User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 52% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price.

1. ★★★★★ artline4media

   4mo ago

   werk heel goed samen met andere plugin’s en AI .

   Read on wp.org ↗
2. ★★★★★ Knorden

   5mo ago

   Easy to setup and works just fine!

   Read on wp.org ↗
3. ★★★★★ dhregular

   8mo ago

   I work for an agency, and we have multiple sites using this plugin. At first it was wonderful, and it worked exactly how we needed it to. However, since the update it seems like everything is broken. One site our login form won’t redirect or load after a user logs in. On another, the submission forms do not create posts when submitted any more. And on another site the registration form no longer works. Redirects after any form submission (post forms, registration, or login) don’t work on any site any more. This plugin was working flawlessly, but now it is a nightmare. It has caused my clients a great deal of frustration and unhappiness. I’ve been going through support for over a month with no end in sight. I don’t want to leave this review, but I came into work this morning to learn yet again another site seems to no longer work with this plugin. Before their new major update, the plugin was perfect and I would have given it 5 stars and recommended it to anyone who needed post form submissions, user dashboards, and custom registration forms. Now I wouldn’t recommend it to anyone.

   Read on wp.org ↗
4. ★★★★★ iiken

   12mo ago

   I received chat support from Tanvir.Initially, I was told there would be a 50-minute wait, but it ended up being a 90-minute wait for a response.The communication was smooth, my requirements were clearly understood, and it was easy to follow.This was support regarding Pro plugin activation, and I appreciate your polite and prompt assistance.*I am Japanese, so there may have been some parts where my English was unclear.

   Read on wp.org ↗
5. ★★★★★ doqsa

   12mo ago

   Hello, I’m writing to report a critical issue I’m experiencing with the WP User Frontend plugin. I have created multiple forms, and while the form count (e.g., “Published 2”) is correct, the list of forms below it is completely empty. I am unable to see or edit the forms that have been created. I have already submitted a support request regarding this issue but have not received a response. Because of this lack of support, I am unable to use the plugin as intended. I kindly request your immediate assistance with this problem. If this issue cannot be resolved, I will have to consider seeking a refund for the product. Thank you for your time. This topic was modified 10 months, 3 weeks ago by doqsa.

   Read on wp.org ↗
6. ★★★★★ dtbcinci

   1.2y ago

   This makes building forms very easy.

   Read on wp.org ↗
7. ★★★★★ aruss

   1.2y ago

   Simple to use, stylish, smooth!

   Read on wp.org ↗
8. ★★★★★ janeyeo

   1.2y ago

   Appreciate the great hard work from Md. Tanvir Chowdhur, for fixing Editing issue for WP User Frontend. Nice patience for identifying the issue and bug fixing. Thank you very much.

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 3.9 New – Post Form Gutenberg block to place a frontend post submission form in the block editor with full style controls. New – Change Password tab in the user profile account page so members can update their password from 3.9
2. — Version 3.8 Fix – Security: hardened file upload handling to prevent unauthorized deletion of media attachments and modification of a frontend post via crafted form submissions. Fix – Credit Card payment gateway now displays correct 3.8
3. — Version 3.7 Fix – Tag suggestions not loading in frontend post form builder Fix – Checkbox styling in frontend post form builder 3.7
4. — Version 3.6 Fix – Restore edit button for custom post type published posts after 4.2.9 3.6
5. — Version 3.5 Chore – Exclude .DS_Store files from builds and SVN deploy 3.5
6. — Version 3.4 Chore – Clean up internal Claude build files from the release package. 3.4

