Skip to content
PluginCanary

User Frontend - Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission

by weDevs · 20,000+ active installs · Checked 3 Nov 2026
Healthy17 Warnings

Healthy: vulnerability published 30 Oct 2026, fixed in 4.3.14.

81/ 100 Canary Score
Sub-scores for User Frontend - Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission
Ownership100
Maintenance100
Security60
Support70
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 30 Oct 2026, fixed in 4.3.14. Update to version 4.3.14 or later.30 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 30 Oct 2026, fixed in 4.3.14. Update to version 4.3.14 or later.30 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 29 Oct 2026, fixed in 4.3.14. Update to version 4.3.14 or later.29 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 29 Oct 2026, fixed in 4.3.14. Update to version 4.3.14 or later.29 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 28 Oct 2026, fixed in 4.3.14. Update to version 4.3.14 or later.28 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 9 Oct 2026, fixed in 4.3.13. Update to version 4.3.13 or later.9 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 28 Sep 2026, fixed in 4.3.12. Update to version 4.3.12 or later.28 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 28 Sep 2026, fixed in 4.3.12. Update to version 4.3.12 or later.28 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 28 Sep 2026, fixed in 4.3.12. Update to version 4.3.12 or later.28 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 23 Sep 2026, fixed in 4.3.12. Update to version 4.3.12 or later.23 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 23 Sep 2026, fixed in 4.3.12. Update to version 4.3.12 or later.23 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 23 Sep 2026, fixed in 4.3.12. Update to version 4.3.12 or later.23 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 1 Sep 2026, fixed in 4.3.11. Update to version 4.3.11 or later.1 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 31 Aug 2026, fixed in 4.3.11. Update to version 4.3.11 or later.31 Aug 2026Evidence
  • WarningSEC-1Vulnerability published 31 Aug 2026, fixed in 4.3.11. Update to version 4.3.11 or later.31 Aug 2026Evidence
  • WarningSEC-1Vulnerability published 28 Aug 2026, fixed in 4.3.10. Update to version 4.3.10 or later.28 Aug 2026Evidence
  • WarningSEC-1Vulnerability published 28 Aug 2026, fixed in 4.3.10. Update to version 4.3.10 or later.28 Aug 2026Evidence
  • InfoSEC-332 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
tareq198810 Jan 2011 to 12 Sep 2024, 179 commits
rabbii16 Aug 2018 to 17 Oct 2019, 30 commits
wedevs15 Oct 2024 to 28 Oct 2026, 47 commits
sapayth21 May 2025 to 17 Apr 2026, 16 commits
arifulhoque714 May 2026 to 12 Aug 2026, 16 commits

New committer arifulhoque7 made a first commit on 14 May 2026.

Maintenance

Last release
7 days ago
Releases, 24 months
44
Tested up to
7.1 current
Requires PHP
7.4 supported 8.2+
Releases per quarter for User Frontend - Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission
Q1 20247
Q2 20241
Q3 20244
Q4 20243
Q1 20253
Q2 20255
Q3 20256
Q4 20257
Q1 20267
Q2 20268
Q3 20264
Q4 20262

Last release 28 Oct 2026. Tested with WordPress 7.1 (current).

Support

67% of 3 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
30 Oct 2026User Frontend <= 4.3.13 - Reflected Cross-Site Scripting via 'field_attr[required]' Parameter6.1<= 4.3.134.3.140
30 Oct 2026User Frontend <= 4.3.13 - Authenticated (Subscriber+) Privilege Escalation via post_content Parameter8.8<= 4.3.134.3.140
29 Oct 2026User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission <= 4.3.13 - Missing Authorization4.3<= 4.3.134.3.140
29 Oct 2026User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission <= 4.3.13 - Missing Authorization5.3<= 4.3.134.3.140
28 Oct 2026User Frontend <= 4.3.13 - Reflected Cross-Site Scripting6.1<= 4.3.134.3.140
9 Oct 2026User Frontend <= 4.3.12 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'wpuf_payment_method' Parameter6.4<= 4.3.124.3.130
28 Sep 2026User Frontend 3.5.29 - 4.3.11 - Unauthenticated Privilege Escalation7.33.5.29 to 4.3.114.3.120
28 Sep 2026User Frontend 2.5.8 - 4.3.11 - Missing Authorization5.32.5.8 to 4.3.114.3.120
28 Sep 2026User Frontend <= 4.3.11 - Authenticated (Subscriber+) Subscription-Gated Post Creation4.3<= 4.3.114.3.120
23 Sep 2026User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission <= 4.3.11 - Authenticated (Subscriber+) Arbitrary File Deletion8.1<= 4.3.114.3.120
23 Sep 2026User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission <= 4.3.11 - Authenticated (Subscriber+) Subscription Gate Bypass on Post Submission6.3<= 4.3.114.3.120
23 Sep 2026User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission <= 4.3.11 - Unauthenticated Unauthorized User Registration5.3<= 4.3.114.3.120
1 Sep 2026User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission <= 4.3.10 - Authenticated (Subscriber+) PHP Object Injection7.5<= 4.3.104.3.110
31 Aug 2026User Frontend <= 4.3.10 - Missing Authorization to Unauthenticated Post Creation5.3<= 4.3.104.3.110
31 Aug 2026User Frontend <= 4.3.10 - Authenticated (Subscriber+) PHP Object Injection7.5<= 4.3.104.3.110
28 Aug 2026User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission < 4.3.10 - Authenticated (Editor+) PHP Object Injection6.6< 4.3.104.3.100
28 Aug 2026User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission < 4.3.10 - Unauthenticated Information Exposure5.3< 4.3.104.3.100
8 Jul 2026User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration <= 4.3.7 - Insecure Direct Object Reference to Unauthenticated Arbitrary Post Modification via 'wpuf_files_data' Parameter5.3<= 4.3.74.3.80
8 Jul 2026User Frontend <= 4.3.7 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion via 'attach_id' Parameter5.3<= 4.3.74.3.80
7 Jul 2026User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration <= 4.3.1 - Unauthenticated Insecure Direct Object Reference to Arbitrary User Subscription Overwrite5.3<= 4.3.14.3.20
6 Jul 2026User Frontend: AI Powered Frontend Post Submission, User Directory, User Profile, Membership & User Registration < 4.3.8 - Missing Authorization to Unauthenticated Media Attachment Deletion5.3< 4.3.84.3.80
29 Jun 2026User Frontend: AI Powered Frontend Posting, User Directory, Profile Builder, Membership & User Registration <= 4.3.7 - Missing Authorization5.3<= 4.3.74.3.80
8 Jun 2026User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration <= 4.3.2 - Missing Authorization to Authenticated (Subscriber+) Subscription Pack Cancellation4.3<= 4.3.24.3.30
7 May 2026User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration <= 4.3.1 - Authenticated (Subscriber+) PHP Object Injection8.8<= 4.3.14.3.20
27 Apr 2026User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration <= 4.3.1 - Missing Authorization5.3<= 4.3.14.3.20

