Patched Medium · 6.4 WP-Members <= 3.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗2025-06-19 CVE-2025-50051 Improper Neutralization of Input During Web Page Generation Affects <= 3.5.4 Patched in 3.5.4.1
- Patched Medium · 6.4 WP-Members <= 3.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpmem_user_memberships Shortcode ↗2025-05-16 CVE-2025-4610 Improper Neutralization of Input During Web Page Generation Affects <= 3.5.2 Patched in 3.5.3
- Patched Medium · 6.4 WP-Members <= 3.4.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpmem_loginout Shortcode ↗2024-10-24 CVE-2024-10374 Improper Neutralization of Input During Web Page Generation Affects <= 3.4.9.5 Patched in 3.4.9.6
- 2024-10-21 CVE-2024-9231 Improper Neutralization of Input During Web Page Generation Affects <= 3.4.9.5 Patched in 3.4.9.6
- Patched Medium · 5.3 WP-Members Membership Plugin <= 3.4.9.3 - Unprotected Storage of Potentially Sensitive Files ↗2024-04-25 CVE-2024-2920 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 3.4.9.3 Patched in 3.4.9.4
- Patched High · 7.2 WP-Members Membership Plugin <= 3.4.9.2 - Unauthenticated Stored Cross-Site Scripting ↗2024-04-01 CVE-2024-1852 Improper Neutralization of Input During Web Page Generation Affects <= 3.4.9.2 Patched in 3.4.9.3
- Patched Medium · 6.4 WP-Members Membership Plugin <= 3.4.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode ↗2024-03-07 CVE-2024-1987 Improper Neutralization of Input During Web Page Generation Affects <= 3.4.9.1 Patched in 3.4.9.2
- Patched Medium · 4.3 WP-Members Membership <= 3.4.7.3 - Cross-Site Request Forgery to Settings Update ↗
- 2017-06-13 CVE-2017-2222 Improper Neutralization of Input During Web Page Generation Affects < 3.1.8 Patched in 3.1.8
- 2014-01-07 Improper Neutralization of Input During Web Page Generation Affects < 2.8.10 Patched in 2.8.10
Vulnerability records provided by Wordfence Intelligence. Copyright 2012-2026 Defiant Inc. License and terms.
CVE records: Copyright 1999-2026 The MITRE Corporation. CVE terms of use.
Behavioral tests
via WP HiveAutomated install-time checks, tested on PHP 8.1.12 · WP 7.0.1
Languages
via translate.wordpress.orgTranslated into 72 languages, 4 at 90% or more
Plus 48 more locales with partial translations.
AI assistants
How it's measured →Whether ChatGPT and Claude name this plugin when asked the category question, and whether the readme gives them something to quote.
Share of voice
How often each assistant names WP-Members Membership Plugin when asked about this topic, where it comes in the answer, and how that compares with its wp.org search position. Latest run 25 Oct 2026.
- Assistants
- ChatGPT, Claude
- Topics tracked
- Membership
Readme readiness
5 of 8 pass · checked 25 Oct 2026Can an assistant quote this readme? Eight deterministic checks over the wp.org listing, no model involved.
- ! Says what it does Short description names no action; say what the plugin does for the site.
- ! Has a FAQ No FAQ section.
- ! FAQ asks real questions No FAQ to judge.
- ✓ Names who it is for Names its audience or use cases ("if you need", "great for").
- ✓ Names what it works with Mentions WooCommerce, Block editor, Mailchimp, PayPal and 3 more.
- ✓ Headings and lists 6 headings and 3 lists.
- ✓ Enough to quote 4,082 characters of description.
- ✓ Tags match the text 4 of 5 tags appear in the text; "authentication" does not.
Growth timeline
Install-tier crossings we have observed, and how long each tier took to outgrow
- 2025-10-04 60K+ → 50K+ down after 638 days in tier
- 2024-01-05 70K+ → 60K+ down after 468 days in tier
- 2022-09-24 80K+ → 70K+ down after 1299 days in tier
- 2019-03-05 70K+ → 80K+ up after 846 days in tier
- 2016-11-09 60K+ → 70K+ up
Competes with
The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).
- L Limit Login Attempts 300K+ installs · 4.6★ · 2 shared tags C
-
WPS Limit Login 100K+ installs · 4.8★ · 2 shared tags A -
Theme My Login 50K+ installs · 3.7★ · 2 shared tags B -
Google Authenticator 20K+ installs · 4.3★ · 2 shared tags A - S Simple Membership After Login Redirection 10K+ installs · 4.4★ · 2 shared tags A
-
Login With Ajax – Fast Logins, 2FA, Redirects 10K+ installs · 4.6★ · 2 shared tags B
Embed this report card
Drop a live Pulse card for WP-Members Membership Plugin into a readme, a review or a deck. It updates itself.
<iframe src="https://plugins.wpmayor.com/embed/wp-members" width="480" height="300" style="border:0" loading="lazy" title="WP-Members Membership Plugin — Plugin Pulse"></iframe> WP-Members Membership Plugin: 50K+ active installs, 4.6★ (272 reviews). Plugin Pulse (WP Mayor), as of 2026-11-01. https://plugins.wpmayor.com/plugin/wp-members
Spotted a number that looks wrong? Report a data issue and we'll check it against the source.