Àpèjúwe
User Profile & Membership Plugin for WordPress
The ultimate user profile & membership plugin for WordPress. The plugin makes it a breeze for users to sign-up and become members of your website. The plugin allows you to add beautiful user profiles to your site and is designed for creating advanced online communities and membership sites. Lightweight and highly extendible, Ultimate Member will enable you to create almost any type of site where users can join and become members with absolute ease.
Features of the plugin include:
- Front-end user profiles
- Front-end user registration
- Front-end user login
- Custom form fields
- Conditional logic for form fields
- Drag and drop form builder
- User account page
- Custom user roles
- Member directories
- User emails
- Content restriction
- Conditional nav menus
- Show author posts & comments on user profiles
- Developer friendly with dozens of actions and filters
Read about all of the pluginÌtumọ̀ Yorùbá: ’s features at Ultimate Member
Paid Extensions
Ultimate Member has a range of extensions that allow you to extend the power of the plugin. You can purchase all of these extensions at a significant discount with one of our paid plans or you can purchase extensions individually.
- Zapier Ìtumọ̀ Yorùbá: – Allow to integrate the Zapier popular apps with Ultimate Member
- Stripe Ìtumọ̀ Yorùbá: – Sell paid memberships to access your website via Stripe subscriptions
- User Notes Ìtumọ̀ Yorùbá: – Allow users to create public and private notes from their profile
- Profile Tabs Ìtumọ̀ Yorùbá: – Allow to add the custom tabs to profiles
- User Locations Ìtumọ̀ Yorùbá: – Allow to display users on a map on the member directory page and allow users to add their location via their profile
- Unsplash Ìtumọ̀ Yorùbá: – Allow users to select a profile cover photo from Unsplash from their profile
- User Bookmarks Ìtumọ̀ Yorùbá: – Allow users to bookmark content from your website
- User Photos Ìtumọ̀ Yorùbá: – Allow users to upload photos to their profile
- Groups Ìtumọ̀ Yorùbá: – Allow users to create and join groups around shared topics, interests etc.
- Private Content Ìtumọ̀ Yorùbá: – Display private content to logged in users that only they can access
- User Tags Ìtumọ̀ Yorùbá: – Lets you add a user tag system to your website
- Social Activity Ìtumọ̀ Yorùbá: – Let users create public wall posts & see the activity of other users
- WooCommerce Ìtumọ̀ Yorùbá: – Allow you to integrate WooCommerce with Ultimate Member
- Private Messages Ìtumọ̀ Yorùbá: – Add a private messaging system to your site & allow users to message each other
- Followers Ìtumọ̀ Yorùbá: – Allow users to follow each other on your site and protect their profile information
- Real-time Notifications Ìtumọ̀ Yorùbá: – Add a notifications system to your site so users can receive real-time notifications
- Social Login Ìtumọ̀ Yorùbá: – Let users register & login to your site via Facebook, Twitter, G+, LinkedIn, Instagram and Vkontakte (VK.com)
- bbPress Ìtumọ̀ Yorùbá: – With the bbPress extension you can beautifully integrate Ultimate Member with bbPress
- MailChimp Ìtumọ̀ Yorùbá: – Allow users to subscribe to your MailChimp lists when they signup on your site and sync user meta to MailChimp
- User Reviews Ìtumọ̀ Yorùbá: – Allow users to rate & review each other using a 5 star rate/review system
- Verified Users Ìtumọ̀ Yorùbá: – Add a user verification system to your site so user accounts can be verified
- myCRED Ìtumọ̀ Yorùbá: – With the myCRED extension you can integrate Ultimate Member with the popular myCRED points management plugin
- Notices Ìtumọ̀ Yorùbá: – Alert users to important information using conditional notices
- Profile Completeness Ìtumọ̀ Yorùbá: – Encourage or force users to complete their profiles with the profile completeness extension
- Friends Ìtumọ̀ Yorùbá: – Allows users to become friends by sending & accepting/rejecting friend requests
Free Extensions
- JobsBoardWP Ìtumọ̀ Yorùbá: – This free extension integrates Ultimate Member with the job board plugin JobBoardWP.
- ForumWP Ìtumọ̀ Yorùbá: – This free extension integrates Ultimate Member with the forum plugin ForumWP.
- Terms & Conditions Ìtumọ̀ Yorùbá: – Add a terms and condition checkbox to your registration forms & require users to agree to your T&Cs before registering on your site.
- Google reCAPTCHA Ìtumọ̀ Yorùbá: – Stop bots on your registration & login forms with Google reCAPTCHA
- Online Users Ìtumọ̀ Yorùbá: – Display what users are online with this extension
Theme
Our official theme is purpose built for websites that have logged in and out users. The theme has deep integration with Ultimate Member plugin and the extensions, different header designs for logged-in/out users and works alongside the Beaver Builder and Elementor page builders.
Our other plugins
In addition to Ultimate Member, we also have two other plugins: ForumWP and JobBoardWP.
ForumWP
ForumWP is a forum plugin which adds an online forum to your website, allowing users to create topics and write replies. Forums are a great way to build and grow an online community.
JobBoardWP
JobBoardWP is a job board plugin which adds a modern job board to your website. Display job listings and allow employers to submit and manage jobs all from the front-end.
Development * Translations
If youÌtumọ̀ Yorùbá: ’re a developer and would like to contribute to the source code of the plugin you can do so via our GitHub Repository.
Want to add a new language to Ultimate Member? Great! You can contribute via translate.wordpress.org.
If you are a developer and you need to know the list of UM Hooks, make this via our Hooks Documentation or Hooks Documentation v2.
If you are a developer and you need to know the structure of our code, make this via our Documentation API.
Documentation & Support
Got a problem or need help with Ultimate Member? Head over to our documentation and perform a search of the knowledge base. If you can’t find a solution to your issue then you can create a topic on the support forum.
Àwọn àwòrán ìbòjú
Àwọn ìdí
Plugin yìí pèsè 4 àwọn ìdí.
- Form Choose display form
- Member Directory Choose display directory
- Account Displaying the account page of the current user
- Password Reset Displaying the password reset form
Ìgbéwọlẹ̀
- Activate the plugin
- ThatÌtumọ̀ Yorùbá: ’s it. Go to Ultimate Member > Settings to customize plugin options
- For more details, please visit the official Documentation page.
FAQ
-
Do I need to know any coding to use this plugin?
-
No, we have built Ultimate Member to be extremely easy to use and does not require you to manually build shortcodes or have any coding knowledge.
-
Is Ultimate Member mobile responsive?
-
Yes. Ultimate Member is designed to adapt nicely to any screen resolution. It includes specific designs for phones, tablets and desktops.
-
Is Ultimate Member multi-site compatible?
-
Yes. Ultimate Member works great on both single site and multi-site WordPress installs.
-
Does the plugin work with any WordPress theme?
-
Yes. Ultimate Member will work with any properly coded theme. However, some themes may cause conflicts with the plugin. If you find a styling issue with your theme please create a post in the community forum.
-
Does the plugin work with caching plugins?
-
The plugin works with popular caching plugins by automatically excluding Ultimate Member pages from being cached. This ensures other visitors to a page will not see the private information of another user. However, if you add features of Ultimate Member to other pages you have to exclude those pages from being cached through your cache plugin settings panel.
-
Does Ultimate Member restrict access to wp-login.php when the plugin is active?
-
The plugin does not restrict access to the wp-login.php page when active, so that our plugin does not interfere with the existing functionality of a website or other plugins that may utilise the default login page. If you wish to restrict access to the wp-login.php page you can use a plugin such as WPS Hide Login or another plugin that removes the ability to login via wp-login.php.
-
Are Ultimate Member Login/Registration pages required?
-
No, you do not need to use our plugin’s login or registration pages and can use another plugin or the default WordPress methods for user registration and login.
-
Are additional PHP modules necessary for the plugin to work correctly?
-
No specific extensions are needed. But we highly recommended keep active these PHP modules:
mbstring,json,dom,exif,gd,fileinfo,curl,iconv. wp-admin > Tools > Site Health page has a summary about your installation and required modules. All major extensions are listed here.
Àwọn àgbéyẹ̀wò
Àwọn Olùkópa & Olùgbéejáde
“Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin” jẹ́ ètò ìṣàmúlò orísun ṣíṣí sílẹ̀. Àwọn ènìyàn wọ̀nyí ti ṣe ìkópa sí plugin yìí.
Àwọn Olùkópa
A ti túmọ̀ “Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin” sí àwọn èdè agbègbè 28. Ọpẹ́lọpẹ́ fún àwọn atúmọ̀ èdè fún àwọn ìkópa wọn.
Ṣe o nífẹ̀ẹ́ sí ìdàgbàsókè?
Ṣàwárí koodu, ṣàyẹ̀wò ibi ìpamọ́ SVN, tàbí ṣe àgbékalẹ̀ sí àkọsílẹ̀ ìdàgbàsókè nípasẹ̀ RSS.
Àkọsílẹ̀ àwọn àyípadà
Important:
IMPORTANT: PLEASE UPDATE THE PLUGIN TO AT LEAST VERSION 2.6.7 IMMEDIATELY. VERSION 2.6.7 PATCHES SECURITY PRIVILEGE ESCALATION VULNERABILITY. PLEASE SEE THIS ARTICLE FOR MORE INFORMATION
2.12.0 2026-06-12
Bugfixes
- Fixed: Security issue, CVE ID: CVE-2026-7761.
** Restrictedget_directory_by_hash()function to only match posts with post_type=Ìtumọ̀ Yorùbá: ’um_directory’ and publish post status.
** Used0 === strpos()instead ofstrstr()for getting proper post_data.
** Added condition for getting only allowed fields in tagline_fields and reveal_fields tobuild_user_card_data(). - Fixed: Security issue, CVE ID: CVE-2026-8489.
** Used WordPress nativewp_kses()escaper for displaying user_description field. Used WordPress nativemake_clickable()function to make raw links clickable. - Fixed: Security issue, CVE ID: CVE-2026-xxxx. Make the role and status visible for the user who can edit these users in the request. Reported by Ben Tamam.
- Fixed: Remove UM option function when the option value equals “0”.
Deprecated
- Temporary deprecated: UM REST API. Legacy feature that has to be refactored. Will be refactored and re-released soon.
2.11.4 2026-04-30
Enhancements
- Added: Checking format of the 3rd-party registered custom fields. Avoid PHP errors related to the wrong format or unexpected attributes.
Bugfixes
- Fixed: Added uploader fields
acceptargument for set allowed mime-types in the upload dialog window. Updated 3.1.2 version of this library hayageek/jquery-upload-file. DonÌtumọ̀ Yorùbá: ’t use 4.0.11 version for now. - Fixed: JS initialization of the empty uploader fields.
- Fixed: User Profile URLs in the User Profile form on the not-predefined pages placed via shortcode.
Note: Cached and optimized/minified assets(JS/CSS) must be flushed/re-generated after the upgrade
2.11.3 2026-03-26
Enhancements
- Added: UM > Settings > Advanced > APIs section for set available APIs settings.
- Added: GoogleMaps API setting when itÌtumọ̀ Yorùbá: ’s available.
- Added: Function
UM()->mail()->enabled_email()for checking if the email notification is enabled by the user. - Added:
colortype of sanitize settings saved in wp-admin. - Added: Checking array type of submission data when
urltype of sanitize is used in wp-admin. - Added: Enhance UM form sanitization filter with $form_data param. Added the $form_data parameter to the
um_sanitize_form_submissionfilter. - Added: Option for special character requirement for passwords. ItÌtumọ̀ Yorùbá: ’s situated in “General > Users > Password requires special character” (based on @faisalahammad suggestions)
- Added: Filter hook
um_before_account_delete_textfor changing before delete account text by 3rd-party plugins. End-customers can use it for translations. - Added: Filter hook
um_custom_{$message_key}(um_custom_pending_message,um_custom_checkmail_message) for changing after-registration message based on the user status by 3rd-party plugins. End-customers can use it for translations. - Added: Filter hook
um_convert_tags_blacklist_fieldsFor 3rd-party integrations to control the usermeta keys inum_convert_tags()function. - Added:
.um-display-noneCSS utility +umShow()/umHide()/umToggle()jQuery helpers. - Added:
um-noticeJS library.
Bugfixes
- Fixed: Security issue, CVE ID: CVE-2026-4248. Added blacklist filter for convert_tag replace placeholders function.
- Fixed: HTML sanitization logic for textarea-type custom fields with enabled HTML using setting.
- Fixed: WP editor formatting to prevent incorrect HTML entity conversion when using html-mode in the textarea-type custom fields. Applied and removed this filter dynamically to avoid interfering with other processes.
- Fixed: Dynamic string translation pattern and improve escaping. Replaced incorrect __(‘%s’) pattern. (@faisalahammad)
- Fixed:
wp_die()function triggering on the frontend actions. Added UM notice above the User Profile page. (based on @faisalahammad suggestions) - Fixed: Password reset key handling for multiple users. Previously, the static reset key caused issues when handling password resets for multiple users simultaneously.
- Fixed:
um_trim_string()function for using with UTF-8 symbols. - Fixed: PHP Notice: Function WP_Scripts::add was called incorrectly.
Templates Requiring Update
- members.php
- message.php
- restricted-blog.php
- restricted-taxonomy.php
Note: Cached and optimized/minified assets(JS/CSS) must be flushed/re-generated after the upgrade
2.11.2 2026-02-10
Enhancements
- Added: Server-side validation when the Search Form is submitted.
- Added: Action hook
um_approve_user_on_email_confirmationto natively approve the user after validating the email activation link. - Added: JS filter wp.hook
um_member_directory_popstate_ignoreto stop window.pushSate in the member directory for 3rd-party integrations.
Bugfixes
- Fixed: Security issue, CVE ID: CVE-2025-15064. Deprecated the ability to use HTML inside the user description. ItÌtumọ̀ Yorùbá: ’s still allowed to use only predefined ‘user_description’ tags in
wp_kses(). - Fixed: Security issue, CVE ID: CVE-2026-1404. Modified template item formatting to avoid using HTML characters in the filter values.
- Fixed: Profile photo dropdown menu position for screens smaller than 340px.
- Fixed: Display of the saved value of the “Privacy Options” > “Allowed roles” setting for the member directory.
- Fixed: Information in Site-Health about the registration formÌtumọ̀ Yorùbá: ’s
TemplateandRolesettings. - Fixed: Information in Site-Health about the login and profile formÌtumọ̀ Yorùbá: ’s
Templatesettings.
Templates Requiring Update
- members.php
- searchform.php
Note: Cached and optimized/minified assets(JS/CSS) must be flushed/re-generated after the upgrade
2.11.1 2025-12-16
Enhancements
- Added: ‘Privacy Options’ for Member Directory. ‘Who can see this member directory’ and ‘Allowed Roles’.
- Added: ‘Rate Limit’ setting for nopriv AJAX actions.
Bugfixes
- Fixed: Security issue CVE ID: CVE-2025-13220. Used
shortcode_atts()function to avoid using wrong attributes. - Fixed: Security issue CVE ID: CVE-2025-13217. Implementing proper input sanitization and escaping for iframe URLs in YouTube, Vimeo, and Google Maps embeds.
- Fixed: Security issue CVE ID: CVE-2025-14081. Filtering fields based on user permissions during Account form submission.
- Fixed: Security issue CVE ID: CVE-2025-12492. Added directory privacy settings and added rate limiting.
Templates Requiring Update
- members.php
- members-grid.php
- members-list.php
2.11.0 2025-12-02
Enhancements
- Added: Extra condition for checking the license activation requests.
- Added: 2nd
$argsattribute to the action hook ‘um_cover_area_content’. - Added:
$argsand$user_idattributes to the action hook ‘um_after_profile_header_name’. - Added: Class
um-profile-subnav-{$subnav_id}-linkto the sub navigation links in the User Profile page. - Tweak: Updated
Extensions_Updaterclass to use Action Scheduler in the upgrade process of the UM extensions.
Bugfixes
- Fixed: User profile links in the comments section on the frontend when the
$comment->user_idis empty. - Fixed: The
emotizefunction regexp for better emoji converting. - Fixed: The conflict between the image uploader and lazy-loading attribute added by 3rd-party plugins.
- Fixed: PHP warnings for roles without meta data.
- Fixed: Typo in labels.