Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin
| 开发者 |
ultimatemember
champsupertramp nsinelnikov |
|---|---|
| 更新时间 | 2026年9月30日 05:58 |
| PHP版本: | 6.2 及以上 |
| WordPress版本: | 7.1 |
| 版权: | GPLv3 |
| 版权网址: | 版权信息 |
标签
下载
1.0.81
1.0.82
1.0.83
1.0.84
1.0.85
1.0.86
1.0.87
1.0.88
1.0.89
1.0.90
1.3.79
2.0.11
2.0.23
2.0.34
2.0.37
2.0.38
2.0.46
2.0.47
2.0.48
2.0.49
2.0.5
2.0.50
2.0.51
2.0.52
2.0.54
2.0.56
2.0.9
2.1.1
2.1.10
2.1.11
2.1.12
2.1.15
2.1.17-rc.1
2.1.2
2.1.5
2.1.6
2.1.7
2.1.8
2.1.9
2.1.18-alpha
2.1.14
1.0.20
1.0.34
1.0.35
1.0.36
1.0.37
1.0.41
1.0.42
1.0.44
1.0.45
1.0.46
1.0.48
1.0.49
1.0.50
1.0.54
1.0.55
1.0.56
1.0.59
1.0.60
1.0.65
1.0.66
1.0.67
1.0.68
1.0.69
1.0.70
1.0.72
1.2.96
1.2.98
1.2.991
1.2.993
1.2.994
1.2.995
1.3.0
1.3.12
1.3.16
1.3.17
1.3.18
1.3.21
1.3.23
1.3.24
1.3.25
1.3.26
1.3.31
1.3.34
1.3.36
1.3.37
1.3.38
1.3.39
1.3.44
1.3.51
1.3.52
1.3.53
1.3.54
1.3.58
1.3.77
1.3.78
1.3.80
1.3.81
1.3.82
1.3.84
1.3.85
1.3.87
1.3.89
2.0.12
2.0.13
2.0.14
2.0.15
2.0.16
2.0.17
2.0.18
2.0.19
2.0.21
2.0.22
2.0.24
2.0.25
2.0.26
2.0.27
2.0.28
2.0.29
2.0.30
2.0.31
2.0.32
2.0.33
2.1.17-alpha
2.0.55
2.1.16
2.1.17
2.1.22-alpha
1.1.5
1.3.69
1.3.49
1.0.0
1.0.29
1.0.32
1.0.33
1.0.47
1.0.71
1.0.79
1.2.95
1.3.65
2.0.45
2.0.53
1.0.93
1.0.96
1.1.2
1.1.3
1.2.1
2.13.0
2.13.1
2.14.0
2.5.1
2.6.2
2.8.6
1.0.80
1.2.4
1.3.83
1.0.28
1.0.40
1.0.92
1.0.95
1.1.1
1.2.7
1.3.35
1.3.47
1.3.59
2.1.18
2.1.19
2.2.3
2.3.1
2.5.0
2.6.3
2.6.4
2.5.4
2.6.5
2.6.6
1.0.75
1.0.94
1.2.8
1.3.15
1.3.29
2.4.1
2.6.11
2.7.0
2.8.0
1.0.10
1.3.32
2.0.40
2.10.5
2.6.7
2.6.9
1.1.4
1.2.92
1.2.996
1.2.997
2.0.39
2.0.42
2.1.0
2.3.0
2.4.0
2.8.2
2.8.3
1.3.14
2.0.10
2.1.4
2.8.1
1.0.24
1.0.64
1.2.2
1.2.3
1.2.9
1.3.1
1.3.13
1.3.30
2.0.41
2.1.20
2.2.2
2.2.5
2.5.2
2.8.4
2.8.5
1.3.88
2.0.43
2.6.10
2.8.7
2.8.9
2.9.0
1.0.57
1.0.58
1.1.0
1.3.19
1.3.60
1.3.61
1.3.64
1.3.66
1.3.67
1.3.71
1.3.72
1.3.73
2.2.1
2.8.8
2.9.1
1.0.76
1.0.77
1.1.6
1.2.97
1.3.48
1.3.68
1.3.70
2.10.0
2.10.1
2.4.2
2.6.0
2.9.2
1.0.25
1.0.26
2.11.1
2.2.0
2.3.2
2.6.8
1.0.15
1.0.19
1.0.21
1.0.22
1.0.23
1.0.27
1.0.39
1.0.43
1.0.52
1.0.53
1.0.61
1.0.74
1.2.5
1.2.6
1.2.94
1.2.99
1.3.11
1.3.20
1.3.22
1.3.27
1.0.17
1.0.63
1.0.73
1.2
1.2.91
1.3.28
1.3.33
1.3.63
2.0.35
2.0.36
2.1.21
2.1.3
2.10.2
2.10.3
1.0.30
1.0.78
1.2.93
1.3.50
2.0.4
2.10.4
2.10.6
2.11.0
2.11.2
2.11.3
2.11.4
2.12.0
2.2.4
2.5.3
2.6.1
1.0.16
1.0.18
1.0.31
1.0.38
1.0.51
1.0.62
1.0.91
2.0.44
2.1.13
2.12.1
详情介绍:
User Profile & Membership Plugin for WordPress
The ultimate user profile & membership plugin for WordPress. The plugin makes it a breeze for users to sign-up and become members of your website. The plugin allows you to add beautiful user profiles to your site and is designed for creating advanced online communities and membership sites. Lightweight and highly extendible, Ultimate Member will enable you to create almost any type of site where users can join and become members with absolute ease.
