Skip to content
PluginCanary

Simple Membership

by wp.insider · 40,000+ active installs · Checked 3 Nov 2026
Healthy6 Warnings

Healthy: vulnerability published 9 Oct 2026, fixed in 4.8.5.

86/ 100 Canary Score
Sub-scores for Simple Membership
Ownership100
Maintenance100
Security60
Support91
Reputation85

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 9 Oct 2026, fixed in 4.8.5. Update to version 4.8.5 or later.9 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 9 Oct 2026, fixed in 4.8.3. Update to version 4.8.3 or later.9 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 2 Oct 2026, fixed in 4.8.4. Update to version 4.8.4 or later.2 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 16 Sep 2026, fixed in 4.8.3. Update to version 4.8.3 or later.16 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 11 Sep 2026, fixed in 4.7.8. Update to version 4.7.8 or later.11 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 31 Aug 2026, fixed in 4.8.2. Update to version 4.8.2 or later.31 Aug 2026Evidence
  • InfoSEC-318 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
mra1330 May 2014 to 3 Nov 2026, 422 commits
wp.insider21 Jun 2014 to 26 Jul 2024, 14 commits

2 committers recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
yesterday
Releases, 24 months
32
Tested up to
7.1 current
Requires PHP
7.4 supported 8.2+
Releases per quarter for Simple Membership
Q1 20241
Q2 20244
Q3 20247
Q4 20244
Q1 20254
Q2 20253
Q3 20253
Q4 20251
Q1 20263
Q2 20264
Q3 20268
Q4 20263

Last release 3 Nov 2026. Tested with WordPress 7.1 (current).

Support

91% of 11 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
9 Oct 2026Simple Membership <= 4.8.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Country Field6.4<= 4.8.44.8.50
9 Oct 2026Simple Membership <= 4.8.2 - Information Exposure3.1<= 4.8.24.8.30
2 Oct 2026Simple Membership <= 4.8.3 - Missing Authorization to Unauthenticated Account Takeover and Sensitive Information Disclosure via 'email' Parameter on Activation Endpoints7.5<= 4.8.34.8.40
16 Sep 2026Simple Membership <= 4.8.2 - Missing Authorization4.3<= 4.8.24.8.30
11 Sep 2026Simple Membership < 4.7.8 - Missing Authorization4.3< 4.7.84.7.80
31 Aug 2026Simple Membership <= 4.8.1 - Unauthenticated Authentication Bypass to Administrator Account Takeover via Multisite Identity Binding5.3<= 4.8.14.8.20
5 Aug 2026Simple Membership <= 4.7.8 - Missing Authorization5.3<= 4.7.84.7.90
24 Jul 2026Simple Membership <= 4.7.7 - Missing Authorization5.3<= 4.7.74.7.80
24 Jul 2026Simple Membership <= 4.7.7 - Unauthenticated Stored Cross-Site Scripting7.2<= 4.7.74.7.80
13 Jul 2026Simple Membership <= 4.7.6 - Unauthenticated Payment Verification Bypass5.3<= 4.7.64.7.70
17 Jun 2026Simple Membership <= 4.7.5 - Missing Authorization to Unauthenticated Arbitrary Member Account Deactivation via Forged Stripe 'charge.refunded' Webhook5.3<= 4.7.54.7.60
15 Jun 2026Simple Membership <= 4.7.4 - Unauthenticated Stored Cross-Site Scripting7.2<= 4.7.44.7.50
3 May 2026Simple Membership <= 4.7.2 - Unauthenticated Stored Cross-Site Scripting7.2<= 4.7.24.7.30
31 Mar 2026Simple Membership <= 4.7.1 - Missing Authorization5.3<= 4.7.14.7.20
18 Feb 2026Simple Membership <= 4.7.0 - Unauthenticated Improper Handling of Missing Values6.5<= 4.7.04.7.10
19 Jan 2026Simple Membership <= 4.6.9 - Missing Authorization4.3<= 4.6.94.7.02
5 Jun 2025Simple Membership <= 4.6.3 - Authenticated (Administrator+) Stored Cross-Site Scripting4.4<= 4.6.34.6.40
20 Nov 2024Simple Membership <= 4.5.5 - Exposure of Private Personal Information to an Unauthorized Actor5.3<= 4.5.54.5.60
21 Oct 2024Simple Membership <= 4.5.3 - Unauthenticated Open Redirect6.1<= 4.5.34.5.40
3 May 2024Simple Membership <= 4.4.5 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode6.4<= 4.4.54.4.634
24 Apr 2024Simple Membership <= 4.4.3 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode5.4<= 4.4.34.4.4n/a
5 Mar 2024Simple Membership <= 4.4.2 - Unauthenticated Stored Self-Based Cross-Site Scripting4.7<= 4.4.24.4.350
19 Jan 2024Simple Membership <= 4.4.1 - Open Redirect6.1<= 4.4.14.4.246
19 Dec 2023Simple Membership <= 4.3.8 - Reflected Cross-Site Scripting6.1< 4.3.94.3.90
18 Dec 2023Simple Membership <= 4.3.8 - Reflected Cross-Site Scripting Vulnerability via environment_mode6.1<= 4.3.84.3.90