25 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. Medium · 5.3 User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration <= 4.3.7 - Insecure Direct Object Reference to Unauthenticated Arbitrary Post Modification via 'wpuf_files_data' Parameter ↗
   2026-07-08 CVE-2026-12418 Authorization Bypass Through User-Controlled Key Affects <= 4.3.7 Patched in 4.3.8
2. Medium · 5.3 User Frontend <= 4.3.7 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion via 'attach_id' Parameter ↗
   2026-07-08 CVE-2026-12406 Missing Authorization Affects <= 4.3.7 Patched in 4.3.8
3. Medium · 5.3 User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration <= 4.3.1 - Unauthenticated Insecure Direct Object Reference to Arbitrary User Subscription Overwrite ↗
   2026-07-07 CVE-2026-5459 Authorization Bypass Through User-Controlled Key Affects <= 4.3.1 Patched in 4.3.2
4. Medium · 5.3 User Frontend: AI Powered Frontend Post Submission, User Directory, User Profile, Membership & User Registration < 4.3.8 - Missing Authorization to Unauthenticated Media Attachment Deletion ↗
   2026-07-06 CVE-2026-14568 Missing Authorization Affects < 4.3.8 Patched in 4.3.8
5. Medium · 5.3 User Frontend: AI Powered Frontend Posting, User Directory, Profile Builder, Membership & User Registration <= 4.3.7 - Missing Authorization ↗
   2026-06-29 CVE-2026-57334 Missing Authorization Affects <= 4.3.7 Patched in 4.3.8
6. Medium · 4.3 User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration <= 4.3.2 - Missing Authorization to Authenticated (Subscriber+) Subscription Pack Cancellation ↗
   2026-06-08 CVE-2026-4058 Missing Authorization Affects <= 4.3.2 Patched in 4.3.3
7. High · 8.8 User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration <= 4.3.1 - Authenticated (Subscriber+) PHP Object Injection ↗
   2026-05-07 CVE-2026-5127 Deserialization of Untrusted Data Affects <= 4.3.1 Patched in 4.3.2
8. Medium · 5.3 User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration <= 4.3.1 - Missing Authorization ↗
   2026-04-27 CVE-2026-42412 Missing Authorization Affects <= 4.3.1 Patched in 4.3.2
9. Medium · 5.3 User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration <= 4.2.8 - Missing Authorization ↗
   2026-03-23 CVE-2026-32485 Missing Authorization Affects <= 4.2.8 Patched in 4.2.9
10. Medium · 5.3 User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration <= 4.2.8 - Missing Authorization to Unauthenticated Arbitrary Post Modification via 'post_id' Parameter ↗
    2026-03-14 CVE-2026-2233 Missing Authorization Affects <= 4.2.8 Patched in 4.2.9
11. Medium · 4.3 User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration <= 4.2.5 - Missing Authorization ↗
    2026-03-10 CVE-2026-24364 Missing Authorization Affects <= 4.2.5 Patched in 4.2.6
12. High · 8.8 User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration <= 4.2.8 - Authenticated (Author+) Arbitrary File Upload ↗
    2026-02-26 CVE-2026-1565 Unrestricted Upload of File with Dangerous Type Affects <= 4.2.8 Patched in 4.2.9
13. Medium · 5.3 WP User Frontend <= 4.2.4 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion ↗
    2026-01-01 CVE-2025-14047 Missing Authorization Affects <= 4.2.4 Patched in 4.2.5
14. Medium · 5.4 WP User Frontend <= 4.1.12 - Authenticated (Subscriber+) Arbitrary Shortcode Execution ↗
    2025-09-22 CVE-2025-58673 Improper Control of Generation of Code ('Code Injection') Affects <= 4.1.12 Patched in 4.1.13
15. Medium · 5.4 WP User Frontend <= 4.1.12 - Missing Authorization ↗
    2025-09-22 CVE-2025-58672 Missing Authorization Affects <= 4.1.12 Patched in 4.1.13
16. Critical · 9.1 WP User Frontend <= 4.0.7 - Authenticated (Administrator+) SQL Injection ↗
    2024-08-01 CVE-2024-38693 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 4.0.7 Patched in 4.0.8
17. Medium · 5.3 Various Plugins <= Various Version - Use of Polyfill.io ↗
    2024-06-25 Use of Less Trusted Source Affects <= 4.0.7 Patched in 4.0.8
18. High · 8.8 WP User Frontend <= 3.6.5 - Authenticated (Author+) Privilege Escalation ↗
    2023-11-09 CVE-2023-47682 Improper Privilege Management Affects <= 3.6.5 Patched in 3.6.6
19. Medium · 4.3 WP User Frontend <= 3.6.8 - Missing Authorization via AJAX actions ↗
    2023-10-03 CVE-2023-45002 Missing Authorization Affects <= 3.6.8 Patched in 3.6.9
20. Medium · 4.3 Appsero <= 1.2.1 - Missing Authorization ↗
    2022-12-16 Missing Authorization Affects <= 3.6.0 Patched in 3.6.1
21. Medium · 4.3 Appsero <= 1.2.0 - Cross-Site Request Forgery ↗
    2022-12-14 CVE-2022-47150 Cross-Site Request Forgery (CSRF) Affects <= 3.6.0 Patched in 3.6.1
22. High · 8.1 WP User Frontend <= 3.5.28 - Privilege Escalation ↗
    2022-10-31 CVE-2021-24649 Improper Privilege Management Affects <= 3.5.28 Patched in 3.5.29
23. High · 8.8 WP User Frontend <= 3.5.25 - SQL Injection & Reflected Cross-Site Scripting ↗
    2021-12-27 CVE-2021-25076 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 3.5.25 Patched in 3.5.26
24. High · 7.2 WP User Frontend – Membership, Profile, Registration & Post Submission Plugin for WordPress < 3.5.25 - Authenticated (Admin+) SQL Injection ↗
    2021-11-18 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects < 3.5.25 Patched in 3.5.25
25. Critical · 9.8 WP User Frontend < 2.3.11 - Arbitrary File Upload ↗
    2016-02-08 Unrestricted Upload of File with Dangerous Type Affects < 2.3.11 Patched in 2.3.11

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0

Translated into 55 languages, 2 at 90% or more

Plus 31 more locales with partial translations.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2023-05-26 30K+ → 20K+ down

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin 200K+ installs · 4.4★ · 3 shared tags A
• Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress 100K+ installs · 3.1★ · 3 shared tags B
• User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder 50K+ installs · 4.8★ · 3 shared tags A
• WP User Manager – User Profile Builder & Membership 10K+ installs · 4.7★ · 3 shared tags A
• W WarmupReps — installs · 3.6★ · 3 shared tags D
• User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor 40K+ installs · 4.7★ · 2 shared tags A

Embed this report card

Drop a live Pulse card for User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission into a readme, a review or a deck. It updates itself.

User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission: 20K+ active installs, 4.1★ (534 reviews). Plugin Pulse (WP Mayor), as of 2026-08-29. https://plugins.wpmayor.com/plugin/wp-user-frontend