Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin
| 开发者 |
ultimatemember
champsupertramp nsinelnikov |
|---|---|
| 更新时间 | 2026年8月25日 00:36 |
| PHP版本: | 6.2 及以上 |
| WordPress版本: | 7.1 |
| 版权: | GPLv3 |
| 版权网址: | 版权信息 |
标签
下载
1.0.79
1.0.81
1.0.82
1.0.83
1.0.84
1.0.85
1.0.86
1.0.87
1.0.88
1.0.89
1.0.90
1.3.65
1.3.79
2.0.11
2.0.23
2.0.34
2.0.37
2.0.38
2.0.46
2.0.47
2.0.48
2.0.49
2.0.5
2.0.50
2.0.51
2.0.52
2.0.53
2.0.54
2.0.56
2.0.9
2.1.1
2.1.10
2.1.11
2.1.12
2.1.15
2.1.17-rc.1
2.1.2
2.1.5
2.1.6
2.1.7
2.1.8
2.1.9
1.0.71
2.1.18-alpha
2.1.14
1.0.33
1.0.34
1.0.35
1.0.36
1.0.37
1.0.41
1.0.42
1.0.44
1.0.45
1.0.46
1.0.47
1.0.48
1.0.49
1.0.50
1.0.54
1.0.55
1.0.56
1.0.59
1.0.60
1.0.65
1.0.66
1.0.67
1.0.68
1.0.69
1.0.70
1.0.72
1.2.95
1.2.96
1.2.98
1.2.991
1.2.993
1.2.994
1.2.995
1.3.0
1.3.12
1.3.16
1.3.17
1.3.18
1.3.21
1.3.23
1.3.24
1.3.25
1.3.26
1.3.31
1.3.34
1.3.36
1.3.37
1.3.38
1.3.39
1.3.44
1.3.51
1.3.52
1.3.53
1.3.54
1.3.58
1.3.77
1.3.78
1.3.80
1.3.81
1.3.82
1.3.84
1.3.85
1.3.87
1.3.89
2.0.12
2.0.13
2.0.14
2.0.15
2.0.16
2.0.17
2.0.18
2.0.19
2.0.21
2.0.22
2.0.24
2.0.25
2.0.26
2.0.27
2.0.28
2.0.29
2.0.30
2.0.31
2.0.32
2.0.33
2.1.17-alpha
2.0.45
2.0.55
2.1.16
2.1.17
2.1.22-alpha
1.1.5
1.3.69
2.6.2
2.8.6
1.0.32
1.0.29
1.3.49
1.0.93
1.0.96
1.1.2
1.1.3
1.2.1
1.0.80
1.2.4
1.3.83
1.0.28
1.0.40
1.0.92
1.0.95
1.1.1
1.2.7
1.3.35
1.3.47
1.3.59
2.1.18
2.1.19
2.2.3
2.3.1
2.5.0
2.6.3
2.6.4
2.5.1
2.5.4
2.6.5
2.6.6
1.0.75
1.0.94
1.2.8
1.3.15
1.3.29
2.4.1
2.6.11
2.7.0
2.8.0
1.0.10
1.3.32
2.0.40
2.10.5
2.6.7
2.6.9
1.1.4
1.2.92
1.2.996
1.2.997
2.0.39
2.0.42
2.1.0
2.3.0
2.4.0
2.8.2
2.8.3
1.3.14
2.0.10
2.1.4
2.8.1
1.0.24
1.0.64
1.2.2
1.2.3
1.2.9
1.3.1
1.3.13
1.3.30
2.0.41
2.1.20
2.2.2
2.2.5
2.5.2
2.8.4
2.8.5
1.3.88
2.0.43
2.6.10
2.8.7
2.8.9
2.9.0
1.0.57
1.0.58
1.1.0
1.3.19
1.3.60
1.3.61
1.3.64
1.3.66
1.3.67
1.3.71
1.3.72
1.3.73
2.2.1
2.8.8
2.9.1
1.0.76
1.0.77
1.1.6
1.2.97
1.3.48
1.3.68
1.3.70
2.10.0
2.10.1
2.4.2
2.6.0
2.9.2
1.0.25
1.0.26
2.11.1
2.2.0
2.3.2
2.6.8
1.0.0
1.0.15
1.0.19
1.0.21
1.0.22
1.0.23
1.0.27
1.0.39
1.0.43
1.0.52
1.0.53
1.0.61
1.0.74
1.2.5
1.2.6
1.2.94
1.2.99
1.3.11
1.3.20
1.3.22
1.3.27
1.0.17
1.0.63
1.0.73
1.2
1.2.91
1.3.28
1.3.33
1.3.63
2.0.35
2.0.36
2.1.21
2.1.3
2.10.2
2.10.3
1.0.20
1.0.30
1.0.78
1.2.93
1.3.50
2.0.4
2.10.4
2.10.6
2.11.0
2.11.2
2.11.3
2.11.4
2.12.0
2.2.4
2.5.3
2.6.1
1.0.16
1.0.18
1.0.31
1.0.38
1.0.51
1.0.62
1.0.91
2.0.44
2.1.13
2.12.1
2.13.0
详情介绍:
User Profile & Membership Plugin for WordPress
The ultimate user profile & membership plugin for WordPress. The plugin makes it a breeze for users to sign-up and become members of your website. The plugin allows you to add beautiful user profiles to your site and is designed for creating advanced online communities and membership sites. Lightweight and highly extendible, Ultimate Member will enable you to create almost any type of site where users can join and become members with absolute ease.
