UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP Security & Risk Analysis

wordpress.org/plugins/userswp

Light weight Front-end login form, User Registration, User Profile and Members Directory plugin.

20K active installs v1.2.57 PHP + WP 6.1+ Updated Mar 10, 2026
login-formregistrationregistration-formuser-profileuser-registration
89
A · Safe
CVEs total14
Unpatched0
Last CVEJan 28, 2026
Safety Verdict

Is UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP Safe to Use in 2026?

Generally Safe

Score 89/100

UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP has a strong security track record. Known vulnerabilities have been patched promptly.

14 known CVEsLast CVE: Jan 28, 2026Updated 24d ago
Risk Assessment

The "userswp" plugin, version 1.2.57, presents a mixed security posture. While it demonstrates strengths in SQL query preparation (83%) and output escaping (87%), and has a significant number of nonce checks (50) and capability checks (36), several concerning aspects remain.

The static analysis reveals a substantial attack surface with 24 AJAX handlers, a notable 14 of which lack authentication checks. This is a significant concern, as it opens the door for unauthorized actions. Furthermore, the presence of 18 taint flows with unsanitized paths, even though none are marked as critical or high severity in the taint analysis, indicates potential for vulnerabilities if specific inputs are not handled correctly. The use of the `unserialize` function, a known risky operation, also warrants caution.

The plugin's vulnerability history, with 14 previously discovered CVEs including one critical and thirteen medium, points to a recurring pattern of security weaknesses. The types of past vulnerabilities (CSRF, Missing Authorization, XSS, Sensitive Information Exposure, SQL Injection, etc.) are common and can be severe. Although there are currently no unpatched CVEs, the historical trend suggests a need for diligent code review and patching in future versions. The last recorded vulnerability date (2026-01-28) is in the future, which is unusual and may indicate an error in the data or a placeholder.

Key Concerns

  • 14 unprotected AJAX handlers
  • 18 taint flows with unsanitized paths
  • Use of dangerous function: unserialize
  • 1 critical CVE in history
  • 13 medium CVEs in history
  • Bundled library: Select2
Vulnerabilities
14

UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP Security Vulnerabilities

CVEs by Year

1 CVE in 2021
2021
2 CVEs in 2022
2022
1 CVE in 2023
2023
5 CVEs in 2024
2024
4 CVEs in 2025
2025
1 CVE in 2026
2026
Patched Has unpatched

Severity Breakdown

Critical
1
Medium
13

14 total CVEs

CVE-2026-25015medium · 4.3Cross-Site Request Forgery (CSRF)

UsersWP <= 1.2.53 - Cross-Site Request Forgery

Jan 28, 2026 Patched in 1.2.54 (6d)
CVE-2025-67593medium · 4.3Cross-Site Request Forgery (CSRF)

UsersWP <= 1.2.48 - Cross-Site Request Forgery

Dec 15, 2025 Patched in 1.2.49 (6d)
CVE-2025-66072medium · 5.3Missing Authorization

UsersWP <= 1.2.47 - Missing Authorization

Nov 25, 2025 Patched in 1.2.48 (7d)
CVE-2025-10003medium · 6.5Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP <= 1.2.44 - Authenticated (Subscriber+) SQL Injection

Sep 5, 2025 Patched in 1.2.45 (1d)
CVE-2025-9344medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

UsersWP <= 1.2.42 - Authenticated (Contributor+) Stored Cross-Site Scripting

Aug 27, 2025 Patched in 1.2.43 (1d)
CVE-2024-43277medium · 5.3Missing Authorization

UsersWP <= 1.2.15 - Missing Authorization

Aug 16, 2024 Patched in 1.2.16 (4d)
CVE-2024-6477medium · 5.3Exposure of Sensitive Information to an Unauthorized Actor

UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP <= 1.2.11 - Unauthenticated Information Disclosure via Unprotected Directories

Jul 13, 2024 Patched in 1.2.12 (28d)
CVE-2024-6265critical · 9.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WordPress <= 1.2.10 - Unauthenticated SQL Injection via 'uwp_sort_by'