该插件的功能包括：
- 前端用户个人资料
- 前端用户注册
- 前端用户登录
- 自定义表单字段
- 表单字段的条件逻辑
- 拖放表单生成器
- 用户帐户页面
- 自定义用户角色
- 会员目录
- 用户电子邮件
- 内容限制
- 有条件的导航菜单
- Show author posts & comments on user profiles
- Developer friendly with dozens of actions and filters
- Zapier - Allow to integrate the Zapier popular apps with Ultimate Member
- Stripe - Sell paid memberships to access your website via Stripe subscriptions
- User Notes - Allow users to create public and private notes from their profile
- Profile Tabs - Allow to add the custom tabs to profiles
- User Locations - Allow to display users on a map on the member directory page and allow users to add their location via their profile
- Unsplash - Allow users to select a profile cover photo from Unsplash from their profile
- User Bookmarks - Allow users to bookmark content from your website
- User Photos - Allow users to upload photos to their profile
- Groups - Allow users to create and join groups around shared topics, interests etc.
- Private Content - Display private content to logged in users that only they can access
- User Tags - Lets you add a user tag system to your website
- Social Activity - Let users create public wall posts & see the activity of other users
- WooCommerce - Allow you to integrate WooCommerce with Ultimate Member
- Private Messages - Add a private messaging system to your site & allow users to message each other
- Followers - Allow users to follow each other on your site and protect their profile information
- Real-time Notifications - Add a notifications system to your site so users can receive real-time notifications
- Social Login - Let users register & login to your site via Facebook, Twitter, G+, LinkedIn, Instagram and Vkontakte (VK.com)
- bbPress - With the bbPress extension you can beautifully integrate Ultimate Member with bbPress
- MailChimp - Allow users to subscribe to your MailChimp lists when they signup on your site and sync user meta to MailChimp
- User Reviews - Allow users to rate & review each other using a 5 star rate/review system
- Verified Users - Add a user verification system to your site so user accounts can be verified
- myCRED - With the myCRED extension you can integrate Ultimate Member with the popular myCRED points management plugin
- Notices - Alert users to important information using conditional notices
- Profile Completeness - Encourage or force users to complete their profiles with the profile completeness extension
- Friends - Allows users to become friends by sending & accepting/rejecting friend requests
- JobsBoardWP - This free extension integrates Ultimate Member with the job board plugin JobBoardWP.
- ForumWP - This free extension integrates Ultimate Member with the forum plugin ForumWP.
- Terms & Conditions - Add a terms and condition checkbox to your registration forms & require users to agree to your T&Cs before registering on your site.
- Google reCAPTCHA - Stop bots on your registration & login forms with Google reCAPTCHA
- Online Users - Display what users are online with this extension
安装:
- 激活插件。
- That's it. Go to Ultimate Member > Settings to customize plugin options
- For more details, please visit the official Documentation page.
