User Frontend · Version history
User Frontend changelog and version history
- Latest version
- 4.3.14
- Oct 28, 2026 (12 days ago)
- Releases
- 154
- since 2017
- In the last year
- 24
- about one every 15 days
- Tested up to
- WordPress 7.1.4
- PHP 7.4 or later
Releases each year
- 201717 releases
- 201817 releases
- 201917 releases
- 202019 releases
- 202114 releases
- 20224 releases
- 20239 releases
- 202415 releases
- 202521 releases
- 202621 releases
202621 releases
User Frontend 4.3.14Latest
- Security – Fixed an issue where a crafted link could run a script in a visitor’s browser through the category field of a frontend form (reported by Wordfence, CVE-2026-103962).
- Security – Fixed an issue where a guest could submit a category name that ran a script when an administrator later opened that form in the builder (reported by Wordfence, CVE-2026-109214).
- Security – Fixed an issue where a visitor could attach uploads to a form that has no upload field (reported by Sangho Lee).
- Security – Fixed an issue where a logged-in member could place the registration shortcode in a submission and hand themselves a higher role (reported by Wordfence).
- Security – Fixed an issue where a visitor could run the setup wizard and overwrite the payment, posting and profile settings, including the saved PayPal details (reported by Patchstack).
- Security – Fixed an issue where a logged-in member could activate a paid subscription pack without paying for it (reported by Patchstack).
- Fix – Form settings are no longer lost when a form is saved after new fields are added, so the submit button keeps its label and no PHP warning appears.
User Frontend 4.3.13
- Security – Fixed an issue where a logged-in member could save a script through the checkout payment method and have it run when an admin opened the pending transactions list (reported by Wordfence, CVE-2026-96574).
- Fix – The AI form builder saves generated forms again: Edit with Builder no longer fails with an HTTP 400 error.
- Fix – Each prompt on the Create Form with AI screen now shows once instead of twice when WP User Frontend Pro is active.
User Frontend 4.3.12
- Security – Fixed an issue where someone could sign up with a higher role than the site allows, or register while registration was switched off (reported by WPScan).
- Security – Fixed an issue where a submission could skip the membership requirement by being saved as a draft first (CVE-2026-17563).
- Security – Fixed an issue where the user registration form could be used to take over a visitor’s session (CVE-2026-17564).
- Security – Registration and user profile forms can no longer be used to hand out an administrator role (CVE-2026-75823).
- Security – Fixed an issue where a logged-in member could delete or take over media files belonging to someone else through a frontend post form (reported by Patchstack).
- Security – Fixed an issue where a guest could publish a paid submission without paying, by reusing the link from the confirmation email (reported by Patchstack).
- Security – Fixed an issue where a membership pack could be activated from an unpaid PayPal subscription, kept an unlimited post count, and stayed active after the subscription expired or was suspended (reported by Patchstack).
- Security – Fixed an issue where a custom field value or label could run scripts on the page when a submission was viewed.
- Security – Values entered in a repeatable field are now cleaned before they are saved.
- Security – Importing a form file can no longer create content of an unexpected type or status.
- Security – The scheduled post expiration cleanup now requires the right permission to run.
- Security – The user directory no longer shows a member’s email address to logged-out visitors; signed-in visitors and sites that opt in still see it.
- Fix – Guest post email verification works again: the link in the confirmation email publishes the post instead of showing an error.
- Fix – A recurring membership pack now activates with the correct post limit and expiry date, including packs that start with a free trial, and comes back after a paused subscription is reactivated.
- Fix – Posts no longer expire when post expiration is switched off on the membership pack, or when the expiration time is left empty or invalid.
- Fix – A site whose plugin files were installed without their dependencies now shows a clear admin notice instead of a fatal error, whether or not WP User Frontend Pro is also installed.
- Fix – Updating the plugin’s dependencies no longer breaks the site with a missing-trait fatal error.
- Enhance – Frontend form scripts and styles now load only on pages that actually use a WP User Frontend form, including pages built with Elementor, so the rest of the site stays lighter.
