WP User Manager – User Profile Builder & Membership

80 Quality Score

Active Installs

18/30

With 10,000 active installs it sits in the mid-tier of the membership category, well behind Ultimate Member's 200,000 but on par with Paid Membership Subscriptions.

Update Freshness

25/25

A last-update date of May 2026 shows active development and quick turnaround on patches, which is why this scored a perfect 100.

User Rating

14/15

A 94 out of 100 from 349 reviewers indicates consistently positive feedback, with few users reporting deal-breaking issues.

Support Health

8/15

Only one support thread has ever been opened and it was resolved, which is a thin dataset but at least shows no public complaints piling up.

WP Compatibility

15/15

It is tested up to WordPress 7.0, works back to WordPress 4.9, and requires PHP 7.4, giving it top marks for modern environment support.

Scores higher than 75% of indexed plugins

About

The most customizable profiles & community builder WordPress plugin with front-end login, registration, profile customization and content restriction.

Active Installs 10k+

Rating ★★★★½ 4.7/5

Last Updated 2026-09-20 10:26pm GMT

Requires WordPress 4.9+

Tested Up To 7.1.1

Requires PHP 7.4+

Security History

11 known vulnerabilities, all patched

4 High 7 Medium

Most recent: September 22, 2026

View details ▸

WP User Manager – User Profile Builder & Membership <= 2.9.19 - Missing Authorization Medium

September 22, 2026 Patched in ["2.9.20"] CVE-2026-94079

WP User Manager <= 2.9.18 - Missing Authorization to Authenticated (Subscriber+) Stripe Account Hijack via Stripe Connect Callback Medium

September 21, 2026 Patched in ["2.9.19"] CVE-2026-18345

WP User Manager <= 2.9.17 - Unauthenticated Path Traversal to Local File Inclusion via 'tab' Query Parameter High

June 5, 2026 Patched in ["2.9.18"] CVE-2026-9290

WP User Manager – User Profile Builder & Membership <= 2.9.16 - Authenticated (Subscriber+) Arbitrary File Deletion High

June 5, 2026 Patched in ["2.9.17"] CVE-2026-49766

WP User Manager <= 2.9.12 - Authenticated (Subscriber+) Arbitrary File Deletion via 'current_user_avatar' Parameter Medium

December 11, 2025 Patched in ["2.9.13"] CVE-2025-13320

User Manager <= 2.9.12 - Authenticated (Subscriber+) PHP Object Injection High

May 19, 2025 Patched in ["2.9.13"] CVE-2025-60245

WP User Manager – User Profile Builder & Membership <= 2.9.11 - Missing Authorization to Carbon Fields Custom Sidebar Addition/Removal Medium

November 22, 2024 Patched in ["2.9.12"] CVE-2024-10216

WP User Manager – User Profile Builder & Membership <= 2.9.11 - Missing Authorization to Authenticated (Subscriber+) User Meta Key Enumeration Medium

November 22, 2024 Patched in ["2.9.12"] CVE-2024-10537

WP User Manager <= 2.9.10 - Cross-Site Request Forgery Medium

August 16, 2024 Patched in ["2.9.11"] CVE-2024-43336

WP User Manager <= 2.6.2 - Arbitrary User Password Reset High

September 22, 2021 Patched in ["2.6.3"] CVE-2021-24655

User Registration < 2.0.2 - Authenticated Stored Cross-Site Scripting Medium

September 6, 2021 Patched in ["2.0.2"] CVE-2021-24654

What It Does

WP User Manager lets you add front-end user registration, login, and profile editing to WordPress, replacing the default wp-login.php screens with branded pages. It also includes member directories, customizable profile fields, and content restriction rules so you can gate posts or sections by user role or membership status. The result is a community or membership site without needing a heavy LMS or forum plugin bolted on.

Who It's For

This plugin fits small-to-medium sites that need a tidy membership layer: coaches selling gated content, clubs running member directories, course creators pairing it with a separate LMS, or publishers running subscription-only sections. It is especially useful if you want full control over profile fields and prefer a developer-friendly codebase over a drag-and-drop visual builder.

Who Should Skip It

If you only need a simple contact form or a one-off login redirect, this is overkill and you should use a lighter plugin like Profile Builder or even a free redirect plugin. Large multi-vendor marketplaces or sites processing real subscription billing will also outgrow it quickly and should look at Paid Membership Subscriptions or WooCommerce Memberships instead.

The Bottom Line

WP User Manager earns a 79.51 overall score driven by excellent maintenance and ratings, dragged down mainly by modest install numbers. It is a solid, actively maintained choice for community and membership sites that prioritize clean profiles over flashy builders. Just make sure billing is not your main need, since that is where competitors do more out of the box.

Related Plugins

User Profile Builder 90/100

Pick this if you want the same front-end profile features but with a more visual form builder and a larger 50,000-install user base.

Ultimate Member 90/100

Choose this if you need a bigger ecosystem of add-ons and do not mind the heavier interface, since it has 20 times the installs.

User Registration & Membership 89/100

Pick this if you want built-in Stripe and PayPal subscriptions without configuring a separate payments plugin.

Paid Membership Subscriptions 86/100

Choose this when recurring billing and dripped content are the primary requirement, since it handles payments more natively.

Simple Membership 83/100

Pick this if you need lightweight free content restriction without all the profile customization overhead.