Jun 28, 2024 Patched in 1.2.11 (1d)
CVE-2024-31936medium · 4.3Cross-Site Request Forgery (CSRF)

UsersWP <= 1.2.4 - Cross-Site Request Forgery

Apr 10, 2024 Patched in 1.2.6 (7d)
CVE-2024-2423medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

UsersWP <= 1.2.6 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode

Mar 14, 2024 Patched in 1.2.7 (79d)
WF-413d3ec0-8d04-4bef-9394-f666cfed733e-userswpmedium · 4.3Cross-Site Request Forgery (CSRF)

UsersWP <= 1.2.3.22 - Cross-Site Request Forgery

Nov 1, 2023 Patched in 1.2.3.23 (83d)
CVE-2022-47442medium · 5.5Improper Neutralization of Formula Elements in a CSV File

UsersWP <= 1.2.3.9 - Authenticated (Administrator+) CSV Injection

Dec 21, 2022 Patched in 1.2.3.10 (398d)
CVE-2022-0442medium · 4.3Authorization Bypass Through User-Controlled Key

UsersWP <= 1.2.3 - Subscriber+ User Avatar Override

Feb 14, 2022 Patched in 1.2.3.1 (708d)
WF-1522d23b-7655-4fde-a18b-b46c6625185f-userswpmedium · 6.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

UsersWP – User Registration & User Profile <= 1.2.2.28 - Reflected Cross-Site Scripting

Sep 6, 2021 Patched in 1.2.2.29 (869d)
Code Analysis
Analyzed Mar 16, 2026

UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP Code Analysis

Dangerous Functions
12
Raw SQL Queries
41
207 prepared
Unescaped Output
372
2503 escaped
Nonce Checks
50
Capability Checks
36
File Operations
12
External Requests
3
Bundled Libraries
1

Dangerous Functions Found

unserialize$extra = unserialize( $field_info->extra_fields );admin\settings\class-formbuilder.php:2088
unserialize$extra = unserialize( $field_info->extra_fields );admin\settings\class-formbuilder.php:2139
unserialize$extra = unserialize( $field_info->extra_fields );admin\settings\class-formbuilder.php:2173
unserialize$extra_fields = unserialize($field->extra_fields);includes\class-files.php:25
unserialize$extra_fields = unserialize( $field->extra_fields );includes\class-forms.php:2329
unserialize$multi_display = unserialize( $field->extra_fields );includes\class-forms.php:2747
unserialize$extra = unserialize( $field->extra_fields );includes\class-forms.php:4513
unserialize$extra = unserialize( $field->extra_fields );includes\class-forms.php:4602
unserialize$extra_fields = unserialize( $field->extra_fields );includes\class-profile.php:421
unserialize$email_extra = unserialize($email_field->extra_fields);includes\class-validation.php:59
unserialize$password_extra = unserialize($password_field->extra_fields);includes\class-validation.php:68
unserialize$extra_fields = unserialize($field->extra_fields);includes\class-validation.php:168

Bundled Libraries

Select2

SQL Query Safety

83% prepared248 total queries

Output Escaping

87% escaped2875 total outputs
Data Flows
18 unsanitized

Data Flow Analysis

25 flows18 with unsanitized paths
output (admin\settings\class-formbuilder.php:47)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface
14 unprotected

UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP Attack Surface

Entry Points24
Unprotected14

AJAX Handlers 24

authwp_ajax_uwp_ajax_create_registeradmin\class-admin.php:64
authwp_ajax_uwp_ajax_update_registeradmin\class-admin.php:65
authwp_ajax_uwp_ajax_remove_user_typeadmin\class-admin.php:66
authwp_ajax_uwp_ajax_reorder_user_typesadmin\class-admin.php:67
authwp_ajax_uwp_ajax_profile_tabs_actionadmin\settings\class-uwp-settings-profile-tabs.php:33
authwp_ajax_uwp_ajax_user_sorting_actionadmin\settings\class-uwp-settings-user-sorting.php:31
authwp_ajax_uwp_ajax_export_usersincludes\class-import-export.php:44
authwp_ajax_uwp_ajax_import_usersincludes\class-import-export.php:45
authwp_ajax_uwp_ie_upload_fileincludes\class-import-export.php:46
noprivwp_ajax_uwp_ie_upload_fileincludes\class-import-export.php:47
noprivwp_ajax_uwp_ajax_login_formincludes\class-userswp.php:560
noprivwp_ajax_uwp_ajax_loginincludes\class-userswp.php:561
noprivwp_ajax_uwp_ajax_login_process_2faincludes\class-userswp.php:562
noprivwp_ajax_uwp_ajax_register_formincludes\class-userswp.php:565
noprivwp_ajax_uwp_ajax_registerincludes\class-userswp.php:566
noprivwp_ajax_uwp_ajax_forgot_password_formincludes\class-userswp.php:569
noprivwp_ajax_uwp_ajax_forgot_passwordincludes\class-userswp.php:570
authwp_ajax_uwp_upload_file_removeincludes\class-userswp.php:577
authwp_ajax_uwp_avatar_banner_uploadincludes\class-userswp.php:663
authwp_ajax_uwp_ajax_image_crop_popup_formincludes\class-userswp.php:664
authwp_ajax_uwp_ajax_profile_image_removeincludes\class-userswp.php:665
authwp_ajax_uwp_process_diagnosisincludes\class-userswp.php:745
authwp_ajax_uwp_ajax_register_actionincludes\class-userswp.php:774
authwp_ajax_uwp_ajax_actionincludes\class-userswp.php:775
WordPress Hooks 292
actionadmin_initadmin\class-admin-setup-wizard.php:15
actionadmin_menuadmin\class-admin-setup-wizard.php:16
actioncurrent_screenadmin\class-admin-setup-wizard.php:17
actionuwp_wizard_content_general_settingsadmin\class-admin-setup-wizard.php:18
actionuwp_wizard_content_use_userswpadmin\class-admin-setup-wizard.php:19
actionuwp_wizard_content_menusadmin\class-admin-setup-wizard.php:20
actionuwp_wizard_content_dummy_usersadmin\class-admin-setup-wizard.php:21
actionadmin_noticesadmin\class-admin-setup-wizard.php:22
actionwp_loadedadmin\class-admin-setup-wizard.php:23
actionadmin_initadmin\class-admin.php:31
actionadmin_initadmin\class-admin.php:32
actionadmin_initadmin\class-admin.php:33
actionadmin_enqueue_scriptsadmin\class-admin.php:34
actionadmin_enqueue_scriptsadmin\class-admin.php:35
actionadmin_noticesadmin\class-admin.php:36
actionadmin_footeradmin\class-admin.php:37
actionuser_profile_picture_descriptionadmin\class-admin.php:38
actionadmin_body_classadmin\class-admin.php:39
actionadmin_initadmin\class-admin.php:40
filterviews_usersadmin\class-admin.php:42
filterpre_user_queryadmin\class-admin.php:43
actionedit_user_profileadmin\class-admin.php:44
actionshow_user_profileadmin\class-admin.php:45
filteruser_row_actionsadmin\class-admin.php:46
actionbulk_actions-usersadmin\class-admin.php:47
actionhandle_bulk_actions-usersadmin\class-admin.php:48
filterinitadmin\class-admin.php:49
filterplugin_row_metaadmin\class-admin.php:50
filteraui_screen_idsadmin\class-admin.php:51
actionadmin_noticesadmin\class-admin.php:53
actionmanage_users_extra_tablenavadmin\class-admin.php:54
actionadmin_initadmin\class-admin.php:55
actionadmin_footeradmin\class-admin.php:56
filtermanage_users_columnsadmin\class-admin.php:57
actionmanage_users_custom_columnadmin\class-admin.php:58
actionedit_user_profileadmin\class-admin.php:59
actionshow_user_profileadmin\class-admin.php:60
actionpersonal_options_updateadmin\class-admin.php:61
actionedit_user_profile_updateadmin\class-admin.php:62
actioncurrent_screenadmin\class-uwp-admin-help.php:17
