User Registration & Membership

Build User Registration Forms and Membership Plans in WordPress

Get Started

Changelog

A complete insight into the features and improvements that User Registration & Membership offers with each new update.

  • 5.2.8 10/09/2026
    • Fix
      • Stop retrying deleted Stripe subscriptions.
      • Show specific error for existing email/username.
      • Content restriction bypassed via WordPress core REST API. Thanks Patchstack.
      • Standardized outbound UTM parameters and invalid campaign keys.
      • Users could be redirected to an outside website after logging in.
      • Membership thank you page exposed another member’s account details. Thanks Karthik Ramakrishnan.
      • Team Membership: scoped Edit Team form nonce to the team being edited.
      • Use timing-safe comparison for email confirmation and approval tokens.
      • Stripe payment could be replayed to renew a membership without paying. Thanks Patchstack.
      • Privilege escalation via membership role and open redirect after login. Thanks Baikuya and Sai Praneeth Koti.
      • Expired membership could be renewed by replaying an earlier Stripe payment. Thanks MYUNGYONG LEE.
      • Deactivate License button did nothing when pro-activation transient was set.
      • Membership/payment/autologin failed if another plugin hooked registration validation.
      • Membership Renewal Reminder email sent to members who had already cancelled at period end.
      • Registration forms not validating publish status or restricting assigned roles. Thanks Ananda Dhakal.
    • Add
      • {{force_logout_url}} smart tag for Pro’s prevent concurrent login email.
  • 5.2.7 11/08/2026
    • Fix
      • Payment related issues for tax & others
      • User login after invalid failed payment.
      • Performance issue on flush rewrite rules.
      • Malformed my account URL on Plain permalinks.
      • Both renewal emails sent regardless of setting.
      • Disable emails setting not blocking all emails.
      • Fatal error on registration if form data is null.
      • Default subscriber role added for disabling settings.
      • False success shown when profile update saves nothing.
      • Show emails only when respective settings are enabled.
      • Membership links not translated on multilingual sites.
      • Change Plan/Renew links not using correct language page.
      • Profile Picture removed when saving another user’s profile.
      • Added site assistant and admin notice when registration disabled.
      • Hide Payments and Subscriptions menus until relevant data exists.
      • Hide Global Restriction Message setting until a plan or rule exists.
      • Membership field hides radio button for single plan; correct Total for free plans.
      • Hide Renewal Behaviour setting on Membership settings until a membership plan is created.
      • Site Assistant hides membership/payment notices until a plan exists for Advanced Registration users.
  • 5.2.6 22/07/2026
    • Enhance
      • Compatibility with divi 5.
      • Allow 100% discount coupons on memberships.
      • Redirect hint links to Enable Custom Redirect setting.
    • Fix
      • Local currency bugs.
      • Double Charge on Upgrade.
      • Updated authorize net card design.
      • Remove the payment tabs from admin side.
      • Cancel previous subscription on upgrade.
      • Added spinner on Membership Reactivation.
      • Validation for lost password n Pages Setting.
      • Delete User button not working on member view page.
      • User Registration css loading when elementor active.
      • Prevent privilege escalation in login settings save.
      • Reset password smart tag validation in email content.
      • Checkbox values not appearing when exporting members.
      • Payment Before Login not enforced for pending payments.
      • Can not create new subscription in safari from admin menu.
      • Membership cancellation failures now show a clear message.
      • Field options not displayed when configuring content rules.
      • Content restriction being applied for inactive memberships.
      • Membership field blank in form builder with selected group.
      • Store actual PayPal transaction id instead of subscription id.
      • Stripe registration now displays the configured success message.
      • Conditional Logic on Payments not working for normal registration.
      • Fatal error when saving Stripe plan with yearly billing over 3 years.
      • Upgrade prompt for Plus-gated membership group toggles on lower plans.
      • {{user_ip_address}} smart tag returned empty for IPv6 visitor addresses.
      • Block shortcode injection via smart tags in Content Restriction messages.
      • Stripe membership “Payment Confirmed” email sent before payment completes.
      • Membership emails not using saved custom content for preview and delivery.
      • Local Currency pricing zones not saving when added from the payment settings.
      • Misleading “missing membership field” notice on registration page with no memberships field.
      • Redirects and lost-password/2FA links now use the correct translated page on multilingual sites.
  • 5.2.5 08/07/2026
    • Enhance
      • Defer expiry to period end.
      • Pin Stripe subscription payment method for reliable renewals.