User Frontend 4.3.11
- Security – Blocked PHP object injection when the frontend post edit form reads submitted meta (reported by WPScan).
- Security – Enforced the membership subscription gate in the AJAX handler to stop unauthenticated post creation through a subscription-gated frontend post form (reported by Charles Vosburgh).
- Security – User registration now fails closed when the nonce is missing or invalid and redirects to a safe URL, preventing CSRF-based login session fixation (reported by Yaswanth Reddy Sunkara).
- Enhance – Redesigned the Modules page with a responsive card grid and modern layout.
- Enhance – Added native support for uploading .jfif images through frontend post and user profile forms.
- Compatibility – Tested with WordPress 7.1.
User Frontend 4.3.10
- Enhance – Redesigned all five frontend post form templates with a modern, consistent UI/UX.
- Enhance – Improved the user registration multistep experience with progress bar colors that automatically match your form settings.
- Enhance – Improved readability of form titles, descriptions, help text, and field labels across dark templates.
- Enhance – Modernized the file and image upload progress UI for frontend post submissions.
- Enhance – Improved styling consistency across frontend post forms, user registration forms, user profile forms, membership forms, and user directory templates.
- Fix – Dropdown/multiselect chevrons and the Field Size setting now render consistently across all templates.
- Fix – Multistep next/previous button spacing no longer overlaps the field focus border.
- Fix – Improved form label color contrast on Template 4 for better accessibility.
- Fix – “Use Theme CSS” now correctly disables the plugin’s Template 1 styling so your theme’s CSS takes over.
- Fix – Multistep step labels and the progress header are now readable on dark templates (Template 2 and 5).
- Fix – Checkboxes are now visually distinct from radio buttons on Template 1.
- Fix – PayPal webhooks now fire reliably so membership subscription and content pack transactions are recorded.
- Dev – The default form skin moved from the generic .wpuf-style class to the template-scoped .wpuf-form-layout1; update any custom CSS that targeted .wpuf-style.
User Frontend 4.3.9
- New – Post Form Gutenberg block to place a frontend post submission form in the block editor with full style controls.
- New – Change Password tab in the user profile account page so members can update their password from the frontend.
- New – Redesigned Upgrade to Pro page with a plan comparison and pricing toggle.
- Enhance – Revamped the payment checkout page with a two column layout, order summary and clearer gateway selection.
- Enhance – Coupon discount and coupon ID are now stored per transaction and shown in the admin transaction list.
- Enhance – Show the active Pro plan as a badge in the admin header.
- Fix – Custom field placeholders in notification emails no longer replace a numeric field value with an attachment URL; only image and file upload fields resolve to URLs.
- Fix – Coupon discounts now apply to PayPal payments; the discounted amount was previously ignored at checkout.
- Fix – Resolve a fatal error on PHP 8 when a frontend post form still contains a field from a deactivated module.
- Fix – Renamed the PayPal webhook query variable so it no longer conflicts with FacetWP and other plugins.
- Fix – The user registration login form’s “Don’t have an account?” text is now translatable.
- Fix – Corrected the Custom HTML field tooltip; WordPress shortcodes require the Shortcode field.
User Frontend 4.3.8
- Fix – Security: hardened file upload handling to prevent unauthorized deletion of media attachments and modification of a frontend post via crafted form submissions.
- Fix – Credit Card payment gateway now displays correctly on the Payment settings page when the Pro add-on is inactive.
User Frontend 4.3.7
- Fix – Tag suggestions not loading in frontend post form builder
- Fix – Checkbox styling in frontend post form builder
User Frontend 4.3.6
- Fix – Restore edit button for custom post type published posts after 4.2.9
User Frontend 4.3.5
- Chore – Exclude .DS_Store files from builds and SVN deploy
User Frontend 4.3.4
- Chore – Clean up internal Claude build files from the release package.