actionadmin_menuadmin\class-uwp-admin-menus.php:26
actionadmin_menuadmin\class-uwp-admin-menus.php:27
actionadmin_menuadmin\class-uwp-admin-menus.php:28
actionadmin_menuadmin\class-uwp-admin-menus.php:29
actionadmin_menuadmin\class-uwp-admin-menus.php:30
actionadmin_print_footer_scriptsadmin\menus\class-menus.php:29
filteruwp_settings_tabs_arrayadmin\settings\class-uwp-settings-addons.php:27
filteruwp_settings_tabs_arrayadmin\settings\class-uwp-settings-emails.php:30
filteruwp_settings_tabs_arrayadmin\settings\class-uwp-settings-general.php:30
filteruwp_settings_tabs_arrayadmin\settings\class-uwp-settings-import-export.php:27
filteruwp_settings_tabs_arrayadmin\settings\class-uwp-settings-page.php:40
filteruwp_form_builder_tabs_arrayadmin\settings\class-uwp-settings-profile-tabs.php:24
filteruwp_form_builder_available_fields_headadmin\settings\class-uwp-settings-profile-tabs.php:25
filteruwp_form_builder_available_fields_noteadmin\settings\class-uwp-settings-profile-tabs.php:26
filteruwp_form_builder_selected_fields_headadmin\settings\class-uwp-settings-profile-tabs.php:27
filteruwp_form_builder_selected_fields_noteadmin\settings\class-uwp-settings-profile-tabs.php:28
actionuwp_manage_available_fieldsadmin\settings\class-uwp-settings-profile-tabs.php:29
actionuwp_manage_available_fields_predefinedadmin\settings\class-uwp-settings-profile-tabs.php:30
actionuwp_manage_available_fields_customadmin\settings\class-uwp-settings-profile-tabs.php:31
actionuwp_manage_selected_fieldsadmin\settings\class-uwp-settings-profile-tabs.php:32
filteruwp_settings_tabs_arrayadmin\settings\class-uwp-settings-redirects.php:30
filteruwp_settings_tabs_arrayadmin\settings\class-uwp-settings-uninstall.php:30
filteruwp_form_builder_tabs_arrayadmin\settings\class-uwp-settings-user-sorting.php:24
filteruwp_form_builder_available_fields_headadmin\settings\class-uwp-settings-user-sorting.php:25
filteruwp_form_builder_available_fields_noteadmin\settings\class-uwp-settings-user-sorting.php:26
filteruwp_form_builder_selected_fields_headadmin\settings\class-uwp-settings-user-sorting.php:27
filteruwp_form_builder_selected_fields_noteadmin\settings\class-uwp-settings-user-sorting.php:28
actionuwp_manage_available_fieldsadmin\settings\class-uwp-settings-user-sorting.php:29
actionuwp_manage_selected_fieldsadmin\settings\class-uwp-settings-user-sorting.php:30
actionuwp_add_custom_sort_optionsadmin\settings\class-uwp-settings-user-sorting.php:32
actionpre_user_queryadmin\settings\class-uwp-settings-user-sorting.php:33
actionadmin_enqueue_scriptsadmin\tables\class-user-types-table.php:49
actionadmin_initincludes\abstract-uwp-privacy.php:50
filterwp_privacy_personal_data_exportersincludes\abstract-uwp-privacy.php:52
filterwp_privacy_personal_data_erasersincludes\abstract-uwp-privacy.php:54
actionuwp_account_form_displayincludes\class-account.php:12
actioninitincludes\class-account.php:13
filteruwp_get_account_deletion_messageincludes\class-account.php:15
actionuwp_send_account_deletion_emailsincludes\class-account.php:16
actioninitincludes\class-ajax.php:13
filterwp_die_ajax_handlerincludes\class-ajax.php:65
filterwp_die_handlerincludes\class-ajax.php:66
actionuwp_email_headerincludes\class-emails.php:17
actionuwp_email_footerincludes\class-emails.php:18
actionwp_new_user_notification_emailincludes\class-emails.php:19
actionwp_new_user_notification_email_adminincludes\class-emails.php:20
filterwp_mail_fromincludes\class-emails.php:521
filterwp_mail_from_nameincludes\class-emails.php:522
filterwp_mail_content_typeincludes\class-emails.php:523
filterupload_dirincludes\class-files.php:66
filterwp_handle_upload_prefilterincludes\class-files.php:69
filterupload_dirincludes\class-forms.php:246
actionauthenticateincludes\class-forms.php:1178
actionuwp_template_display_noticesincludes\class-forms.php:4786
actionuwp_template_display_noticesincludes\class-forms.php:4813