    • Fix
      • User and admin email order.
      • Payment fail case for paypal.
      • Lost Password Carrot adjustment.
      • Unnecessary payment retry checks.
      • Required Nonce Error on registration.
      • Fatal error on WooCommerce shop page.
      • Setup wizard membership duration issue.
      • Loader timing issue during registration.
      • Unwanted settings showing up in free version.
      • Prevent formula injection in user CSV export.
      • Reject underpaid PayPal subscription payments.
      • Harden signup notice against malicious content.
      • Stop users from cancelling others’ email changes.
      • Remove unwanted fields from payment confirmed email.
      • Pending subscription blocked the user from logging in.
      • Design issues in promotional notices after WordPress v7.0.
      • Use server membership state for multiple-membership policy.
      • Block tampered PayPal payments from activating memberships.
      • Stripe payment and nonce validation failed on Membership form.
      • Field Visibility add-on hides fields in My Account read-only profiles.
      • Security: prevent unauthorized login during membership signup payment.
      • Check coupon eligibility before discount on public membership purchase.
      • Super admin bypass missing for admin content access in membership rules.
      • Check PayPal payment is complete before activating one-time memberships.
  • 5.2.4 25/06/2026
    • Enhance
      • User role overwritten on new membership assignment.
      • Add customizable membership registration success message in settings.
    • Fix
      • Duplicate variable.
      • Invoice dynamic content not translatable.
      • Missing users in user registration members section.
      • Validation of key while saving the stripe payment settings.
      • My Account payment tab pulling footer content inside the tab area.
      • Address incomplete PayPal setup error when adding PayPal for old user.
      • hCaptcha enabled on registration form blocks users from completing signup.
      • Reset content button not working in the prevent concurrent login email template.
      • New Member Registered email not sent when Admin Approval Request email is enabled.
      • Harden membership coupon apply paths against PHP 8 TypeError (free membership module).
      • File upload attachments not updating correctly when admin edits another user’s profile.
      • Registration failure causes missing member records and prevents Stripe payment processing.
  • 5.2.3 23/06/2026
    • Fix
      • validation for receiver email and payment amount in PayPal IPN handling.
      • Selected membership tier during registration missed proper validation, allowing assignment of off-form membership tiers.
      • Stripe subscription requests could trigger unintended deletion of pending member accounts due to insufficient authorization validation.
  • 5.2.2 19/06/2026
    • Dev
      • Add UR_WPML compatibility service class.
    • Fix
      • Password reset link shows “invalid or expired” error.
      • Membership subscriptions stuck pending on 3D Secure (SCA) cards.
      • Hardcoded database table names causing failures on custom table prefixes.
      • Checkbox visibility issue on WP user profile/edit page caused by CSS conflict.
      • PayPal credentials not detected during registration despite valid saved settings.
      • Password reset link shows invalid or expired on hosts that do not support PHP cookies.
      • Webhook not configured but still can bypass PayPal payments.
      • Payment Method Bypass Allows Free Access to Paid Memberships via Tampered Registration Request.
      • Payment method field during registration could be manipulated to bypass payment for paid memberships.
      • Authenticated users could modify other members’ subscriptions by supplying an arbitrary subscription ID during upgrade.
      • Membership tier submitted during registration was not validated against the memberships configured on the form, allowing substitution with an off-form tier.
  • 5.2.1 28/05/2026
    • Fix
      • Stripe order validation issue.
      • Membership upgrade action not available after disabling group add-on.
      • Custom emails addon cannot be enabled with plus plan even available in personal.
      • Nav menu items disappear for logged-out users when logout endpoint set to slash.
      • File upload addon shows upgrade to premium prompt despite user having an active plan.
      • Ensure meta_query is initialized before adding payment status condition in user payments query.
  • 6.2.8 09/09/2026
    • Fix
      • Standardized Pro upgrade link UTMs.
      • Stored XSS in the Form Analytics user journey table.
      • Hardened form analytics queries with prepared statements.
      • Team Membership: invited members now receive the plan’s role.
      • Standardized outbound UTM parameters and invalid campaign keys.
      • Team Membership: team leaders could edit teams they don’t lead.
      • Unauthenticated force-logout of any user via ?force-logout=.
      • Users could be redirected to an outside website after logging in.
      • Frontend Listing title-save request could rename unrelated posts.
      • Use timing-safe comparison for email confirmation and approval tokens.