屏幕截图:
常见问题:
我需要知道任何编码才能使用此插件吗？
不，我们构建的 Ultimate Member 非常易于使用，不需要您手动构建短代码或具有任何编码知识。
终极会员支持移动响应吗？
是。 Ultimate Member 旨在很好地适应任何屏幕分辨率。 它包括针对手机，平板电脑和台式机的特定设计。
终极会员是否兼容多站点？
是。 Ultimate Member 在单站点和多站点 WordPress 安装上都可以很好地工作。
插件可以使用任何 WordPress 主题吗？
Yes. Ultimate Member will work with any properly coded theme. However, some themes may cause conflicts with the plugin. If you find a styling issue with your theme please create a post in the community forum.
插件可以与缓存插件一起使用吗？
The plugin works with popular caching plugins by automatically excluding Ultimate Member pages from being cached. This ensures other visitors to a page will not see the private information of another user. However, if you add features of Ultimate Member to other pages you have to exclude those pages from being cached through your cache plugin settings panel.
Does Ultimate Member restrict access to wp-login.php when the plugin is active?
The plugin does not restrict access to the wp-login.php page when active, so that our plugin does not interfere with the existing functionality of a website or other plugins that may utilise the default login page. If you wish to restrict access to the wp-login.php page you can use a plugin such as WPS Hide Login or another plugin that removes the ability to login via wp-login.php.
Are Ultimate Member Login/Registration pages required?
No, you do not need to use our plugin’s login or registration pages and can use another plugin or the default WordPress methods for user registration and login.
Are additional PHP modules necessary for the plugin to work correctly?
No specific extensions are needed. But we highly recommended keep active these PHP modules: mbstring, json, dom, exif, gd, fileinfo, curl, iconv. wp-admin > Tools > Site Health page has a summary about your installation and required modules. All major extensions are listed here.
更新日志:
Important:
IMPORTANT: PLEASE UPDATE THE PLUGIN TO AT LEAST VERSION 2.6.7 IMMEDIATELY. VERSION 2.6.7 PATCHES SECURITY PRIVILEGE ESCALATION VULNERABILITY. PLEASE SEE THIS ARTICLE FOR MORE INFORMATION
2.14.0 2026-09-29
Enhancements
- Added:
$form_idparameter to the action hooksum_before_form,um_before_{$mode}_fields,um_main_{$mode}_fields,um_after_form_fields,um_after_{$mode}_fieldsandum_after_form. - Added: Action hook
um_before_render_dynamic_modal_contentfor 3rd-party integration when the admin popup is opened. - Added: Filter hooks
um_email_validation_real_error_codesandum_email_validation_error_messagefor 3rd-party integration to change or make visible the real error message for email fields validation. - Added: Threads field support in the UM Forms and Social Icons meta-row.
- Fixed: Security issue related to an unauthenticated PHP Object Injection vulnerability. (Reported by Ananda Dhakal (Patchstack)). Added
um_maybe_unserialize()function. - Fixed: Security issue related to administrator Stored SQL Injection via Directory Search-Field Identifiers. (Reported by Ananda Dhakal (Patchstack)). Added sanitizing for the searching fields in the member directory.
- Fixed: Security issue related to an unauthenticated Improper Enforcement of Behavioral Workflow vulnerability. (Reported by Ananda Dhakal (Patchstack)). Added unique nonce fields and attributes for requests.
- Fixed: CVE-2026-96270 security issue. Added sanitizing for the form_id attribute during the Ultimate Member forms submission. (Reported by Wordfence).
- Fixed: CVE-2026-93428 security issue. Fixed fields privacy when displaying the User Profile fields. (Reported by Wordfence).
- Fixed: Security issue related to Privilege Escalation. Fixed user account submission and nonce security. Reset the user if it hasn't the ability to download the file. (Reported by Intrudify (Patchstack)).
- Fixed:
is_url()validation for the social links fields. - Fixed:
unique_emailvalidation. Parse primary and secondary email fields to make the email unique between them.
- profile/comments.php
- profile/posts.php
- login.php
- members.php
- profile.php
- register.php
- Deprecated:
UM()->check_ajax_nonceandUM()->admin()->check_ajax_nonce()functions. Use WordPress nativewp_verify_nonce(),check_admin_referer()andcheck_ajax_referer()instead with unique nonce field values. Left them now for backward compatibility. - Deprecated: Using
um_admin_scripts.nonceandum_scripts.noncelocalized data in UM scripts. Left them still localized for backward compatibility. - Deprecated: JS common action for
'.um-ajax-action'class. It's not used anymore in UM core and extensions and can be removed the same as AJAX handler forum_muted_action. - Deprecated: Action hook
um_run_ajax_function__{$hook}used in theum_muted_actionhandler. - Marked as deprecate soon:
in_groupattribute for the fields in the UM Forms builder.