actionuwp_template_display_noticesincludes\class-forms.php:4919
actionadmin_initincludes\class-import-export.php:42
actionadmin_initincludes\class-import-export.php:43
actionadmin_noticesincludes\class-import-export.php:48
filteruwp_get_export_users_statusincludes\class-import-export.php:49
filteruwp_get_import_users_statusincludes\class-import-export.php:50
filterupload_mimesincludes\class-import-export.php:475
actionwp_footerincludes\class-profile.php:1224
actionwp_footerincludes\class-profile.php:1225
actionadmin_footerincludes\class-profile.php:1227
actionadmin_footerincludes\class-profile.php:1228
filterupload_dirincludes\class-profile.php:1302
filterupload_dirincludes\class-profile.php:1611
filterthe_contentincludes\class-templates.php:115
filtertemplateincludes\class-templates.php:1351
filteruwp_load_db_languageincludes\class-tools.php:16
filteruwp_load_db_languageincludes\class-tools.php:17
actionadmin_initincludes\class-userswp.php:509
actioninitincludes\class-userswp.php:510
actionwidgets_initincludes\class-userswp.php:511
actionplugins_loadedincludes\class-userswp.php:512
actionuwp_flush_rewrite_rulesincludes\class-userswp.php:513
actionuwp_language_file_add_stringincludes\class-userswp.php:514
actionafter_setup_themeincludes\class-userswp.php:515
actionwp_enqueue_scriptsincludes\class-userswp.php:524
actionwp_enqueue_scriptsincludes\class-userswp.php:525
actionuser_registerincludes\class-userswp.php:534
actiondelete_userincludes\class-userswp.php:535
actionremove_user_from_blogincludes\class-userswp.php:536
actionwp_loginincludes\class-userswp.php:537
filteruwp_before_extra_fields_saveincludes\class-userswp.php:538
filteruwp_update_usermetaincludes\class-userswp.php:539
filteruwp_get_usermetaincludes\class-userswp.php:540
actionget_user_metadataincludes\class-userswp.php:541
filteraui_is_conditional_select2includes\class-userswp.php:543
filterwp_handle_upload_prefilterincludes\class-userswp.php:548
filteruwp_get_max_upload_sizeincludes\class-userswp.php:550
actioninitincludes\class-userswp.php:573
actionuwp_loadedincludes\class-userswp.php:574
actioninitincludes\class-userswp.php:575
actionuwp_template_display_noticesincludes\class-userswp.php:576
actionpersonal_options_updateincludes\class-userswp.php:579
actionedit_user_profile_updateincludes\class-userswp.php:580
actionuser_edit_form_tagincludes\class-userswp.php:581
actiontemplate_redirectincludes\class-userswp.php:582
actiontemplate_redirectincludes\class-userswp.php:583
actiontemplate_redirectincludes\class-userswp.php:584
actiontemplate_redirectincludes\class-userswp.php:585
actiontemplate_redirectincludes\class-userswp.php:586
actiontemplate_redirectincludes\class-userswp.php:587
filteruwp_form_input_html_datepickerincludes\class-userswp.php:590
filteruwp_form_input_html_timeincludes\class-userswp.php:591
filteruwp_form_input_html_selectincludes\class-userswp.php:592
filteruwp_form_input_html_multiselectincludes\class-userswp.php:593
filteruwp_form_input_html_textincludes\class-userswp.php:594
filteruwp_form_input_html_textareaincludes\class-userswp.php:595
filteruwp_form_input_html_editorincludes\class-userswp.php:596
filteruwp_form_input_html_fieldsetincludes\class-userswp.php:597
filteruwp_form_input_html_fileincludes\class-userswp.php:598
filteruwp_form_input_html_checkboxincludes\class-userswp.php:599
filteruwp_form_input_html_radioincludes\class-userswp.php:600
filteruwp_form_input_html_urlincludes\class-userswp.php:601
filteruwp_form_input_html_emailincludes\class-userswp.php:602
filteruwp_form_input_html_passwordincludes\class-userswp.php:603
filteruwp_form_input_html_checkbox_register_gdprincludes\class-userswp.php:604
filteruwp_form_input_html_checkbox_register_tosincludes\class-userswp.php:605
filteruwp_form_input_html_select_uwp_countryincludes\class-userswp.php:607
filteruwp_form_input_html_phoneincludes\class-userswp.php:608
filteruwp_form_input_email_email_afterincludes\class-userswp.php:609
filteruwp_form_input_password_password_afterincludes\class-userswp.php:610
filteruwp_form_input_html_custom_htmlincludes\class-userswp.php:611
filteruwp_form_input_html_select_uwp_languageincludes\class-userswp.php:612
filteruwp_send_mail_form_fieldsincludes\class-userswp.php:615
actionuwp_template_display_noticesincludes\class-userswp.php:624
actionuwp_template_display_noticesincludes\class-userswp.php:625
actionadmin_noticesincludes\class-userswp.php:626
actionadmin_noticesincludes\class-userswp.php:627
actionadmin_noticesincludes\class-userswp.php:628
actionadmin_initincludes\class-userswp.php:629
actionwp_initialize_siteincludes\class-userswp.php:638
filterdisplay_post_statesincludes\class-userswp.php:639
actiontemplate_redirectincludes\class-userswp.php:648
filterquery_varsincludes\class-userswp.php:650
actioninitincludes\class-userswp.php:651
filterauthor_linkincludes\class-userswp.php:652
filteredit_profile_urlincludes\class-userswp.php:653
filterthe_titleincludes\class-userswp.php:654
filterget_comment_author_linkincludes\class-userswp.php:655
actionuwp_user_titleincludes\class-userswp.php:656
actionuwp_profile_socialincludes\class-userswp.php:657
filterget_avatar_urlincludes\class-userswp.php:658
filterajax_query_attachments_argsincludes\class-userswp.php:661
actionuwp_handle_file_upload_error_checksincludes\class-userswp.php:662
actionwp_headincludes\class-userswp.php:666
actionuwp_profile_headerincludes\class-userswp.php:667
actionuwp_admin_profile_editincludes\class-userswp.php:668
actionuwp_profile_more_info_tab_contentincludes\class-userswp.php:671
actionuwp_profile_posts_tab_contentincludes\class-userswp.php:672
actionuwp_profile_comments_tab_contentincludes\class-userswp.php:673
actionuwp_profile_user-comments_tab_contentincludes\class-userswp.php:674
actionuwp_profile_paginationincludes\class-userswp.php:677
actionuwp_profile_after_titleincludes\class-userswp.php:680
actionuwp_output_locationincludes\class-userswp.php:683
actionwpdiscuz_profile_urlincludes\class-userswp.php:684
filterplupload_default_paramsincludes\class-userswp.php:687
filteruser_has_capincludes\class-userswp.php:688
filterwpmu_drop_tablesincludes\class-userswp.php:697
actiontemplate_redirectincludes\class-userswp.php:706
actionuwp_template_fieldsincludes\class-userswp.php:707
actionuwp_template_fieldsincludes\class-userswp.php:708
actionuwp_account_form_displayincludes\class-userswp.php:709
actionwp_logoutincludes\class-userswp.php:710
actioninitincludes\class-userswp.php:711
actioninitincludes\class-userswp.php:712
actiontemplate_redirectincludes\class-userswp.php:714
actiontemplate_redirectincludes\class-userswp.php:715
actionwpincludes\class-userswp.php:716
actionwp_loginincludes\class-userswp.php:717
filterwp_setup_nav_menu_itemincludes\class-userswp.php:719
filterthe_contentincludes\class-userswp.php:720
filterthe_contentincludes\class-userswp.php:721
filterthe_contentincludes\class-userswp.php:722
filterthe_contentincludes\class-userswp.php:723
filterbody_classincludes\class-userswp.php:724
filterlogin_urlincludes\class-userswp.php:727
filterregister_urlincludes\class-userswp.php:728
filterlostpassword_urlincludes\class-userswp.php:729
filteruwp_get_templateincludes\class-userswp.php:733
actionuwp_admin_sub_menusincludes\class-userswp.php:743
actionuwp_tools_settings_main_tab_contentincludes\class-userswp.php:744
actionuwp_account_form_displayincludes\class-userswp.php:754
actioninitincludes\class-userswp.php:755
actionuwp_manage_available_fields_predefinedincludes\class-userswp.php:765
actionuwp_manage_available_fields_customincludes\class-userswp.php:766
actionuwp_manage_available_fieldsincludes\class-userswp.php:767
actionuwp_manage_selected_fieldsincludes\class-userswp.php:768
actionuwp_admin_extra_custom_fieldsincludes\class-userswp.php:769
filteruwp_before_form_builder_contentincludes\class-userswp.php:771
filteruwp_before_available_fieldsincludes\class-userswp.php:772
actionuwp_form_builder_tabs_contentincludes\class-userswp.php:776
filteruwp_builder_extra_fields_multiselectincludes\class-userswp.php:779
filteruwp_builder_extra_fields_selectincludes\class-userswp.php:780
filteruwp_builder_extra_fields_radioincludes\class-userswp.php:781
filteruwp_builder_extra_fields_datepickerincludes\class-userswp.php:782
filteruwp_builder_extra_fields_passwordincludes\class-userswp.php:783
filteruwp_builder_extra_fields_emailincludes\class-userswp.php:784
filteruwp_builder_extra_fields_fileincludes\class-userswp.php:785
filteruwp_builder_data_type_textincludes\class-userswp.php:786
filteruwp_form_builder_available_fields_headincludes\class-userswp.php:787
filteruwp_form_builder_available_fields_noteincludes\class-userswp.php:788
filteruwp_form_builder_selected_fields_headincludes\class-userswp.php:789
filteruwp_form_builder_selected_fields_noteincludes\class-userswp.php:790
filteruwp_builder_htmlvar_name_taxonomyincludes\class-userswp.php:792
filteruwp_builder_default_value_textareaincludes\class-userswp.php:794
filteruwp_builder_default_value_htmlincludes\class-userswp.php:795
filteruwp_builder_default_value_fileincludes\class-userswp.php:796
filteruwp_builder_default_value_fieldsetincludes\class-userswp.php:797
filteruwp_builder_is_required_fieldsetincludes\class-userswp.php:799
filteruwp_builder_required_msg_fieldsetincludes\class-userswp.php:800
filteruwp_builder_css_class_fieldsetincludes\class-userswp.php:802
filteruwp_builder_is_public_passwordincludes\class-userswp.php:804
filteruwp_builder_validation_pattern_textincludes\class-userswp.php:805
filteruwp_builder_validation_pattern_emailincludes\class-userswp.php:806
filteruwp_builder_validation_pattern_phoneincludes\class-userswp.php:807
filteruwp_builder_validation_pattern_urlincludes\class-userswp.php:808
actionload-nav-menus.phpincludes\class-userswp.php:817
actionadmin_bar_menuincludes\class-userswp.php:818
actionuwp_bypass_users_list_item_template_contentincludes\class-uwp-compatibility.php:18
filterelementor/elements/categories_registeredincludes\class-uwp-compatibility.php:22
filterelementor/editor/localize_settingsincludes\class-uwp-compatibility.php:23
actioninitincludes\class-uwp-privacy.php:24
actionpre_get_document_titleincludes\class-uwp-seo.php:8
actionuwp_profile_optionsincludes\class-uwp-seo.php:9
filterplugins_loadedincludes\class-uwp-seo.php:10
filterget_canonical_urlincludes\class-uwp-seo.php:11
actionseopress_titles_titleincludes\class-uwp-seo.php:14
actionseopress_titles_descincludes\class-uwp-seo.php:15
filterwpseo_opengraph_titleincludes\class-uwp-seo.php:21
filterwpseo_opengraph_descincludes\class-uwp-seo.php:22
filterwpseo_opengraph_urlincludes\class-uwp-seo.php:23
filterwpseo_titleincludes\class-uwp-seo.php:26
filterwpseo_metadescincludes\class-uwp-seo.php:27
filterwpseo_canonicalincludes\class-uwp-seo.php:28
filterrank_math/frontend/descriptionincludes\class-uwp-seo.php:30
filterrank_math/frontend/titleincludes\class-uwp-seo.php:31
actionwp_headincludes\class-uwp-seo.php:33
filterrewrite_rules_arrayincludes\class-uwp-seo.php:37
filteruwp_users_list_ul_extra_classincludes\helpers\misc.php:640
filterget_user_option_metaboxhidden_nav-menusincludes\helpers\misc.php:642
filteruwp_account_page_titleincludes\helpers\misc.php:666
actionuwp_account_menu_displayincludes\helpers\misc.php:697
actionadmin_noticesincludes\helpers\misc.php:1908
actioninitincludes\helpers\permalinks.php:240
actiontemplate_redirectincludes\helpers\permalinks.php:296
filterupload_dirwidgets\profile-header.php:134
filterupload_dirwidgets\user-avatar.php:126
filterupload_dirwidgets\user-cover.php:115

