Skip to content
PluginCanary

Membership Plugin

Membership Plugin - Kadence Memberships
by Nexcess · 8,000+ active installs · Checked 3 Nov 2026
Healthy

Healthy: maintained, last release 14 Oct 2026, 21 releases in 24 months, no unpatched vulnerabilities.

81/ 100 Canary Score
Sub-scores for Membership Plugin
Ownership100
Maintenance100
Security60
Support70
Reputation70

How the score works

Quick answers

Is Membership Plugin still maintained?
Yes. Last release 14 Oct 2026, 21 releases in the last 24 months. 14 Oct 2026 · wordpress.org
Who owns Membership Plugin, and has it changed hands?
No change recorded. Main committer claudiosanches since Nov 2023. 3 Nov 2026 · SVN log
Was Membership Plugin removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
Is Membership Plugin safe?
12 known vulnerabilities, all fixed (latest in 4.0.1). Not on the exploited list. 4 Aug 2026 · Wordfence Intelligence
Is the latest Membership Plugin update safe to install?
No ownership change before 4.0.5. No one-star spike after it. 14 Oct 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
NoseGraze16 Jan 2018 to 12 Nov 2019, 10 commits
BrashRebel2 Apr 2020 to 20 Apr 2020, 10 commits
ajmorris23 Oct 2020 to 27 Jan 2021, 16 commits
jthillithemes12 Apr 2021 to 13 Jan 2022, 12 commits
reedyseth4 May 2022 to 10 Aug 2023, 43 commits
estevao902 Oct 2023 to 2 Oct 2023, 2 commits
claudiosanches6 Nov 2023 to 26 May 2026, 49 commits
bordoni15 Dec 2025 to 15 Dec 2025, 3 commits
dpantazis6 Aug 2026 to 6 Aug 2026, 4 commits
ghernkadence3 Sep 2026 to 3 Sep 2026, 1 commits
rahulapalu17 Sep 2026 to 14 Oct 2026, 4 commits

New committer rahulapalu made a first commit on 17 Sep 2026. New committer ghernkadence made a first commit on 3 Sep 2026. New committer dpantazis made a first commit on 6 Aug 2026.

Maintenance

Last release
21 days ago
Releases, 24 months
21
Tested up to
7.1 current
Requires PHP
7.4 supported 8.2+
Releases per quarter
Releases per quarter for Membership Plugin
Q1 20241
Q2 20241
Q3 20242
Q4 20241
Q1 20251
Q2 20251
Q3 20251
Q4 20251
Q1 202610
Q2 20262
Q3 20263
Q4 20261

Last release 14 Oct 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: no reviews. Lifetime: 3.1.

Rating distribution
5 star43
4 star10
3 star4
2 star1
1 star42

Security record

8 vulnerabilities in 24 months (12 on record), all patched (latest fixed in 4.0.1).

Show 12 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
4 Aug 2026Membership Plugin - Kadence Memberships <= 4.0.0 - Unauthenticated Password Reset Link Poisoning to Account Takeover9.3<= 4.0.04.0.1Patched before disclosure
20 Mar 2026Membership Plugin - Restrict Content <= 3.2.22 - Missing Authorization5.3<= 3.2.223.2.23Patched before disclosure
19 Mar 2026Membership Plugin - Restrict Content <= 3.2.24 - Unvalidated Redirect in Password Reset Flow via rcp_redirect4.3<= 3.2.243.2.25Patched before disclosure
4 Mar 2026Membership Plugin - Restrict Content <= 3.2.20 - Unauthenticated Privilege Escalation via 'rcp_level'8.1<= 3.2.203.2.21Patched before disclosure
17 Feb 2026Membership Plugin - Restrict Content <= 3.2.18 - Authenticated (Administrator+) Stored Cross-Site Scripting via Invoice Settings4.4<= 3.2.183.2.19Patched before disclosure
15 Jan 2026Membership Plugin - Restrict Content <= 3.2.16 - Missing Authentication to Insecure Direct Object Reference and Sensitive Information Exposure8.2<= 3.2.163.2.17Patched before disclosure
22 Dec 2025Membership Plugin - Restrict Content <= 3.2.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodes6.4<= 3.2.153.2.16Patched before disclosure
25 Jan 2025Membership Plugin - Restrict Content <= 3.2.13 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure5.3<= 3.2.133.2.14Patched before disclosure
10 Apr 2024Restrict Content <= 3.2.8 - Missing Authorization5.3<= 3.2.83.2.9Patched before disclosure
6 Nov 2023Restrict Content <= 3.2.7 - Information Exposure via legacy log file5.3<= 3.2.73.2.81
23 Jun 2023Restrict Content <= 3.2.2 - Reflected Cross-Site Scripting6.1< 3.2.33.2.3Patched before disclosure
23 Jun 2023Restrict Content <= 3.2.2 - Missing Authorization to Notice Dismissal5.3< 3.2.33.2.3Patched before disclosure

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

33% of 3 support threads resolved in the last 2 months.

Momentum

8,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Membership Plugin
4 May 2026293
11 May 20264,645
18 May 20261,704
25 May 20264,656
1 Jun 20261,029
8 Jun 2026712
15 Jun 2026646
22 Jun 2026614
29 Jun 2026463
6 Jul 20261,114
13 Jul 2026445
20 Jul 2026513
27 Jul 2026478
3 Aug 20264,981
10 Aug 20261,559
17 Aug 2026835
24 Aug 2026855
31 Aug 20264,275
7 Sep 20261,188
14 Sep 20264,910
21 Sep 20261,570
28 Sep 2026909
5 Oct 2026782
12 Oct 20264,605
19 Oct 20261,966
26 Oct 20261,978
2 Nov 2026209

Weekly downloads over the last 4 weeks are 23% above the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

Content ControlScore 95 · 40,000+My Private SiteScore 91 · 10,000+Simple Membership After LoginScore 91 · 10,000+Restricted Site AccessScore 90 · 10,000+Restrict User AccessScore 89 · 10,000+

Facts

Version4.0.5
AuthorNexcess
Added24 Jul 2010
Last updated14 Oct 2026
Active installs8,000+
Requires WordPress6.0
Tested up to7.1.4
Requires PHP7.4
CategoryCommunity & Social > Membership Sites & Subscriptions
Tagsmembership, restrict pages, restrict posts, Restrict access, registration form

Other plugins by this author: Kadence Security - Password, Two Factor Authentication, and Brute Force Protection, Kadence Blocks - Page Builder Toolkit for Gutenberg Editor, The Events Calendar, Kadence Starter Templates - Predesigned Website Templates, GiveWP - Donation Plugin and Fundraising Platform, Image Widget, Kadence WooCommerce Email Designer, Event Tickets and Registration, Virtue/Ascend/Pinnacle Toolkit, Kadence Central - Site Management, Backups, Security, and Reporting, GiveWP Donation Widgets for Elementor, Advanced Post Manager

Questions

Is Membership Plugin still maintained?

Yes. Last release 14 Oct 2026, 21 releases in the last 24 months.

Who owns Membership Plugin, and has it changed hands?

No change recorded. Main committer claudiosanches since Nov 2023.

Was Membership Plugin removed from wordpress.org?

No. Listed on wordpress.org as of 3 Nov 2026.

Is Membership Plugin safe?

12 known vulnerabilities, all fixed (latest in 4.0.1). Not on the exploited list.

Is the latest Membership Plugin update safe to install?

No ownership change before 4.0.5. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 3 Nov 2026.Report a data issue