Features of the plugin include:
- Front-end user profiles
- Front-end user registration
- Front-end user login
- Custom form fields
- Conditional logic for form fields
- Drag and drop form builder
- User account page
- Custom user roles
- Member directories
- User emails
- Content restriction
- Conditional nav menus
- Show author posts & comments on user profiles
- Developer friendly with dozens of actions and filters
- Zapier - Allow to integrate the Zapier popular apps with Ultimate Member
- Stripe - Sell paid memberships to access your website via Stripe subscriptions
- User Notes - Allow users to create public and private notes from their profile
- Profile Tabs - Allow to add the custom tabs to profiles
- User Locations - Allow to display users on a map on the member directory page and allow users to add their location via their profile
- Unsplash - Allow users to select a profile cover photo from Unsplash from their profile
- User Bookmarks - Allow users to bookmark content from your website
- User Photos - Allow users to upload photos to their profile
- Groups - Allow users to create and join groups around shared topics, interests etc.
- Private Content - Display private content to logged in users that only they can access
- User Tags - Lets you add a user tag system to your website
- Social Activity - Let users create public wall posts & see the activity of other users
- WooCommerce - Allow you to integrate WooCommerce with Ultimate Member
- Private Messages - Add a private messaging system to your site & allow users to message each other
- Followers - Allow users to follow each other on your site and protect their profile information
- Real-time Notifications - Add a notifications system to your site so users can receive real-time notifications
- Social Login - Let users register & login to your site via Facebook, Twitter, G+, LinkedIn, Instagram and Vkontakte (VK.com)
- bbPress - With the bbPress extension you can beautifully integrate Ultimate Member with bbPress
- MailChimp - Allow users to subscribe to your MailChimp lists when they signup on your site and sync user meta to MailChimp
- User Reviews - Allow users to rate & review each other using a 5 star rate/review system
- Verified Users - Add a user verification system to your site so user accounts can be verified
- myCRED - With the myCRED extension you can integrate Ultimate Member with the popular myCRED points management plugin
- Notices - Alert users to important information using conditional notices
- Profile Completeness - Encourage or force users to complete their profiles with the profile completeness extension
- Friends - Allows users to become friends by sending & accepting/rejecting friend requests
- JobsBoardWP - This free extension integrates Ultimate Member with the job board plugin JobBoardWP.
- ForumWP - This free extension integrates Ultimate Member with the forum plugin ForumWP.
- Terms & Conditions - Add a terms and condition checkbox to your registration forms & require users to agree to your T&Cs before registering on your site.
- Google reCAPTCHA - Stop bots on your registration & login forms with Google reCAPTCHA
- Online Users - Display what users are online with this extension
安装:
- Activate the plugin
- That's it. Go to Ultimate Member > Settings to customize plugin options
- For more details, please visit the official Documentation page.
屏幕截图:
常见问题:
Do I need to know any coding to use this plugin?
No, we have built Ultimate Member to be extremely easy to use and does not require you to manually build shortcodes or have any coding knowledge.
Is Ultimate Member mobile responsive?
Yes. Ultimate Member is designed to adapt nicely to any screen resolution. It includes specific designs for phones, tablets and desktops.
Is Ultimate Member multi-site compatible?
Yes. Ultimate Member works great on both single site and multi-site WordPress installs.
Does the plugin work with any WordPress theme?
Yes. Ultimate Member will work with any properly coded theme. However, some themes may cause conflicts with the plugin. If you find a styling issue with your theme please create a post in the community forum.
Does the plugin work with caching plugins?
The plugin works with popular caching plugins by automatically excluding Ultimate Member pages from being cached. This ensures other visitors to a page will not see the private information of another user. However, if you add features of Ultimate Member to other pages you have to exclude those pages from being cached through your cache plugin settings panel.
Does Ultimate Member restrict access to wp-login.php when the plugin is active?
The plugin does not restrict access to the wp-login.php page when active, so that our plugin does not interfere with the existing functionality of a website or other plugins that may utilise the default login page. If you wish to restrict access to the wp-login.php page you can use a plugin such as WPS Hide Login or another plugin that removes the ability to login via wp-login.php.
Are Ultimate Member Login/Registration pages required?
No, you do not need to use our plugin’s login or registration pages and can use another plugin or the default WordPress methods for user registration and login.
Are additional PHP modules necessary for the plugin to work correctly?
No specific extensions are needed. But we highly recommended keep active these PHP modules: mbstring, json, dom, exif, gd, fileinfo, curl, iconv. wp-admin > Tools > Site Health page has a summary about your installation and required modules. All major extensions are listed here.
更新日志:
Important:
IMPORTANT: PLEASE UPDATE THE PLUGIN TO AT LEAST VERSION 2.6.7 IMMEDIATELY. VERSION 2.6.7 PATCHES SECURITY PRIVILEGE ESCALATION VULNERABILITY. PLEASE SEE THIS ARTICLE FOR MORE INFORMATION
2.13.0 2026-08-24
Enhancements
- Added: Using
illegal_user_loginsfilter to sanitize theuser_loginfield value during registration or upgrade. - Added: Using
wp-cli/wp-config-transformerlibrary to set Ultimate Member > API keys settings constants in wp-config.php instead of storing them in DB. - Added: New user-capabilities functions
UM()->common()->users()->can_view_user(),UM()->common()->users()->get_privacy_setting(),UM()->common()->users()->is_user_profile_private(),UM()->common()->users()->get_restricted_privacy_notice(),UM()->common()->users()->can_view_private_user_profile(),UM()->common()->users()->can_view_user_profile(). The future replacement for theum_can_view_profile()helper with different cases to check. - Updated: Version of the WordPress native excluded functions to avoid the using them in the callbacks.
- Fixed:
WP_Filesystem()initialization optimization. InitWP_Filesystem()only once when it's necessary. - Fixed: Redirect on non-main queries (breaks Spectra and block themes). Added conditional check for the main query (based on @faisalahammad suggestions).
- Fixed: Registration form infinite loop - gdpr-register.php calls
the_contentrecursively causing PHP fatal error. Excluded predefined UM pages and pages with [ultimatemember] shortcode from the list, render empty content for such pages if they are already selected to avoid PHP error (based on @faisalahammad suggestions). - Fixed: Causes site-wide
rest_cookie_invalid_nonceon all authenticated REST requests. Refactored admin notice handling to enhance security and flexibility. Removed using localizedum_admin_scripts.nonceglobally on wp-admin. It's localized only on UM wp-admin pages. (based on @michaeldavisdcpersonal report and @faisalahammad suggestions). - Fixed: Security issue when an unauthenticated visitor can read the content of comments awaiting moderation. (Reported by Alessandro Greco (Aleff) and Giovambattista Ianni, University of Calabria (UNICAL)).
- Fixed: Security issue related to an unauthenticated privilege escalation through the profile form role field. (Reported by Jakub Herman).
- Fixed: Security issue, CVE ID: CVE-2026-18547. Used 'user_input' allowed a tag list to sanitize HTML-enabled textarea fields. Deprecated Pickadate.JS and Pickatime.JS libraries for User Forms fields.
- Fixed: Member Directory type-button styles.
- Fixed: Added fallback for the date and time fields to show date and time using the WordPress native format.
- gdpr-register.php
- profile.php
- Deprecated: Pickadate.JS and Pickatime.JS libraries for User Forms fields. Used HTML native
<input type="date" />and<input type="time" />instead.
- Added: Ability to handle local website URLs resources (image, audio, video from Media Library, 3rd-party local URLs embed to iframe) in the oEmbed-type field value.
- Added: The API key field type for the settings fields.
- Fixed: Security issue, CVE ID: CVE-2026-4248. Extern blacklist filter for convert_tag replace placeholders function. (Additional keys were researched by Hrro. This info added for the Wordfence team if they need this information).
- Fixed: Security issue when accidentally
manage_optionslevel user role can be listed in the User Role dropdown on the registration/edit profile forms. (Researched by Haitam Lazaar). - Fixed: Set size proportions during responsive handlers.
- Fixed: mousewheel action during member directory loading and overlay is displayed.
- Fixed: WP_Styles notice due to not loaded
um_modalstyles. - Fixed: oEmbed-type field styles.
- Fixed: Security issue, CVE ID: CVE-2026-7761.
** Restricted
get_directory_by_hash()function to only match posts with post_type='um_directory' and publish post status. ** Used0 === strpos()instead ofstrstr()for getting proper post_data. ** Added condition for getting only allowed fields in tagline_fields and reveal_fields tobuild_user_card_data(). - Fixed: Security issue, CVE ID: CVE-2026-8489.
** Used WordPress native
wp_kses()escaper for displaying user_description field. Used WordPress nativemake_clickable()function to make raw links clickable. - Fixed: Security issue, CVE ID: CVE-2026-xxxx. Make the role and status visible for the user who can edit these users in the request. Reported by Ben Tamam.
- Fixed: Remove UM option function when the option value equals "0".
- Temporary deprecated: UM REST API. Legacy feature that has to be refactored. Will be refactored and re-released soon.