Source: Wordfence Intelligence.

Reputation

Average rating per quarter for User Frontend - Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission
Q4 20243.0
Q1 20254.0
Q2 20254.5
Q3 20253.0
Q1 20263.0
Q2 20265.0
Q3 20263.7
Q4 20264.5

Average rating rose from 3.0 to 4.5 between Q4 2024 and Q4 2026.

Rating distribution
5 star382
4 star32
3 star15
2 star17
1 star91
Latest low reviews

Momentum

20,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for User Frontend - Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission
4 May 20261,157
11 May 20268,710
18 May 20268,753
25 May 20262,300
1 Jun 20268,137
8 Jun 20263,204
15 Jun 20267,547
22 Jun 20262,362
29 Jun 20262,900
6 Jul 20262,102
13 Jul 20261,235
20 Jul 20268,280
27 Jul 20261,861
3 Aug 20268,542
10 Aug 20262,246
17 Aug 20261,521
24 Aug 20269,080
31 Aug 20262,649
7 Sep 20261,622
14 Sep 20262,112
21 Sep 202610,517
28 Sep 20268,521
5 Oct 20264,003
12 Oct 20262,333
19 Oct 20262,249
26 Oct 202610,119
2 Nov 2026637

Weekly downloads over the last 4 weeks are 17% below the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

Simple Membership After Login RedirectionScore 91 · 10,000+My Private Site - Make Your Whole Site Private, Force Login & Block Registration SpamScore 91 · 10,000+Simple Membership Form ShortcodeScore 91 · 2,000+SureMembers - Membership & Content Restriction PluginScore 91 · 2,000+Groups 404 RedirectScore 91 · 1,000+

Facts

Version4.3.14
AuthorweDevs
Added10 Jan 2011
Last updated28 Oct 2026
Active installs20,000+
Requires WordPress5.0
Tested up to7.1.4
Requires PHP7.4
CategoryUser Management & Authentication > User Registration & Login
Tagsmembership, user profile, frontend post, user directory, User Registration

Other plugins by this author: Conversion Tracking for WooCommerce, Subscribe2 - Form, Email Subscribers & Newsletters, ReCaptcha Integration for WordPress, Texty - SMS Notification for WordPress, WooCommerce, Dokan and more, ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce, weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot, Project Manager - AI Powered Project Management, Task Management, Kanban Board & Time Tracker, wePOS - Point Of Sale (POS) for WooCommerce & Dokan, PDF invoice for WP ERP, StoreGrowth - Upsell, BOGO, Quick View, Direct Checkout & Side Cart for WooCommerce, Dokan Invoice, FlyCRM - CRM with Sales Pipeline and Deal Management for WooCommerce

Questions

Is User Frontend - Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission still maintained?

User Frontend - Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission was last updated on 28 Oct 2026. Its Canary status is Healthy.

Is User Frontend - Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission safe?

User Frontend - Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission has no open unpatched vulnerabilities on record. 32 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns User Frontend - Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission?

The wordpress.org author is weDevs. Recent committers: wedevs, arifulhoque7, sapayth, tareq1988, rabbii. New committer arifulhoque7 made a first commit on 14 May 2026.

What can I use instead of User Frontend - Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission?

Plugins in the same category with a higher Canary Score: Simple Membership After Login Redirection, My Private Site - Make Your Whole Site Private, Force Login & Block Registration Spam, Simple Membership Form Shortcode, SureMembers - Membership & Content Restriction Plugin, Groups 404 Redirect.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue