Skip to content
PluginCanary

User Registration & Membership

User Registration & Membership - Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder
by wpeverest · 50,000+ active installs · Checked 4 Nov 2026
Healthy

Healthy: maintained, last release 17 Oct 2026, 53 releases in 24 months, no unpatched vulnerabilities.

83/ 100 Canary Score
Sub-scores for User Registration & Membership
Ownership100
Maintenance100
Security60
Support70
Reputation85

How the score works

Quick answers

Is User Registration & Membership still maintained?
Yes. Last release 17 Oct 2026, 53 releases in the last 24 months. 17 Oct 2026 · wordpress.org
Who owns User Registration & Membership, and has it changed hands?
No change recorded. Main committer wpeverest since Jul 2017. 4 Nov 2026 · SVN log
Was User Registration & Membership removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
Is User Registration & Membership safe?
69 known vulnerabilities, all fixed (latest in 5.3.1). Not on the exploited list. 30 Oct 2026 · Wordfence Intelligence
Is the latest User Registration & Membership update safe to install?
No ownership change before 5.3.1. No one-star spike after it. 17 Oct 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
wpeverest6 Jul 2017 to 26 Oct 2026, 157 commits
wpeverestdev16 Jul 2020 to 24 Jun 2024, 72 commits

2 committers recorded. No ownership change since 2017.

Maintenance

Last release
18 days ago
Releases, 24 months
53
Tested up to
7.1 current
Requires PHP
7.4 supported 8.2+
Releases per quarter
Releases per quarter for User Registration & Membership
Q1 20243
Q2 20245
Q3 20247
Q4 20245
Q1 20259
Q2 20257
Q3 20254
Q4 20256
Q1 202612
Q2 20266
Q3 20264
Q4 20262

Last release 17 Oct 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: 4.6 (5 reviews). Lifetime: 4.8.

Average rating per quarter for User Registration & Membership
Q4 20255.0
Q1 20264.9
Q2 20265.0
Q3 20264.8
Q4 20264.0

Average rating fell from 5.0 to 4.0 between Q4 2025 and Q4 2026.

Rating distribution
5 star759
4 star25
3 star12
2 star4
1 star32

Security record

57 vulnerabilities in 24 months (69 on record), all patched (latest fixed in 5.3.1).

Show 69 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
30 Oct 2026User Registration & Membership - Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder <= 5.3.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting6.4<= 5.3.05.3.1Patched before disclosure
29 Oct 2026User Registration & Membership - Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder <= 5.3.0 - Missing Authorization5.3<= 5.3.05.3.1Patched before disclosure
16 Oct 2026User Registration & Membership <= 5.2.8 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via Referer Header via 'referrer_url' Smart Tag8.1<= 5.2.85.3.0Patched before disclosure
16 Oct 2026User Registration & Membership <= 5.2.8 - Cross-Site Request Forgery to trigger_bulk_action()4.3<= 5.2.85.3.0Patched before disclosure
16 Oct 2026User Registration & Membership <= 5.2.8 - Unauthenticated Stored Cross-Site Scripting via Checkbox Field Value7.2<= 5.2.85.3.0Patched before disclosure
15 Oct 2026User Registration & Membership <= 5.2.8 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via display_name5.4<= 5.2.85.3.0Patched before disclosure
13 Oct 2026User Registration & Membership - Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder <= 5.2.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting6.4<= 5.2.85.3.0Patched before disclosure
13 Oct 2026User Registration & Membership - Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder <= 5.2.8 - Missing Authorization4.3<= 5.2.85.3.0Patched before disclosure
13 Oct 2026User Registration & Membership - Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder <= 5.2.8 - Missing Authorization5.3<= 5.2.85.3.0Patched before disclosure
13 Oct 2026User Registration & Membership - Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder <= 5.2.8 - Missing Authorization5.3<= 5.2.85.3.0Patched before disclosure
13 Oct 2026User Registration & Membership - Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder <= 5.2.8 - Unauthenticated Information Exposure5.3<= 5.2.85.3.0Patched before disclosure
13 Oct 2026User Registration & Membership - Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder <= 5.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 5.2.85.3.0Patched before disclosure
13 Oct 2026User Registration & Membership - Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder <= 5.2.8 - Cross-Site Request Forgery4.3<= 5.2.85.3.0Patched before disclosure
4 Oct 2026User Registration & Membership - Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder <= 5.2.7 - Missing Authorization5.3<= 5.2.75.2.8Patched before disclosure
16 Sep 2026User Registration & Membership - Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder <= 5.2.7 - Missing Authorization5.3<= 5.2.75.2.8Patched before disclosure
14 Sep 2026User Registration & Membership - Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder < 5.2.8 - Authenticated (Author+) Privilege Escalation6.3< 5.2.85.2.8Patched before disclosure
14 Sep 2026User Registration & Membership - Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder 4.4.6 - 5.2.7 - Authenticated (Subscriber+) Privilege Escalation6.34.4.6 to 5.2.75.2.8Patched before disclosure
13 Sep 2026User Registration & Membership - Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder 5.0 - 5.2.7 - Unauthenticated Information Exposure5.35.0 to 5.2.75.2.8Patched before disclosure
11 Sep 2026User Registration & Membership - Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder < 5.2.8 - Unauthenticated Open Redirect7.2< 5.2.85.2.8Patched before disclosure
28 Aug 2026User Registration & Membership - Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder < 5.2.5 - Authenticated (Subscriber+) Insecure Direct Object Reference4.3< 5.2.55.2.5Patched before disclosure
28 Aug 2026User Registration & Membership - Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder < 5.2.6 - Authenticated (Custom Role+) Privilege Escalation6.3< 5.2.65.2.6Patched before disclosure
14 Aug 2026User Registration & Membership - Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder <= 5.2.6 - Missing Authorization4.3<= 5.2.65.2.7Patched before disclosure
13 Aug 2026User Registration & Membership - Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder <= 5.2.6 - Missing Authorization5.3<= 5.2.65.2.7Patched before disclosure
27 Jul 2026User Registration & Membership <= 5.2.5 - Missing Authorization to Unauthenticated Account Creation While Registration Disabled5.3<= 5.2.55.2.6Patched before disclosure
26 Jun 2026User Registration & Membership <= 5.2.2 - Missing Authorization to Unauthenticated User Deletion via Stripe Handler5.3<= 5.2.25.2.3Patched before disclosure

Changelog mentions of security fixes: 5.2.0 (security, vulnerability); 5.2.3 (authorization); 5.2.5 (security, nonce); 5.2.8 (nonce); 5.3.0 (security).

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

67% of 3 support threads resolved in the last 2 months.

Momentum

50,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for User Registration & Membership
4 May 20262,457
11 May 20264,101
18 May 202625,962
25 May 202623,764
1 Jun 20265,863
8 Jun 20264,209
15 Jun 202620,171
22 Jun 202643,270
29 Jun 20266,826
6 Jul 202625,043
13 Jul 20265,637
20 Jul 202622,025
27 Jul 20266,622
3 Aug 20266,755
10 Aug 202626,502
17 Aug 20266,403
24 Aug 20264,512
31 Aug 20263,745
7 Sep 202621,498
14 Sep 202610,449
21 Sep 20265,680
28 Sep 20264,174
5 Oct 20263,699
12 Oct 202641,468
19 Oct 202610,225
26 Oct 202610,431
2 Nov 2026893

Weekly downloads over the last 4 weeks are 21% above the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

LoginWP (Formerly Peter's LoginScore 92 · 80,000+Simple User AvatarScore 92 · 20,000+Gravatar EnhancedScore 91 · 100,000+WP User AvatarsScore 91 · 20,000+One User AvatarScore 89 · 100,000+

Facts

Version5.3.1
Authorwpeverest
Added6 Jul 2017
Last updated17 Oct 2026
Active installs50,000+
Requires WordPress5.5
Tested up to7.1.4
Requires PHP7.4
CategoryUser Management & Authentication > User Registration & Login
Tagsmembership, subscription, user profile, User Registration, content restriction

Other plugins by this author: Everest Forms - Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI, RestaurantPress, PDFDraft - Drag & Drop PDF Builder, PDF Viewer, Embed & Download PDF, Certificate & Invoice Designer, AI Chatbot, Assistant Generator, Custom Form Builder for Everest Forms, Online Restaurant Reservation, PDFDraft PDF Invoices for WooCommerce

Questions

Is User Registration & Membership still maintained?

Yes. Last release 17 Oct 2026, 53 releases in the last 24 months.

Who owns User Registration & Membership, and has it changed hands?

No change recorded. Main committer wpeverest since Jul 2017.

Was User Registration & Membership removed from wordpress.org?

No. Listed on wordpress.org as of 4 Nov 2026.

Is User Registration & Membership safe?

69 known vulnerabilities, all fixed (latest in 5.3.1). Not on the exploited list.

Is the latest User Registration & Membership update safe to install?

No ownership change before 5.3.1. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 4 Nov 2026.Report a data issue