UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP

81 Quality Score

Active Installs

19/30

Popularity scores 64/30 based on roughly 20,000 active installs, which is a respectable but not market-leading footprint compared to Ultimate Member's 200,000 or Ninja Forms' 600,000.

Update Freshness

25/25

Maintenance scores a perfect 100/25, with the plugin last updated in late June 2026, indicating the developer is actively shipping changes.

User Rating

14/15

User ratings land at 94/15 from 183 reviews, which is an excellent score even though the review pool is relatively small.

Support Health

8/15

Support health scores 50/15 because only 3 support threads exist in total, giving a thin dataset; the 100% resolution rate is positive but not yet a meaningful sample.

WP Compatibility

15/15

Compatibility scores a full 100/15, as the plugin is tested with WordPress 7.0 and requires WordPress 6.1 or higher.

Scores higher than 83% of indexed plugins

About

Light weight Front-end login form, User Registration, User Profile and Members Directory plugin.

Active Installs 20k+

Rating ★★★★½ 4.7/5

Last Updated 2026-09-16 3:29pm GMT

Requires WordPress 6.1+

Tested Up To 7.1.1

Security History

22 known vulnerabilities, all patched

1 Critical 2 High 18 Medium 1 Low

Most recent: September 10, 2026

View details ▸

UsersWP <= 1.2.70 - Authenticated (Subscriber+) Arbitrary File Deletion High

September 10, 2026 Patched in ["1.2.71"] CVE-2026-19991

UsersWP <= 1.2.69 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Badge Widget Variable Substitution Medium

August 6, 2026 Patched in ["1.2.70"] CVE-2026-18501

UsersWP <= 1.2.65 - Authenticated (Subscriber+) Arbitrary File Deletion via File Upload Field High

July 9, 2026 Patched in ["1.2.66"] CVE-2026-13492

UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP < 1.2.67 - Two-Factor Authentication Bypass Medium

July 8, 2026 Patched in ["1.2.67"] CVE-2026-13690

UsersWP <= 1.2.63 - Insecure Direct Object Reference to Authenticated (Editor+) Arbitrary User Avatar/Banner Reset via 'user_id' Parameter Low

June 17, 2026 Patched in ["1.2.64"] CVE-2026-12102

UsersWP <= 1.2.58 - Authenticated (Subscriber+) Server-Side Request Forgery via 'uwp_crop' Parameter Medium

April 10, 2026 Patched in ["1.2.59"] CVE-2026-4979

UsersWP <= 1.2.58 - Authenticated (Subscriber+) Restricted Usermeta Modification via 'htmlvar' Parameter Medium

April 9, 2026 Patched in ["1.2.59"] CVE-2026-4977

UsersWP <= 1.2.60 - Authenticated (Subscriber+) Stored Cross-Site Scripting via User Badge Link Substitution Medium

April 8, 2026 Patched in ["1.2.61"] CVE-2026-5742

UsersWP <= 1.2.53 - Cross-Site Request Forgery Medium

January 28, 2026 Patched in ["1.2.54"] CVE-2026-25015

UsersWP <= 1.2.48 - Cross-Site Request Forgery Medium

December 15, 2025 Patched in ["1.2.49"] CVE-2025-67593

UsersWP <= 1.2.47 - Missing Authorization Medium

November 25, 2025 Patched in ["1.2.48"] CVE-2025-66072

UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP <= 1.2.44 - Authenticated (Subscriber+) SQL Injection Medium

September 5, 2025 Patched in ["1.2.45"] CVE-2025-10003

UsersWP <= 1.2.42 - Authenticated (Contributor+) Stored Cross-Site Scripting Medium

August 27, 2025 Patched in ["1.2.43"] CVE-2025-9344

UsersWP <= 1.2.15 - Missing Authorization Medium

August 16, 2024 Patched in ["1.2.16"] CVE-2024-43277

UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP <= 1.2.11 - Unauthenticated Information Disclosure via Unprotected Directories Medium

July 13, 2024 Patched in ["1.2.12"] CVE-2024-6477

UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WordPress <= 1.2.10 - Unauthenticated SQL Injection via 'uwp_sort_by' Critical

June 28, 2024 Patched in ["1.2.11"] CVE-2024-6265

UsersWP <= 1.2.4 - Cross-Site Request Forgery Medium

April 10, 2024 Patched in ["1.2.6"] CVE-2024-31936

UsersWP <= 1.2.6 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode Medium

March 14, 2024 Patched in ["1.2.7"] CVE-2024-2423

UsersWP <= 1.2.3.22 - Cross-Site Request Forgery Medium

November 1, 2023 Patched in ["1.2.3.23"]

UsersWP <= 1.2.3.9 - Authenticated (Administrator+) CSV Injection Medium

December 21, 2022 Patched in ["1.2.3.10"] CVE-2022-47442

UsersWP <= 1.2.3 - Subscriber+ User Avatar Override Medium

February 14, 2022 Patched in ["1.2.3.1"] CVE-2022-0442

UsersWP – User Registration & User Profile <= 1.2.2.28 - Reflected Cross-Site Scripting Medium

September 6, 2021 Patched in ["1.2.2.29"]

What It Does

UsersWP adds front-end login, registration, and profile pages to WordPress, replacing or supplementing the default wp-admin and wp-login.php screens. It also generates a searchable members directory where site visitors can browse other registered users. The plugin keeps the feature set lean, focusing on the core user-management flows rather than memberships or paywalls.

Who It's For

Small to mid-sized community sites, membership directories, or any WordPress site that wants visitors to register, log in, and edit profiles without ever seeing the WordPress dashboard. It is a good fit for site owners who want a straightforward front-end user experience without the overhead of a full membership platform.

Who Should Skip It

If you need paid memberships, subscription billing, content restriction, or role-based access control, UsersWP will leave you installing and configuring several add-ons, and a purpose-built plugin like Ultimate Member or User Registration would be a better starting point. Sites that are happy with the standard wp-login.php screen and do not need a public members directory also do not need this plugin.

The Bottom Line

UsersWP is a clean, well-maintained front-end user plugin that does the basics well and earns a solid 80.86/100 from PluginCheck. Its main limitation is depth: if you need anything beyond login, registration, profiles, and a directory, expect to bolt on extensions or migrate to a heavier plugin like Ultimate Member.

Related Plugins

User Profile Builder 90/100

Pick User Profile Builder if you want a more polished form builder and built-in user role editor out of the box, with 50,000 installs and a 90.14 score.

Ultimate Member 90/100

Pick Ultimate Member if you need a mature ecosystem with add-ons for content restriction, private messaging, and social features, backed by 200,000 installs and a 89.74 score.

User Registration & Membership 89/100

Pick User Registration if free or paid memberships, subscriptions, and content restriction are on your roadmap, since it bakes those features in rather than relying on add-ons.

Ninja Forms 87/100

Pick Ninja Forms only if your priority is a general drag-and-drop form builder and you are willing to assemble user-registration behaviour via extensions, rather than getting a dedicated user plugin.

Custom Login Page Customizer 83/100

Pick ColorLib Login Customizer if your only real need is branding the default login page and you do not actually need front-end registration or a members directory.