Generic filters
Automatic updates Yes
Version 2.11.4
Updated on
Virus Total See Report

With the Ultimate Member plugin, we effortlessly create vibrant, engaging communities on our WordPress sites. It offers robust features like customizable user profiles, member directories, and content restriction. As users, we relish its intuitive interface, making community management a breeze. Embrace this tool, and watch your site flourish with dynamic user interaction.

How to download Ultimate Member

Unlimited Access

Subscribe for only €10.90

Or

Get this product only with unlimited updates

Already included languages : EN

We are not affiliated with Ultimate Member nor its developers or owners. Please read the full disclaimer in footer.

HOW IT WORKS

Auto updates with Club WPress plugin

Check how to install and update your WordPress plugins and themes in ONE CLICK directly from your Dashboard.

ClubWordPress Updater Plugin

Core Features of Ultimate Member

  • User Profiles: Create customizable user profiles with various fields and layout options.
  • Membership Management: Manage user roles and capabilities with ease.
  • Registration and Login Forms: Build custom registration and login forms with drag-and-drop form builder.
  • Conditional Logic: Show or hide fields based on user input or role.
  • Content Restriction: Restrict access to content based on user roles or membership status.
  • Email Notifications: Send customizable email notifications for various user actions.
  • User Directories: Create searchable and filterable member directories.
  • Account Management: Allow users to manage their own accounts and profiles.
  • Form Validation: Ensure data integrity with built-in form validation rules.
  • Integrations: Seamless integration with popular plugins and services.

List of improvements in Ultimate Member version 2.11.4

  • = Important: =
  • IMPORTANT: PLEASE UPDATE THE PLUGIN TO AT LEAST VERSION 2.6.7 IMMEDIATELY. VERSION 2.6.7 PATCHES SECURITY PRIVILEGE ESCALATION VULNERABILITY. PLEASE SEE [THIS ARTICLE]( FOR MORE INFORMATION
  • = 2.11.4 2026-04-30 =
  • **Enhancements**
  • Added: Checking format of the 3rd-party registered custom fields. Avoid PHP errors related to the wrong format or unexpected attributes.
  • **Bugfixes**
  • Fixed: Added uploader fields `accept` argument for set allowed mime-types in the upload dialog window. Updated 3.1.2 version of this library [hayageek/jquery-upload-file]( Don’t use 4.0.11 version for now.
  • Fixed: JS initialization of the empty uploader fields.
  • Fixed: User Profile URLs in the User Profile form on the not-predefined pages placed via shortcode.
  • **Note: Cached and optimized/minified assets(JS/CSS) must be flushed/re-generated after the upgrade**
  • = 2.11.3 2026-03-26 =
  • **Enhancements**
  • Added: UM > Settings > Advanced > APIs section for set available APIs settings.
  • Added: GoogleMaps API setting when it’s available.
  • Added: Function `UM()->mail()->enabled_email()` for checking if the email notification is enabled by the user.
  • Added: `color` type of sanitize settings saved in wp-admin.
  • Added: Checking array type of submission data when `url` type of sanitize is used in wp-admin.
  • Added: Enhance UM form sanitization filter with $form_data param. Added the $form_data parameter to the `um_sanitize_form_submission` filter.
  • Added: Option for special character requirement for passwords. It’s situated in “General > Users > Password requires special character” (based on @faisalahammad suggestions)
  • Added: Filter hook `um_before_account_delete_text` for changing before delete account text by 3rd-party plugins. End-customers can use it for translations.
  • Added: Filter hook `um_custom_{$message_key}` (`um_custom_pending_message`, `um_custom_checkmail_message`) for changing after-registration message based on the user status by 3rd-party plugins. End-customers can use it for translations.
  • Added: Filter hook `um_convert_tags_blacklist_fields` For 3rd-party integrations to control the usermeta keys in `um_convert_tags()` function.
  • Added: `.um-display-none` CSS utility + `umShow()/umHide()/umToggle()` jQuery helpers.
  • Added: `um-notice` JS library.
  • **Bugfixes**
  • Fixed: Security issue, CVE ID: CVE-2026-4248. Added blacklist filter for convert_tag replace placeholders function.
  • Fixed: HTML sanitization logic for textarea-type custom fields with enabled HTML using setting.
  • Fixed: WP editor formatting to prevent incorrect HTML entity conversion when using html-mode in the textarea-type custom fields. Applied and removed this filter dynamically to avoid interfering with other processes.
  • Fixed: Dynamic string translation pattern and improve escaping. Replaced incorrect __(‘%s’) pattern. (@faisalahammad)
  • Fixed: `wp_die()` function triggering on the frontend actions. Added UM notice above the User Profile page. (based on @faisalahammad suggestions)
  • Fixed: Password reset key handling for multiple users. Previously, the static reset key caused issues when handling password resets for multiple users simultaneously.
  • Fixed: `um_trim_string()` function for using with UTF-8 symbols.
  • Fixed: PHP Notice: Function WP_Scripts::add was called incorrectly.
  • **Templates Requiring Update**
  • members.php
  • message.php
  • restricted-blog.php
  • restricted-taxonomy.php
  • **Note: Cached and optimized/minified assets(JS/CSS) must be flushed/re-generated after the upgrade**
  • = 2.11.2 2026-02-10 =
  • **Enhancements**
  • Added: Server-side validation when the Search Form is submitted.
  • Added: Action hook `um_approve_user_on_email_confirmation` to natively approve the user after validating the email activation link.
  • Added: JS filter wp.hook `um_member_directory_popstate_ignore` to stop window.pushSate in the member directory for 3rd-party integrations.
  • **Bugfixes**
  • Fixed: Security issue, CVE ID: CVE-2025-15064. Deprecated the ability to use HTML inside the user description. It’s still allowed to use only predefined ‘user_description’ tags in `wp_kses()`.
  • Fixed: Security issue, CVE ID: CVE-2026-1404. Modified template item formatting to avoid using HTML characters in the filter values.
  • Fixed: Profile photo dropdown menu position for screens smaller than 340px.
  • Fixed: Display of the saved value of the “Privacy Options” > “Allowed roles” setting for the member directory.
  • Fixed: Information in Site-Health about the registration form’s `Template` and `Role` settings.
...
>

Join Club WPress Now !

Get access to 19367 products for only €10,90 per month.

JOIN NOW

Reviews