Source: Wordfence Intelligence.

Reputation

Average rating per quarter for Simple Membership
Q3 20254.4
Q4 20255.0
Q1 20265.0
Q2 20265.0
Q3 20265.0
Q4 20265.0

Average rating rose from 4.4 to 5.0 between Q3 2025 and Q4 2026.

Rating distribution
5 star400
4 star25
3 star10
2 star9
1 star32
Latest low reviews

Momentum

40,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Simple Membership
4 May 20261,309
11 May 20262,130
18 May 202621,451
25 May 20263,861
1 Jun 20262,580
8 Jun 202618,288
15 Jun 202622,277
22 Jun 20263,489
29 Jun 20262,567
6 Jul 202619,624
13 Jul 20269,675
20 Jul 202617,784
27 Jul 202620,702
3 Aug 20265,615
10 Aug 20262,808
17 Aug 202622,229
24 Aug 202620,388
31 Aug 202622,350
7 Sep 202619,232
14 Sep 20266,809
21 Sep 20263,847
28 Sep 202621,563
5 Oct 202622,491
12 Oct 20265,087
19 Oct 202622,423
26 Oct 20265,931
2 Nov 2026574

Weekly downloads over the last 4 weeks are 30% below the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

Simple Membership After Login RedirectionScore 91 · 10,000+My Private Site - Make Your Whole Site Private, Force Login & Block Registration SpamScore 91 · 10,000+Simple Membership Form ShortcodeScore 91 · 2,000+SureMembers - Membership & Content Restriction PluginScore 91 · 2,000+Groups 404 RedirectScore 91 · 1,000+

Facts

Version4.8.7
Authorwp.insider
Added30 May 2014
Last updated3 Nov 2026
Active installs40,000+
Requires WordPress6.0
Tested up to7.1.4
Requires PHP7.4
CategoryCommunity & Social > Membership Sites & Subscriptions
Tagsmember, members, membership, memberships, members-only

Other plugins by this author: Simple Membership After Login Redirection, Affiliates Manager, Simple Membership Custom Messages, Simple Membership WP user Import, Simple Membership Form Shortcode, Payment Gateway for PayPal Pro, PayPal Checkout & Subscriptions for WooCommerce, Simple Membership MailChimp Integration, Payment Gateway Braintree WooCommerce, Affiliates Manager Paid Membership Pro Integration, Affiliates Manager MailChimp Integration, Affiliates Manager and Sell Digital Downloads, Affiliates Manager MailPoet Integration

Questions

Is Simple Membership still maintained?

Simple Membership was last updated on 3 Nov 2026. Its Canary status is Healthy.

Is Simple Membership safe?

Simple Membership has no open unpatched vulnerabilities on record. 18 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns Simple Membership?

The wordpress.org author is wp.insider. Recent committers: mra13, wp.insider, plugin-master. We have recorded no ownership change.

What can I use instead of Simple Membership?

Plugins in the same category with a higher Canary Score: Simple Membership After Login Redirection, My Private Site - Make Your Whole Site Private, Force Login & Block Registration Spam, Simple Membership Form Shortcode, SureMembers - Membership & Content Restriction Plugin, Groups 404 Redirect.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue