MemberGlut – Role & User Management Security & Risk Analysis

wordpress.org/plugins/memberglut

A powerful membership plugin with custom roles, capabilities, and access control. Create unlimited member roles and manage site access with ease.

0 active installs v1.1.0 PHP 7.4+ WP 5.0+ Updated Aug 8, 2025
access-controlcontent-protectionmember-managementmembershipuser-roles
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is MemberGlut – Role & User Management Safe to Use in 2026?

Generally Safe

Score 100/100

MemberGlut – Role & User Management has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 7mo ago
Risk Assessment

The memberglut plugin version 1.1.0 exhibits a generally strong security posture based on this static analysis. The plugin has a good number of entry points, including AJAX handlers and shortcodes, and importantly, all of these appear to have authorization checks in place, indicating a commitment to secure development practices in this area. The code also demonstrates a high percentage of properly escaped output and a good number of nonce and capability checks, further reinforcing its security. The absence of any recorded vulnerabilities, past or present, is a significant positive indicator.

Key Concerns

  • SQL queries not using prepared statements
  • Unsanitized paths found in taint analysis
Vulnerabilities
None known

MemberGlut – Role & User Management Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 17, 2026

MemberGlut – Role & User Management Code Analysis

Dangerous Functions
0
Raw SQL Queries
8
7 prepared
Unescaped Output
24
219 escaped
Nonce Checks
18
Capability Checks
19
File Operations
0
External Requests
0
Bundled Libraries
0

SQL Query Safety

47% prepared15 total queries

Output Escaping

90% escaped243 total outputs
Data Flows
2 unsanitized

Data Flow Analysis

10 flows2 with unsanitized paths
check_whole_site_access (includes\class-memberglut-access-control.php:86)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

MemberGlut – Role & User Management Attack Surface

Entry Points21
Unprotected0

AJAX Handlers 16

authwp_ajax_memberglut_set_content_restrictionincludes\class-memberglut-access-control.php:62
authwp_ajax_memberglut_bulk_set_restrictionsincludes\class-memberglut-access-control.php:63
authwp_ajax_memberglut_get_role_dataincludes\class-memberglut-admin.php:50
authwp_ajax_memberglut_add_capabilityincludes\class-memberglut-capabilities.php:46
authwp_ajax_memberglut_remove_capabilityincludes\class-memberglut-capabilities.php:47
authwp_ajax_memberglut_get_role_capabilitiesincludes\class-memberglut-capabilities.php:48
authwp_ajax_memberglut_get_pro_infoincludes\class-memberglut-extensions.php:48
authwp_ajax_memberglut_activate_featureincludes\class-memberglut-extensions.php:49
noprivwp_ajax_memberglut_ajax_loginincludes\class-memberglut-forms.php:53
noprivwp_ajax_memberglut_ajax_registerincludes\class-memberglut-forms.php:54
authwp_ajax_memberglut_create_roleincludes\class-memberglut-roles.php:31
authwp_ajax_memberglut_update_roleincludes\class-memberglut-roles.php:32
authwp_ajax_memberglut_delete_roleincludes\class-memberglut-roles.php:33
authwp_ajax_memberglut_assign_roleincludes\class-memberglut-roles.php:34
authwp_ajax_memberglut_check_accessincludes\class-memberglut.php:46
noprivwp_ajax_memberglut_check_accessincludes\class-memberglut.php:47