User Frontend 4.3.3
- Enhance – Bind cancel nonce to user and enforce ownership
- Fix – Resolve post expiration not working
User Frontend 4.3.2
- New – Add guest and paid guest post templates and assets
- New – Add user directory page creation to installer and tools
- Enhance – Add ‘General’ category for registration forms
- Fix – Sanitize file IDs with absint and remove debug logs
- Fix – Resolve unauthorized subscription pack assignment
- Fix – Enable fallback pay-per-post when force_pack is set
User Frontend 4.3.1
- New – Add Elementor Account page widget
- New – Add Elementor Subscription widget
- New – Add Elementor Post Form Builder widget
- New – Introduce card grid UI for payment gateway selection
- Enhance – Bind cancel nonce to user and enforce ownership
- Enhance – Clean up What’s New page assets and remove unused code
- Fix – Improve wording of plugin update notice
- Fix – Resolve CSS/JS warning in setup wizard
User Frontend 4.3.0
- New – Add User Directory Module
User Frontend 4.2.10
- New – Add Logout link to navigation menu for Classic and FSE themes
- New – Support custom image icons in Form Builder
- New – Add Kazakhstani Tenge (KZT) and expand currency list to ISO 4217 standard
- New – Add Cloudflare Turnstile validation
- Enhance – Improve Login form stability and validation fixes
User Frontend 4.2.9
- New – Integration-specific AI form builder support
- New – Add Shortcodes Reference page under Tools menu
- Enhance – Improve Bank payment system
- Enhance – Add security validation for JSON file uploads
- Enhance – Strengthen authorization checks for draft post editing
- Fix – Correct AI form builder button text
User Frontend 4.2.8
- Re-release of 4.2.7 with no functional changes.
User Frontend 4.2.7
- New – Account page Re-Design
- New – AI settings improvements with temperature control, API key masking, and connection testing
- Enhance – Remove currency symbol from AI form builder pricing fields
- Enhance – Form builder UI and usability tweaks
- Enhance – Conditional options for field icon settings
- Enhance – Improve string translation and escaping in modal templates
User Frontend 4.2.6
- New – Add AI-powered field options generator for dropdown, radio, and checkbox fields
- Fix – Correctly detect ACF taxonomies
- Fix – Subscription page title is broken
- Fix – Hidden CSS class removes fields from builder
- Fix – Color picker PRO badge icon and hover overlay in settings
- Fix – Resolve subscription post number rollback toggle not saving
- Fix – Event Venue & Organizer Handling Issues in Frontend Event Submission
User Frontend 4.2.5
- Enhancement – Warning message for empty field options
- Enhancement – Login and Registration help text
- Fix – Add authorization checks for attachment deletion in form submission
- Fix – Update security by WordPress plugin check
- Fix – Radio and checkbox options going out for long list in form builder
- Fix – Add italic, underline, and bold styling to Settings link in field validators
202521 releases
User Frontend 4.2.4
- New – n8n integration for post form
- Fix – Duplicate event on update for event calendar integration
User Frontend 4.1.15
- Fix – Unwanted text appearing in ‘View’ and ‘Preview’ links
User Frontend 4.2.3
- Enhancement – Add dynamic AI model fetching and improved error handling
- Enhancement – System prompt update for better output for AI form builder
- Enhancement – Change pricing field logo
- Enhancement – Styling, CSS > replaced all old pro icon with new icon
User Frontend 4.2.2
- Fix – Show/Hide field based on subscription plan
- Fix – Frontend subscription page CSS fixes
User Frontend 4.2.1
User Frontend 4.1.14
User Frontend 4.0.15
User Frontend 4.1.13
User Frontend 4.1.12
User Frontend 4.1.11
User Frontend 4.1.10
User Frontend 4.1.9
User Frontend 4.1.8
User Frontend 4.1.7
User Frontend 4.1.6
User Frontend 4.1.5
User Frontend 4.1.4
User Frontend 4.1.3
User Frontend 4.1.2
User Frontend 4.1.1
User Frontend 4.1.0
202415 releases
User Frontend 4.0.14
User Frontend 4.0.13
User Frontend 4.0.12
User Frontend 4.0.11
User Frontend 4.0.10
User Frontend 4.0.9
User Frontend 4.0.8
User Frontend 4.0.7
User Frontend 4.0.6
User Frontend 4.0.5
User Frontend 4.0.4
User Frontend 4.0.3
User Frontend 4.0.2
User Frontend 4.0.1
User Frontend 4.0.0
20239 releases
User Frontend 3.6.9
User Frontend 3.6.8
User Frontend 3.6.7
User Frontend 3.6.6
User Frontend 3.6.5
User Frontend 3.6.4
User Frontend 3.6.3
User Frontend 3.6.2
User Frontend 3.6.1
20224 releases
User Frontend 3.6.0
User Frontend 3.5.29
User Frontend 3.5.28
User Frontend 3.5.27
202114 releases
User Frontend 3.5.26
User Frontend 3.5.25
User Frontend 3.5.22
User Frontend 3.5.21
User Frontend 3.5.20
User Frontend 3.5.19
User Frontend 3.5.18
User Frontend 3.5.17
User Frontend 3.5.16
User Frontend 3.5.15
User Frontend 3.5.14
User Frontend 3.5.13
User Frontend 3.5.12
User Frontend 3.5.11
202019 releases
User Frontend 3.5.10
User Frontend 3.5.9
User Frontend 3.5.8
User Frontend 3.5.7
User Frontend 3.5.6
User Frontend 3.5.5
User Frontend 3.5.4
User Frontend 3.5.3
User Frontend 3.5.2
User Frontend 3.5.1
User Frontend 3.5.0
User Frontend 3.4.0
User Frontend 3.3.1
User Frontend 3.3.0
User Frontend 3.2.0
User Frontend 3.1.18
User Frontend 3.1.17
User Frontend 3.1.16
User Frontend 3.1.15
201917 releases
User Frontend 3.1.14
User Frontend 3.1.13
User Frontend 3.1.12
User Frontend 3.1.11
User Frontend 3.1.10
User Frontend 3.1.9
User Frontend 3.1.8
User Frontend 3.1.7
User Frontend 3.1.6
User Frontend 3.1.5
User Frontend 3.1.4
User Frontend 3.1.3
User Frontend 3.1.2
User Frontend 3.1.1
User Frontend 3.1.0
User Frontend 3.0.2
User Frontend 3.0.1
201817 releases
User Frontend 3.0.0
User Frontend 2.9.4
User Frontend 2.9.3
User Frontend 2.9.2
User Frontend 2.9.1
User Frontend 2.9.0
User Frontend 2.8.10
User Frontend 2.8.9
User Frontend 2.8.8
User Frontend 2.8.7
User Frontend 2.8.6
User Frontend 2.8.5
User Frontend 2.8.4
User Frontend 2.8.3
User Frontend 2.8.2
User Frontend 2.8.1
User Frontend 2.8.0
201717 releases
User Frontend 2.7.0
User Frontend 2.6.1
User Frontend 2.6.0
User Frontend 2.5.8
User Frontend 2.5.7
User Frontend 2.5.6
User Frontend 2.5.5
User Frontend 2.5.3
User Frontend 2.5.2
User Frontend 2.5.1
User Frontend 2.5
User Frontend 2.4.4
User Frontend 1.1
User Frontend 2.4.3
User Frontend 2.4.2
User Frontend 2.4.1
User Frontend 2.4
Questions about User Frontend’s releases
What is the latest version of User Frontend?
4.3.14, released on Oct 28, 2026 (1 week ago). It’s tested up to WordPress 7.1.4 and needs PHP 7.4 or later.
How often is User Frontend updated?
24 releases in the last year, about one every 15 days. Its first release on WordPress.org dates from January 2017.
Know when your rivals ship
Track your plugin and its rivals: TrackWP sees each new release in the nightly snapshot and alerts you, with what it did to their rank.
Start freeRelease dates come from the day each version’s folder was made in User Frontend’s WordPress.org SVN repository; the notes from its readme’s changelog, as its authors wrote it.