Skip to content
PluginCanary

User Access Manager

by gm_alex · 10,000+ active installs · Checked 4 Nov 2026
Healthy

Healthy: maintained, last release 10 Sep 2026, 23 releases in 24 months, no unpatched vulnerabilities.

83/ 100 Canary Score
Sub-scores for User Access Manager
Ownership100
Maintenance100
Security75
Support70
Reputation60

How the score works

Quick answers

Is User Access Manager still maintained?
Yes. Last release 10 Sep 2026, 23 releases in the last 24 months. 10 Sep 2026 · wordpress.org
Who owns User Access Manager, and has it changed hands?
No change recorded. Main committer GM_Alex since Dec 2008. 4 Nov 2026 · SVN log
Was User Access Manager removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
Is User Access Manager safe?
8 known vulnerabilities, all fixed (latest in 2.3.19). Not on the exploited list. 8 Sep 2026 · Wordfence Intelligence
Is the latest User Access Manager update safe to install?
No ownership change before 2.3.20. No one-star spike after it. 10 Sep 2026 · Release history

Active signals

Facts we detected, with links to the source.

  • InfoMOM-2Downloads in the last 4 weeks are down more than half vs the 26-week average. Review this plugin.3 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
GM_Alex17 Dec 2008 to 10 Sep 2026, 490 commits

1 committer recorded. No ownership change since 2008.

Maintenance

Last release
55 days ago
Releases, 24 months
23
Tested up to
7.1 current
Requires PHP
8.0 supported 8.2+
Releases per quarter
Releases per quarter for User Access Manager
Q1 20240
Q2 20240
Q3 20240
Q4 20240
Q1 20250
Q2 20252
Q3 20250
Q4 20259
Q1 20263
Q2 20261
Q3 20268
Q4 20260

Last release 10 Sep 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: no reviews. Lifetime: 4.4.

Rating distribution
5 star81
4 star14
3 star5
2 star2
1 star10
Latest low reviews

Security record

4 vulnerabilities in 24 months (8 on record), all patched (latest fixed in 2.3.19).

Show 8 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
8 Sep 2026User Access Manager <= 2.3.18 - Reflected Cross-Site Scripting via 'tab_group_section' Parameter6.1<= 2.3.182.3.19Patched before disclosure
10 Aug 2026User Access Manager <= 2.3.14 - Missing Authorization5.3<= 2.3.142.3.15Patched before disclosure
4 Aug 2026User Access Manager <= 2.3.12 - Authenticated (Subscriber+) SQL Injection6.5<= 2.3.122.3.13Patched before disclosure
1 Aug 2026User Access Manager <= 2.3.15 - Unauthenticated Arbitrary File Read via 'uamgetfile' Parameter7.5<= 2.3.152.3.16Patched before disclosure
4 Aug 2023User Access Manager <= 2.2.16 - IP Spoofing5.3<= 2.2.162.2.18Patched before disclosure
5 Sep 2017User Access Manager <= 2.0.8 - Reflected Cross-Site Scripting6.1< 2.0.92.0.9Patched before disclosure
5 Sep 2017User Access Manager <= 1.2.14 - Reflected Cross-Site Scripting6.1<= 1.2.142.0.0Patched before disclosure
11 Oct 2011User Access Manager < 1.2 - Cross-Site Request Forgery8.8< 1.21.2Patched before disclosure

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

100% of 1 support threads resolved in the last 2 months.

Momentum

10,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for User Access Manager
4 May 2026178
11 May 2026387
18 May 20265,279
25 May 20261,231
1 Jun 2026914
8 Jun 2026709
15 Jun 2026580
22 Jun 2026442
29 Jun 2026465
6 Jul 2026425
13 Jul 20265,537
20 Jul 20266,167
27 Jul 202613,100
3 Aug 20267,124
10 Aug 20261,609
17 Aug 20261,119
24 Aug 2026868
31 Aug 20264,911
7 Sep 20266,227
14 Sep 20261,691
21 Sep 20261,231
28 Sep 2026919
5 Oct 2026884
12 Oct 2026742
19 Oct 20261,491
26 Oct 2026993
2 Nov 2026153

Weekly downloads over the last 4 weeks are 65% below the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

My Private SiteScore 91 · 10,000+Simple Membership After LoginScore 91 · 10,000+Restricted Site AccessScore 90 · 10,000+Restrict User AccessScore 89 · 10,000+Password ProtectedScore 88 · 300,000+

Facts

Version2.3.20
Authorgm_alex
Added17 Dec 2008
Last updated10 Sep 2026
Active installs10,000+
Requires WordPress4.7
Tested up to7.1.4
Requires PHP8.0
CategoryUser Management & Authentication > User Registration & Login
Tagsaccess, member access, user management, user access manager

Other plugins by this author: User Access Manager - NextGEN Gallery Extension

Questions

Is User Access Manager still maintained?

Yes. Last release 10 Sep 2026, 23 releases in the last 24 months.

Who owns User Access Manager, and has it changed hands?

No change recorded. Main committer GM_Alex since Dec 2008.

Was User Access Manager removed from wordpress.org?

No. Listed on wordpress.org as of 4 Nov 2026.

Is User Access Manager safe?

8 known vulnerabilities, all fixed (latest in 2.3.19). Not on the exploited list.

Is the latest User Access Manager update safe to install?

No ownership change before 2.3.20. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 4 Nov 2026.Report a data issue