Plugin Pulse Beta
← Pulse

WP User Manager – Registration Form, Login Form, User Profile Builder & Member Directory

by WP User Manager · Membership

Also makes 6 other plugins · 19.1K+ installs across the portfolio →

Registration forms, a frontend login form, user profiles and a member directory for WordPress. Add Stripe payments and content restriction.

Try it live opens a temporary test site in your browser, which can take about 20 seconds to load. Plugins that rely on outside services or a full server may not work completely there.

Health

A 88/100

no flags

Active installs

10K+

≈19K estimated

Momentum

+521%

downloads vs prior 30d

Biggest opportunity: Swap “login form”, “membership” and “registration form” for “user”, “member management” and “directory”. “login form” isn't earning its slot: it only gets you to #22. “user” sits at #13 untagged, close enough for a declared tag to move it up. “membership” isn't earning its slot: it only gets you to #18. “member management” sits at #14 untagged, close enough for a declared tag to move it up. “registration form” isn't earning its slot: it only gets you to #13. “directory” sits at #21 untagged, close enough for a declared tag to move it up. All five slots are taken, so one has to go.

How scoring works →
88 Health · A
Maintenance 100/100
Rating quality 93/100
Support 70/100
Security 75/100

88 health vs 71 average across 298 Membership plugins

Install conversion

How it's measured →

1.3%

of downloads still active

At least 10K of 782.6K lifetime downloads are still running, above its category: the median Membership plugin keeps 0.9%, across 164 plugins.

Downloads count every update, not just first installs, so older and more frequently released plugins read lower. Compare against other Membership plugins, not across the directory. wp.org reports active installs as the bottom of a band, so the real rate is this or higher.

This plugin shipped 18 releases in the last 12 months, and every existing install that updated counted as another download. wp.org publishes no split between first installs and updates, so we show the raw rate rather than guess at one.

Details

Version
2.10.3
Last updated
yesterday
Added
2015-07-06 · 11 yrs old
Requires WP
4.9
Tested up to
7.1.4
Requires PHP
7.4

Directory ranking optimization

How it's scored →

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

99 / 100

Excellent listing optimization

Well tuned across the board

Update recency 100/100

Updated 1 day ago

WP compatibility 100/100

Tested up to WordPress 7.1.4, the current branch or newer

Rating quality 93/100

4.7★ over 350 reviews, smoothed to 4.63★

Listing tuning 100/100

5 of 5 tags set · short description in place

Support resolution 100/100

1 of 1 support threads resolved in the last 2 months

Daily downloads

Since 5 Oct 2022 · 1,488 days · wp.org + Plugin Pulse archive

+521% vs prior 30d
4.1K31 Oct 2026

30-day downloads

Rolling 30-day volume · peak 46.2K · peaks are release surges

46.2K31 Oct 2026

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

WP User Manager · #1957youUsersWP · #1395Pie Register · #5369MemberKits · #9395

Rating trend

Star average over time · dips mark rough releases

4.731 Oct 2026

Health trend

Composite health score, snapshotted daily

8831 Oct 2026

Update activity

How busy the existing users are, measured as downloads in the last 30 days for every 1,000 active sites. A spike means a new release everyone's pulling; a long, slow decline means an aging user base that updates less.

4.6K31 Oct 2026

Release cadence

Actively maintained
from wp.org release tags

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

18

releases in the last 12 months

yesterday

latest release · v2.10.3 · 30 Oct 2026

131

tagged releases on record

Recent releases

2.10.3 · 30 Oct 20262.10.2 · 29 Oct 20262.10.1 · 27 Oct 20262.10.0 · 20 Oct 20262.9.26 · 16 Oct 20262.9.25 · 14 Oct 20262.9.24 · 8 Oct 20262.9.23 · 8 Oct 20262.9.22 · 2 Oct 20262.9.21 · 1 Oct 20262.9.20 · 27 Sep 20262.9.19 · 18 Sep 20262.9.18 · 30 May 20262.9.17 · 11 May 2026

What its installed base runs

via wordpress.org

Share of active installs on each version of this plugin. Green is the current release; a big slice on older versions is a user base that has stopped updating.

v2.9 93%
Older / other versions 7.3%

Estimated active installs

The public count shows “10K+”. Our estimate pins where the real number sits.

tracked estimate
10K–20K ≈19K

Crossed into this band 5.7 years ago; the previous band took 16 months to cross, which places it about 90% of the way through.

Install history since 15 Jul 2021

10K31 Oct 2026

Recent reviews

All reviews on wp.org ↗
  1. ★★★★★ gbacc
    6mo ago

    The Mailchimp add-on doesn’t work and they have terrible support!!!

    Read on wp.org ↗
  2. ★★★★★ fevzi08
    7mo ago

    Bazı eksikleri olsa da işimi görüyor.

    Read on wp.org ↗
  3. ★★★★★ brendar
    9mo ago

    After all the time & effort I’ve spent setting up the back-end of wpum, when I did a test registration, I can’t go through, it’s giving me an error message of, ” – is a required field.” After investigating, I found out that Username, Nickname and Display names are required fields by default; even if you don’t use them in your registration form. There is no way to edit this unless you pay $69. per year for the Custom Fields add-on. I could pay it but I felt cheated and tricked so I just used Ultimate Member. No modern registration form requires Username, Nickname and Display name all at once, and the free version gives you no way to disable them.

    Read on wp.org ↗
  4. ★★★★★ bigjon2026
    9mo ago

    If you want this system you do you. if you want to change it ever so slightly, or more, you will end up pulling your hair out and having a broken site. this thing uses templates – block editor (wp, hosts, elementor, etc) NOT ALLOWED. Also cant change redirects. email confirmation is automatic – no ‘click link to confirm’, If you use the normal Appearance – Editor – Navigation, it will all go wrong, the hiding of menu items doesnt work properly… There are so many quirks that after hours im giving up.

    Read on wp.org ↗
  5. ★★★★★ Earl_D
    1.1y ago

    I have looked at many plugins for user management and membership over the years. My criteria was easy to use and set up for extensible features. Based on that this is the best one I have found so far.

    Read on wp.org ↗
  6. ★★★★★ Gabriel Ofei
    1.1y ago

    I have had several problems on my site. Never logging out . Having to press the login several times. Sometimes locking me out of my site. I blamed it on other plugins until today I rang my host’s they checked the servers and said wp user manager was the problem. They deleted it and now everything is fine quite shocking as I thought it was a wordpress plugin. So be careful of this plugin.

    Read on wp.org ↗
  7. ★★★★★ vtchevalier
    1.3y ago

    Works as expected.

    Read on wp.org ↗
  8. ★★★★★ vissersj
    1.3y ago

    Very useful plugin and great support by Robert!

    Read on wp.org ↗

Latest updates

via wp.org changelog

Recent releases and news for this plugin

  1. — Version 2.9.18 Security: Hardened profile tab input validation (thanks to Yat via Wordfence for responsible disclosure) Fix: Custom avatar not shown when a default avatar is also configured Fix: Multiple roles not saving on the admin e 2.9.18
  2. — Version 2.9.17 Security: Hardened file field input validation during registration (thanks to endy via Patchstack for responsible disclosure) 2.9.17
  3. — Version 2.9.16 Fix: PHP 8.2+ dynamic property deprecation warnings in WPUM_Field Fix: Account update no longer fails when avatar or cover image file is missing from disk Fix: Password recovery now works when the username is an email ad 2.9.16
  4. — Version 2.9.15 Fix: User role multiselect was disabled on the admin user profile after Carbon Fields upgrade 2.9.15
  5. — Version 2.9.14 Improvement: Updated Brain\Cortex routing library for PHP 8.3 compatibility Improvement: Upgraded Carbon Fields to a version compatible with PHP 8.1-8.3 Fix: Translation loading now uses the correct hook for WordPress 6. 2.9.14
  6. — Version 2.9.13 Security: Fixed authenticated arbitrary file deletion vulnerability in custom avatar and cover image handling (Thanks to YC_Infosec via Wordfence) Security: Fixed a PHP Object Injection vulnerability in the user nickname 2.9.13

Security history

via Wordfence Intelligence

All 17 disclosed vulnerabilities are patched in the current version (2.10.3). Sites still on an older version should update.

  1. 2026-10-20 CVE-2026-112823 Missing Authorization Affects <= 2.9.25 Patched in 2.9.26
  2. 2026-10-19 CVE-2026-110523 Improper Privilege Management Affects 2.9.21 - 2.9.25 Patched in 2.9.26
  3. 2026-10-15 CVE-2026-110527 Client-Side Enforcement of Server-Side Security Affects 2.9 - 2.9.19 Patched in 2.9.20
  4. 2026-10-13 CVE-2026-108496 Missing Authorization Affects <= 2.9.23 Patched in 2.9.24
  5. 2026-10-12 CVE-2026-107423 Missing Authorization Affects <= 2.9.22 Patched in 2.9.23
  6. 2026-10-03 CVE-2026-103085 Improper Privilege Management Affects <= 2.9.20 Patched in 2.9.21
  7. 2026-09-22 CVE-2026-94079 Missing Authorization Affects <= 2.9.19 Patched in 2.9.20
  8. 2026-09-21 CVE-2026-18345 Missing Authorization Affects <= 2.9.18 Patched in 2.9.19
  9. 2026-06-05 CVE-2026-9290 Improper Limitation of a Pathname to a Restricted Directory Affects <= 2.9.17 Patched in 2.9.18
  10. 2026-06-05 CVE-2026-49766 Improper Limitation of a Pathname to a Restricted Directory Affects <= 2.9.16 Patched in 2.9.17
  11. 2025-12-11 CVE-2025-13320 External Control of File Name or Path Affects <= 2.9.12 Patched in 2.9.13
  12. 2025-05-19 CVE-2025-60245 Deserialization of Untrusted Data Affects <= 2.9.12 Patched in 2.9.13
  13. 2024-11-22 CVE-2024-10216 Missing Authorization Affects <= 2.9.11 Patched in 2.9.12
  14. 2024-11-22 CVE-2024-10537 Missing Authorization Affects <= 2.9.11 Patched in 2.9.12
  15. 2024-08-16 CVE-2024-43336 Cross-Site Request Forgery Affects <= 2.9.10 Patched in 2.9.11
  16. 2021-09-22 CVE-2021-24655 Authorization Bypass Through User-Controlled Key Affects <= 2.6.2 Patched in 2.6.3
  17. 2021-09-06 CVE-2021-24654 Improper Neutralization of Input During Web Page Generation Affects < 2.0.2 Patched in 2.0.2

Vulnerability records provided by Wordfence Intelligence. Copyright 2012-2026 Defiant Inc. License and terms.

CVE records: Copyright 1999-2026 The MITRE Corporation. CVE terms of use.

Behavioral tests

via WP Hive

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0

✓ Low memory footprint
✓ Low page-speed impact
✕ Runs on latest PHP + WP
✕ No PHP errors
✕ No JS errors
✓ Activates cleanly
✓ No resource errors
✓ No external HTTP errors
✓ Optimized database use
✕ Frequently updated

Languages

via translate.wordpress.org

Translated into 26 languages, 1 at 90% or more

Swedish 90%
Dutch 89%
Finnish 89%
French (France) 89%
Italian 89%
Spanish (Chile) 89%
Spanish (Colombia) 89%
Spanish (Spain) 89%
Norwegian (Bokmål) 83%
Chinese (China) 66%
Russian 56%
German 55%
Turkish 53%
Polish 46%
Albanian 42%
Japanese 39%
German (Formal) 36%
Danish 15%
Spanish (Venezuela) 12%
Czech 8%
Croatian 7%
Dutch (Formal) 6%
Spanish (Argentina) 6%
Ukrainian 6%

Plus 2 more locales with partial translations.

AI assistants

How it's measured →

Whether ChatGPT and Claude name this plugin when asked the category question, and whether the readme gives them something to quote.

Premium

Share of voice

How often each assistant names WP User Manager when asked about this topic, where it comes in the answer, and how that compares with its wp.org search position. Latest run 25 Oct 2026.

Assistants
ChatGPT, Claude
Topics tracked
Membership
Get early access to Premium →

Readme readiness

7 of 8 pass · checked 25 Oct 2026

Can an assistant quote this readme? Eight deterministic checks over the wp.org listing, no model involved.

  • ✓ Says what it does "Registration forms, a frontend login form, user profiles and a member directory for WordPress. Add Stripe p..."
  • ✓ Has a FAQ 9 questions in the FAQ.
  • ✓ FAQ asks real questions 9 of 9 read like questions a user would type.
  • ! Names who it is for One audience phrase ("use it"); say who the plugin is for and what they use it for.
  • ✓ Names what it works with Mentions WooCommerce, Elementor, Mailchimp, Stripe and 7 more.
  • ✓ Headings and lists 6 headings and 4 lists.
  • ✓ Enough to quote 6,317 characters of description.
  • ✓ Tags match the text All 5 tags appear in the text.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

  1. 2021-02-24 9K+ → 10K+ up after 467 days in tier
  2. 2019-11-15 8K+ → 9K+ up after 379 days in tier
  3. 2018-11-01 7K+ → 8K+ up after 106 days in tier
  4. 2018-07-18 8K+ → 7K+ down after 108 days in tier
  5. 2018-04-01 7K+ → 8K+ up after 418 days in tier
  6. 2017-02-07 6K+ → 7K+ up after 91 days in tier
  7. 2016-11-08 5K+ → 6K+ up after 73 days in tier
  8. 2016-08-27 3K+ → 5K+ up after 168 days in tier

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

Embed this report card

Drop a live Pulse card for WP User Manager – Registration Form, Login Form, User Profile Builder & Member Directory into a readme, a review or a deck. It updates itself.

<iframe src="https://plugins.wpmayor.com/embed/wp-user-manager" width="480" height="300" style="border:0" loading="lazy" title="WP User Manager – Registration Form, Login Form, User Profile Builder & Member Directory — Plugin Pulse"></iframe>
Preview card ↗

WP User Manager – Registration Form, Login Form, User Profile Builder & Member Directory: 10K+ active installs, 4.7★ (350 reviews). Plugin Pulse (WP Mayor), as of 2026-10-31. https://plugins.wpmayor.com/plugin/wp-user-manager

Spotted a number that looks wrong? Report a data issue and we'll check it against the source.