- Added: Fallback for
wp-cli/wp-config-transformerlibrary if the wp-config.php file isn't writable. - Added: Filter hook
um_members_directory_filter_text3rd parameter$is_defaultto check if it's admin filtering or frontend query. - Added: 'Administrative capabilities ban' option enabled by default after the first installation.
- Optimized: Slow SQL query for batch empty account status check.
- Optimized: Redundant SQL calls when editing the Profile page with callback dropdowns. Cached usermeta existence checks per user and key during a single load (Reported by @MissVeronica, author @faisalahammad).
- Fixed: Security issue related to an unauthenticated visitor can store JavaScript that runs in an administrator's session, through their own profile name. (Reported by Karthik Ramakrishnan and WPScan team). Fixed
um_convert_tags()function and applied the escapers throughout the placeholder replacement. - Fixed: Using LIKE compare for the text-type filters with custom usermeta table (Reported by @MissVeronica, author @faisalahammad).
- Fixed: "Can user edit this field?" field setting displaying only for the User Profile form fields.
- Fixed: Getting the pages list in the wp-admin UM > Settings > General > Pages section.
- Fixed: Displaying the field-type time on the User Profile page.
- Fixed: Using
illegal_user_loginsfor the current admin user with the username specified in the illegal user logins list.
- Deprecated: Filter hook
um_members_directory_filter_text_meta_valueis fully deprecated, replacement isn't required for the text-type filter field.
- Added: Using
illegal_user_loginsfilter to sanitize theuser_loginfield value during registration or upgrade. - Added: Using
wp-cli/wp-config-transformerlibrary to set Ultimate Member > API keys settings constants in wp-config.php instead of storing them in DB. - Added: New user-capabilities functions
UM()->common()->users()->can_view_user(),UM()->common()->users()->get_privacy_setting(),UM()->common()->users()->is_user_profile_private(),UM()->common()->users()->get_restricted_privacy_notice(),UM()->common()->users()->can_view_private_user_profile(),UM()->common()->users()->can_view_user_profile(). The future replacement for theum_can_view_profile()helper with different cases to check. - Updated: Version of the WordPress native excluded functions to avoid the using them in the callbacks.
- Fixed:
WP_Filesystem()initialization optimization. InitWP_Filesystem()only once when it's necessary. - Fixed: Redirect on non-main queries (breaks Spectra and block themes). Added conditional check for the main query (based on @faisalahammad suggestions).
- Fixed: Registration form infinite loop - gdpr-register.php calls
the_contentrecursively causing PHP fatal error. Excluded predefined UM pages and pages with [ultimatemember] shortcode from the list, render empty content for such pages if they are already selected to avoid PHP error (based on @faisalahammad suggestions). - Fixed: Causes site-wide
rest_cookie_invalid_nonceon all authenticated REST requests. Refactored admin notice handling to enhance security and flexibility. Removed using localizedum_admin_scripts.nonceglobally on wp-admin. It's localized only on UM wp-admin pages. (based on @michaeldavisdcpersonal report and @faisalahammad suggestions). - Fixed: Security issue when an unauthenticated visitor can read the content of comments awaiting moderation. (Reported by Alessandro Greco (Aleff) and Giovambattista Ianni, University of Calabria (UNICAL)).
- Fixed: Security issue related to an unauthenticated privilege escalation through the profile form role field. (Reported by Jakub Herman).
- Fixed: Security issue, CVE ID: CVE-2026-18547. Used 'user_input' allowed a tag list to sanitize HTML-enabled textarea fields. Deprecated Pickadate.JS and Pickatime.JS libraries for User Forms fields.
- Fixed: Member Directory type-button styles.
- Fixed: Added fallback for the date and time fields to show date and time using the WordPress native format.
- gdpr-register.php
- profile.php
- Deprecated: Pickadate.JS and Pickatime.JS libraries for User Forms fields. Used HTML native
<input type="date" />and<input type="time" />instead.