      • Team Membership: scoped Edit Team form nonce to the team being edited.
      • Coupons and Frontend Listing bulk delete triggerable via a crafted link.
      • Coupons AJAX handlers allowed arbitrary post deletion and coupon minting.
      • Tax regions and rates could be deleted without a nonce or permission check.
      • Content restriction bypassed via WordPress core REST API. Thanks Patchstack.
      • Deactivate License button did nothing when pro-activation transient was set.
      • Team Membership: plan role now removed when a member leaves or the team ends.
      • Stripe payment could be replayed to renew a membership without paying. Thanks Patchstack.
      • SMS OTP could be brute-forced to take over an account; now rate-limited and session-bound.
      • Membership thank you page exposed another member’s account details. Thanks Karthik Ramakrishnan.
      • Expired membership could be renewed by replaying an earlier Stripe payment. Thanks MYUNGYONG LEE.
      • Registration forms not validating publish status or restricting assigned roles. Thanks Ananda Dhakal.
      • Privilege escalation via membership role and open redirect after login. Thanks Baikuya and Sai Praneeth Koti.
    • Add
      • {{force_logout_url}} smart tag for Pro’s prevent concurrent login email.
  • 6.2.7 11/08/2026
    • Fix
      • Payment related issues for tax & others
      • User login after invalid failed payment.
      • Performance issue on flush rewrite rules.
      • Malformed my account URL on Plain permalinks.
      • Both renewal emails sent regardless of setting.
      • Disable emails setting not blocking all emails.
      • Fatal error on registration if form data is null.
      • Default subscriber role added for disabling settings.
      • False success shown when profile update saves nothing.
      • Show emails only when respective settings are enabled.
      • Membership links not translated on multilingual sites.
      • Change Plan/Renew links not using correct language page.
      • Profile Picture removed when saving another user’s profile.
      • Added site assistant and admin notice when registration disabled.
      • Hide Payments and Subscriptions menus until relevant data exists.
      • Hide Global Restriction Message setting until a plan or rule exists.
      • Membership field hides radio button for single plan; correct Total for free plans.
      • Hide Renewal Behaviour setting on Membership settings until a membership plan is created.
      • Site Assistant hides membership/payment notices until a plan exists for Advanced Registration users.
  • 6.2.6 22/07/2026
    • Enhance
      • Compatibility with divi 5.
      • Allow 100% discount coupons on memberships.
      • Redirect hint links to Enable Custom Redirect setting.
    • Tweak
      • Moved Maxmind integration settings to Integration >> Geolocation.
    • Fix
      • Local currency bugs.
      • Double Charge on Upgrade.
      • Updated authorize net card design.
      • Remove the payment tabs from admin side.
      • Cancel previous subscription on upgrade.
      • Added spinner on Membership Reactivation.
      • Validation for lost password n Pages Setting.
      • Delete User button not working on member view page.
      • User Registration css loading when elementor active.
      • Prevent privilege escalation in login settings save.
      • Reset password smart tag validation in email content.
      • Checkbox values not appearing when exporting members.
      • Payment Before Login not enforced for pending payments.
      • Can not create new subscription in safari from admin menu.
      • Membership cancellation failures now show a clear message.
      • Field options not displayed when configuring content rules.
      • Content restriction being applied for inactive memberships.
      • Membership field blank in form builder with selected group.
      • Store actual PayPal transaction id instead of subscription id.
      • Stripe registration now displays the configured success message.
      • Conditional Logic on Payments not working for normal registration.
      • Fatal error when saving Stripe plan with yearly billing over 3 years.
      • Upgrade prompt for Plus-gated membership group toggles on lower plans.
      • {{user_ip_address}} smart tag returned empty for IPv6 visitor addresses.
      • Block shortcode injection via smart tags in Content Restriction messages.
      • Stripe membership “Payment Confirmed” email sent before payment completes.
      • Membership emails not using saved custom content for preview and delivery.
      • Local Currency pricing zones not saving when added from the payment settings.
      • Misleading “missing membership field” notice on registration page with no memberships field.
      • Redirects and lost-password/2FA links now use the correct translated page on multilingual sites.
  • 6.2.5 08/07/2026
    • Enhance
      • Defer expiry to period end.
      • Pin Stripe subscription payment method for reliable renewals.
    • Fix
      • User and admin email order.
      • Payment fail case for paypal.
      • Lost Password Carrot adjustment.
      • Unnecessary payment retry checks.
      • Required Nonce Error on registration.
      • Fatal error on WooCommerce shop page.
      • Setup wizard membership duration issue.
      • Loader timing issue during registration.
      • Unwanted settings showing up in free version.
      • Prevent formula injection in user CSV export.
      • Reject underpaid PayPal subscription payments.
      • Harden signup notice against malicious content.
      • Stop users from cancelling others’ email changes.
      • Remove unwanted fields from payment confirmed email.
      • Pending subscription blocked the user from logging in.
      • Design issues in promotional notices after WordPress v7.0.
      • Use server membership state for multiple-membership policy.
      • Block tampered PayPal payments from activating memberships.
      • Auto-generated password email sent before admin approves user.
      • Stripe payment and nonce validation failed on Membership form.
      • Security: prevent unauthorized login during membership signup payment.
      • Check coupon eligibility before discount on public membership purchase.
      • Super admin bypass missing for admin content access in membership rules.
      • Check PayPal payment is complete before activating one-time memberships.
  • 6.2.4 25/06/2026
    • Enhance
      • User role overwritten on new membership assignment.
      • Add customizable membership registration success message in settings.
    • Fix
      • Duplicate variable.
      • Pdf dynamic content not translatable.
      • Coupon addon compatibility with PHP 8+.
      • Auto-delete users feature not deleting users.
      • Missing users in user registration members section.
      • Security Audit for User registration and its addons.
      • Validation of key while saving the stripe payment settings.
      • Design inconsistencies in content restriction block settings.
      • My Account payment tab pulling footer content inside the tab area.
      • Smart tags not working in payment invoice download from account page.
      • Address incomplete PayPal setup error when adding PayPal for old user.
      • hCaptcha enabled on registration form blocks users from completing signup.
      • Reset content button not working in the prevent concurrent login email template.
      • New Member Registered email not sent when Admin Approval Request email is enabled.
      • Harden membership coupon apply paths against PHP 8 TypeError (free membership module).
      • File upload attachments not updating correctly when admin edits another user’s profile.
      • Registration failure causes missing member records and prevents Stripe payment processing.
  • 6.2.3 23/06/2026
    • Fix
      • validation for receiver email and payment amount in PayPal IPN handling.
      • Selected membership tier during registration missed proper validation, allowing assignment of off-form membership tiers.
      • Stripe subscription requests could trigger unintended deletion of pending member accounts due to insufficient authorization validation.
  • 6.2.2 19/06/2026
    • Dev
      • Add UR_WPML compatibility service class.
    • Fix
      • Password reset link shows “invalid or expired” error.
      • Membership subscriptions stuck pending on 3D Secure (SCA) cards.
      • Hardcoded database table names causing failures on custom table prefixes.
      • Checkbox visibility issue on WP user profile/edit page caused by CSS conflict.
      • PayPal credentials not detected during registration despite valid saved settings.
      • Password reset link shows invalid or expired on hosts that do not support PHP cookies.
      • Webhook not configured but still can bypass PayPal payments.
      • Payment Method Bypass Allows Free Access to Paid Memberships via Tampered Registration Request.
      • Payment method field during registration could be manipulated to bypass payment for paid memberships.
      • Authenticated users could modify other members’ subscriptions by supplying an arbitrary subscription ID during upgrade.
      • Membership tier submitted during registration was not validated against the memberships configured on the form, allowing substitution with an off-form tier.
  • 6.2.1 28/05/2026
    • Fix
      • Stripe order validation issue.
      • Membership upgrade action not available after disabling group add-on.
      • Shortcodes not rendering properly in content restriction block message.
      • Custom emails addon cannot be enabled with plus plan even available in personal.
      • Nav menu items disappear for logged-out users when logout endpoint set to slash.
      • File upload addon shows upgrade to premium prompt despite user having an active plan.
      • Ensure meta_query is initialized before adding payment status condition in user payments query.
Scroll to top
✕

Streamline WordPress User Registration & Membership

Join Our Growing Community and Start Creating membership platform & more!

[sibwp_form id=2]

Nevermind, I just want the plugin zip.

By subscribing, you agree to our terms of use and privacy policy.

✕

Get User Registration & Membership Free Right in Your Inbox 

Enter your email below and we’ll send you the free download link. 

By signing up, you’ll also receive updates, deals, and exclusive offers for User Registration & Membership. Unsubscribe anytime. Terms of Service | Privacy Policy