Shortcodes 5

[memberglut_pro_analytics] examples\pro-extension-example.php:144
[memberglut_login_form] includes\class-memberglut-forms.php:40
[memberglut_register_form] includes\class-memberglut-forms.php:41
[memberglut_content] includes\class-memberglut.php:258
[memberglut_member_info] includes\class-memberglut.php:260
WordPress Hooks 59
actionmemberglut_before_role_creationexamples\pro-extension-example.php:15
filtermemberglut_restriction_messageexamples\pro-extension-example.php:27
actionmemberglut_initexamples\pro-extension-example.php:50
actionmemberglut_after_content_restrictedexamples\pro-extension-example.php:78
filtermemberglut_is_pro_activeexamples\pro-extension-example.php:95
filtermemberglut_available_capabilitiesexamples\pro-extension-example.php:100
actionmemberglut_after_role_createdexamples\pro-extension-example.php:115
actionwp_headexamples\pro-extension-example.php:126
actionmemberglut_register_pro_shortcodesexamples\pro-extension-example.php:143
actiontemplate_redirectincludes\class-memberglut-access-control.php:41
actiontemplate_redirectincludes\class-memberglut-access-control.php:44
filterthe_contentincludes\class-memberglut-access-control.php:45
filterget_the_excerptincludes\class-memberglut-access-control.php:46
filterthe_titleincludes\class-memberglut-access-control.php:47
actionpre_get_postsincludes\class-memberglut-access-control.php:50
filterwp_nav_menu_objectsincludes\class-memberglut-access-control.php:53
filterwidget_display_callbackincludes\class-memberglut-access-control.php:56
filtercomments_openincludes\class-memberglut-access-control.php:59
filterrest_prepare_postincludes\class-memberglut-access-control.php:66
filterrest_prepare_pageincludes\class-memberglut-access-control.php:67
filterposts_whereincludes\class-memberglut-access-control.php:70
actionpre_get_postsincludes\class-memberglut-access-control.php:73
filterthe_content_feedincludes\class-memberglut-access-control.php:76
filterthe_excerpt_rssincludes\class-memberglut-access-control.php:77
actionwp_loginincludes\class-memberglut-access-control.php:80
actionadmin_menuincludes\class-memberglut-admin.php:31
actionadmin_enqueue_scriptsincludes\class-memberglut-admin.php:34
actionadd_meta_boxesincludes\class-memberglut-admin.php:37
actionsave_postincludes\class-memberglut-admin.php:38
actionadmin_initincludes\class-memberglut-admin.php:41
actionadmin_noticesincludes\class-memberglut-admin.php:47
actioninitincludes\class-memberglut-capabilities.php:40
actionwp_loadedincludes\class-memberglut-capabilities.php:43
filteruser_has_capincludes\class-memberglut-capabilities.php:51
actioninitincludes\class-memberglut-extensions.php:44
actionadmin_initincludes\class-memberglut-extensions.php:45
actionmemberglut_before_content_restrictionincludes\class-memberglut-extensions.php:52
actionmemberglut_after_content_restrictionincludes\class-memberglut-extensions.php:53
actionmemberglut_before_role_creationincludes\class-memberglut-extensions.php:54
actionmemberglut_after_role_creationincludes\class-memberglut-extensions.php:55
actiontemplate_redirectincludes\class-memberglut-forms.php:44
actionwp_enqueue_scriptsincludes\class-memberglut-forms.php:47
actioninitincludes\class-memberglut-forms.php:50
actionlogin_initincludes\class-memberglut-forms.php:558
actionafter_setup_themeincludes\class-memberglut-forms.php:562
filterlogin_urlincludes\class-memberglut-forms.php:566
filterlogout_urlincludes\class-memberglut-forms.php:569
filterlostpassword_urlincludes\class-memberglut-forms.php:572
filterregister_urlincludes\class-memberglut-forms.php:573
actionshow_user_profileincludes\class-memberglut-roles.php:37
actionedit_user_profileincludes\class-memberglut-roles.php:38
actionpersonal_options_updateincludes\class-memberglut-roles.php:39
actionedit_user_profile_updateincludes\class-memberglut-roles.php:40
actionuser_registerincludes\class-memberglut.php:36
filterlogin_redirectincludes\class-memberglut.php:39
filterlogout_redirectincludes\class-memberglut.php:40
actioninitincludes\class-memberglut.php:43
actionwp_enqueue_scriptsincludes\class-memberglut.php:50
actionplugins_loadedmemberglut.php:55
Maintenance & Trust

MemberGlut – Role & User Management Maintenance & Trust

Maintenance Signals

WordPress version tested6.8.5
Last updatedAug 8, 2025
PHP min version7.4
Downloads1K

Community Trust

Rating0/100
Number of ratings0
Active installs0
Developer Profile

MemberGlut – Role & User Management Developer Profile

AppGlut

8 plugins · 110 total installs

99
trust score
Avg Security Score
98/100
Avg Patch Time
1 days
View full developer profile
Detection Fingerprints

How We Detect MemberGlut – Role & User Management

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/memberglut/assets/css/memberglut-admin.css/wp-content/plugins/memberglut/assets/js/memberglut-admin.js/wp-content/plugins/memberglut/assets/css/memberglut-frontend.css/wp-content/plugins/memberglut/assets/js/memberglut-frontend.js
Script Paths
/wp-content/plugins/memberglut/assets/js/memberglut-admin.js/wp-content/plugins/memberglut/assets/js/memberglut-frontend.js
Version Parameters
memberglut/assets/css/memberglut-admin.css?ver=memberglut/assets/js/memberglut-admin.js?ver=memberglut/assets/css/memberglut-frontend.css?ver=memberglut/assets/js/memberglut-frontend.js?ver=

HTML / DOM Fingerprints

CSS Classes
memberglut-admin-wrapmemberglut-frontend-contentmemberglut-restricted-content
HTML Comments
<!-- MemberGlut: Start of restricted content --><!-- MemberGlut: End of restricted content -->
Data Attributes
data-memberglut-role-iddata-memberglut-restriction-type
JS Globals
MemberGlutAdminmemberGlutFrontend
REST Endpoints
/wp-json/memberglut/v1/roles/wp-json/memberglut/v1/users
Shortcode Output
[memberglut_user_profile][memberglut_login_form][memberglut_register_form][memberglut_role_based_content]
FAQ

Frequently Asked Questions about MemberGlut – Role & User Management