Scheduled Events 1

uwp_flush_rewrite_rules
Maintenance & Trust

UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedMar 10, 2026
PHP min version
Downloads1.2M

Community Trust

Rating94/100
Number of ratings182
Active installs20K
Developer Profile

UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP Developer Profile

Stiofan

12 plugins · 90K total installs

78
trust score
Avg Security Score
99/100
Avg Patch Time
191 days
View full developer profile
Detection Fingerprints

How We Detect UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/userswp/assets/css/main.css/wp-content/plugins/userswp/assets/css/userswp-frontend.css/wp-content/plugins/userswp/assets/js/userswp-frontend.js/wp-content/plugins/userswp/admin/assets/css/setup-wizard.css/wp-content/plugins/userswp/admin/assets/js/setup-wizard.js
Script Paths
admin/assets/js/setup-wizard.js
Version Parameters
userswp/assets/css/main.css?ver=userswp/assets/css/userswp-frontend.css?ver=userswp/assets/js/userswp-frontend.js?ver=userswp/admin/assets/css/setup-wizard.css?ver=userswp/admin/assets/js/setup-wizard.js?ver=

HTML / DOM Fingerprints

CSS Classes
uwp-setupuwp-messageuwp-setup-stepsuwp-setup-headeruwp-setup-contentuwp-setup-footeruwp-setup-buttons
HTML Comments
<!-- If this file is called directly, abort. --><!-- The core plugin class that is used to define internationalization, * admin-specific hooks, and public-facing site hooks. --><!-- Begins execution of the plugin. * * Since everything within the plugin is registered via hooks, * then kicking off the plugin from this point in the file does * not affect the page life cycle. * * @since 1.0.0 --><!-- removes deprecated warnings from page -->
Data Attributes
id="message"class="updated notice-alt uwp-message"id="uwp-logo"class="uwp-setup wp-core-ui"class="uwp-setup-steps"class="active"+1 more
JS Globals
uwp_wizard_obj
FAQ

Frequently Asked Questions about UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP