Skip to content
PluginCanary

Groups - Memberships and Access Control

by itthinx · 10,000+ active installs · Checked 3 Nov 2026
Healthy1 Warning

Healthy: vulnerability published 26 Sep 2026, fixed in 4.7.0.

85/ 100 Canary Score
Sub-scores for Groups - Memberships and Access Control
Ownership100
Maintenance100
Security80
Support70
Reputation60

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 26 Sep 2026, fixed in 4.7.0. Update to version 4.7.0 or later.26 Sep 2026Evidence
  • InfoSEC-33 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence
  • InfoMOM-2Downloads in the last 4 weeks are down more than half vs the 26-week average. Review this plugin.3 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
itthinx12 Jan 2012 to 24 Sep 2026, 379 commits

1 committer recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
41 days ago
Releases, 24 months
22
Tested up to
7.1 current
Requires PHP
7.4 supported 8.2+
Releases per quarter for Groups - Memberships and Access Control
Q1 20242
Q2 20242
Q3 20242
Q4 20244
Q1 20251
Q2 20251
Q3 20252
Q4 20252
Q1 20264
Q2 20262
Q3 20266
Q4 20260

Last release 24 Sep 2026. Tested with WordPress 7.1 (current).

Support

50% of 2 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
26 Sep 2026Groups <= 4.6.0 - Authenticated (Subscriber+) Privilege Escalation via 'groups_join' Shortcode8.8<= 4.6.04.7.00
18 Feb 2026Groups <= 3.10.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'groups_group_info' Shortcode6.4<= 3.10.03.11.00
7 Nov 2025Groups <= 3.7.0 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Group Join4.3<= 3.7.03.8.00

Source: Wordfence Intelligence.

Reputation

Average rating per quarter for Groups - Memberships and Access Control
Q1 20244.7
Q2 20245.0
Q3 20245.0
Q4 20245.0
Q1 20255.0
Q2 20255.0
Q3 20255.0
Q4 20255.0
Q1 20265.0
Q3 20264.5

Average rating fell from 4.7 to 4.5 between Q1 2024 and Q3 2026.

Rating distribution
5 star347
4 star22
3 star4
2 star2
1 star7
Latest low reviews

Momentum

10,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Groups - Memberships and Access Control
4 May 2026414
11 May 2026940
18 May 20261,235
25 May 20264,671
1 Jun 20262,105
8 Jun 20261,339
15 Jun 2026963
22 Jun 2026796
29 Jun 2026805
6 Jul 20261,048
13 Jul 2026751
20 Jul 20264,818
27 Jul 20265,259
3 Aug 20262,545
10 Aug 20261,197
17 Aug 20261,061
24 Aug 2026915
31 Aug 20265,391
7 Sep 20264,528
14 Sep 20266,432
21 Sep 20265,792
28 Sep 20262,110
5 Oct 20261,662
12 Oct 20261,047
19 Oct 20261,422
26 Oct 20261,224
2 Nov 2026202

Weekly downloads over the last 4 weeks are 57% below the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

Simple Membership After Login RedirectionScore 91 · 10,000+My Private Site - Make Your Whole Site Private, Force Login & Block Registration SpamScore 91 · 10,000+Simple Membership Form ShortcodeScore 91 · 2,000+SureMembers - Membership & Content Restriction PluginScore 91 · 2,000+Groups 404 RedirectScore 91 · 1,000+

Facts

Version4.8.0
Authoritthinx
Added12 Jan 2012
Last updated24 Sep 2026
Active installs10,000+
Requires WordPress6.7
Tested up to7.1.4
Requires PHP7.4
CategoryUser Management & Authentication > User Registration & Login
Tagsaccess, groups, member, membership, access-control

Other plugins by this author: Open Graph Protocol Framework, Affiliates, Coupon Shortcodes for WooCommerce, Decent Comments, Groups 404 Redirect, Affiliates WooCommerce Light, Widgets Control, Search Live, Product Generator for WooCommerce, Affiliates Contact Form 7 Integration, Lazy Widget Loader, Documentation - Build a Knowledge Base, Help Center or Wiki

Questions

Is Groups - Memberships and Access Control still maintained?

Groups - Memberships and Access Control was last updated on 24 Sep 2026. Its Canary status is Healthy.

Is Groups - Memberships and Access Control safe?

Groups - Memberships and Access Control has no open unpatched vulnerabilities on record. 3 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns Groups - Memberships and Access Control?

The wordpress.org author is itthinx. Recent committers: itthinx, plugin-master. We have recorded no ownership change.

What can I use instead of Groups - Memberships and Access Control?

Plugins in the same category with a higher Canary Score: Simple Membership After Login Redirection, My Private Site - Make Your Whole Site Private, Force Login & Block Registration Spam, Simple Membership Form Shortcode, SureMembers - Membership & Content Restriction Plugin, Groups 404 Redirect.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue