Limited-Time Offer

Get Extra 20% off on FullCharge Yearly Plan — available for first 10 users only. Don’t miss out! 🚀

TrackWP

WP User Manager · Version history

WP User Manager changelog and version history

Latest version
2.10.5
Nov 1, 2026 (8 days ago)
Releases
133
since 2015
In the last year
20
about one every 17 days
Tested up to
WordPress 7.1.4
PHP 7.4 or later

Releases each year

  • 20159 releases
  • 20169 releases
  • 20171 release
  • 201810 releases
  • 201916 releases
  • 202021 releases
  • 202111 releases
  • 202219 releases
  • 202313 releases
  • 20243 releases
  • 20252 releases
  • 202619 releases

202619 releases

  1. WP User Manager 2.10.5Latest

    • Security: The login form always checks the login details before signing in

  2. WP User Manager 2.10.4

    • Security: Directory search only looks in display names and the directory’s search fields (thanks to kta1kri for responsible disclosure)
    • Security: Directory sorting only accepts the listed sort methods
    • Security: Profile links no longer contain email addresses
    • Improvement: Obfuscate Display Name Emails is on for new installs, and covers the Display Name and Nickname profile fields
    • Improvement: Admins are told if users have an email address as their display name

  3. WP User Manager 2.10.3

    • Security: Profile field values are now always escaped when shown (thanks to Wordfence PRISM for responsible disclosure)

  4. WP User Manager 2.10.2

    • New: Text tab in the email editor, for editing an email’s HTML directly
    • New: Send WP User Manager’s password reset email from the Users list
    • New: Send logged in users away from the login and registration pages (Settings > Redirects > Logged In Users)
    • Tweak: The Stripe webhook setting says to choose the Snapshot payload format, and warns when Stripe sends Thin events
    • Fix: Stripe products beyond the first 100, and prices beyond the first 10, are now listed
    • Fix: The Fetch Stripe Products button now shows when there is only one product
    • Fix: Paying for a Stripe price that has since been archived no longer causes a fatal error
    • Fix: Application passwords now work for non-admins when login is set to Email only or Username only

  5. WP User Manager 2.10.1

    • Security: “Prevent site access to visitors” can no longer be bypassed by sending the login form’s field names to a page (thanks to mroccon via Patchstack for responsible disclosure)

  6. WP User Manager 2.10.0

    • New: Rename roles from the Roles screen
    • New: {login_page_link} and {recovery_link} email tags output a clickable link
    • New: Admins see a notice when a PHP extension the plugin needs is missing
    • Security: Stripe Connect checks the site started a connection before handing over its keys
    • Security: Disconnecting Stripe also removes the connection from the Stripe Connect service
    • Tweak: {login_page_url} and {recovery_url} now output the plain URL, for use in your own links and buttons. Existing emails are updated to keep their links
    • Tweak: New installs hide the Email field on public profiles
    • Tweak: The login, registration, password, account and profile pages are no longer indexed by search engines
    • Tweak: Logged in visitors to the login page are sent to its redirect_to address
    • Tweak: The Stripe Eligible Products setting describes what it does
    • Fix: A Stripe subscription moved to a plan the member can’t choose no longer gives paid access
    • Fix: Upgrading in the Stripe customer portal keeps paid access
    • Fix: Radio groups no longer pre-select the first option
    • Fix: Fields that never show a placeholder no longer offer the Placeholder setting
    • Fix: Fatal error when the stored email settings were not in the expected format

  7. WP User Manager 2.9.26

    • Security: Customers who haven’t paid for a Stripe plan stay restricted when Stripe isn’t connected (thanks to Charles Vosburgh via WPScan for responsible disclosure)
    • Security: Registration forms with Stripe products no longer accept registrations while Stripe isn’t connected
    • Fix: Duplicate default registration forms are no longer created on first activation
    • Fix: WP User Manager form pages are kept out of page and browser caches
    • Fix: Menu item settings no longer query the database for every item
    • Fix: The Stripe plan choice on registration forms has a label, and billing amounts show to the cent

  8. WP User Manager 2.9.25

    • Security: “Prevent site access to visitors” can no longer be bypassed with a URL that only looks like a REST API request (thanks to Truebird via Patchstack for responsible disclosure)
    • Security: With site access prevented, the password reset page’s child pages are no longer open to visitors
    • Fix: With plain permalinks and site access prevented, REST API requests such as the Stripe webhook are no longer redirected to the login page

  9. WP User Manager 2.9.24

    • Fix: A Stripe API error, such as a rate limit or outage, no longer causes a critical error. The last product list fetched from Stripe is used until Stripe responds again
    • Fix: Connecting or disconnecting a Stripe account clears the previous account’s products
    • Enhancement: Stripe Connect checkout requests are signed with your connected account’s key. If the Connect service can’t verify them, the Stripe settings explain what to do

  10. WP User Manager 2.9.23

    • Security: Stripe payments only count towards the plans a customer registered for. The Billing tab and checkout offer only those plans, and a payment for any other price no longer marks the customer’s plan as paid (thanks to Atia Avela via Patchstack for responsible disclosure)
    • Security: Content restricted to a Stripe product is only shown once that product is paid for, or its subscription is active
    • Fix: New Stripe subscriptions are active straight away, instead of only after a later update from Stripe
    • Fix: Connecting to Stripe could fail with “This Stripe connection request has expired” if the site made other requests while you were on Stripe
    • Fix: The Stripe Billing plans template now hides prices that aren’t offered

  11. WP User Manager 2.9.22

    • New: Form Styles setting (Users > Settings > General > Misc Settings) adds basic styles to WP User Manager forms. On by default for new installs and for sites using a block theme
    • New: Support link on the Plugins screen
    • New: wpum_field_datepicker_disable_mobile filter, to use the device’s native date input on mobile instead of the calendar
    • Fix: With “Prevent site access to visitors” on, logged-out visitors can no longer read content through the REST API. Use the wpum_prevent_entire_site_rest_allowed_routes filter to open specific routes
    • Fix: Emails with no saved subject are no longer sent with a blank subject line
    • Fix: Emails missing from saved settings (including password recovery and the admin new registration notice) now send using the defaults
    • Fix: Responsive column classes (wpum-col-sm-*, wpum-col-md-* and wpum-col-lg-*) now apply. If you added CSS to work around them, check your layouts
    • Fix: Date fields open the calendar on mobile devices and show the site’s date format
    • Fix: The registration forms admin screen lists every form, not just the first 20
    • Fix: The ACF settings metabox and the Elementor registration form widget list every registration form
    • Fix: “Translation loading triggered too early” notices for Groups and Social Login caused by the addon version check

  12. WP User Manager 2.9.21

    • Security: Accounts with an outstanding Stripe payment are limited to read access across the site, including wp-admin, the REST API and admin-ajax (thanks to Pedro Delgado via Patchstack for responsible disclosure)
    • Security: Role-restricted content, Elementor widgets and profile fields treat accounts with an outstanding Stripe payment as having no role
    • Tweak: Members whose Stripe subscription has lapsed also lose their role’s capabilities until they pay. Use the wpum_stripe_restrict_unpaid_capabilities filter to keep the previous behaviour

  13. WP User Manager 2.9.20

    • Security: Stripe registration only accepts the plans configured on the registration form (thanks to Patchstack for the follow-up review)
    • Security: Stripe Connect callback is now tied to the administrator who started the connection
    • Security: One-time Stripe plans are only marked as paid once Stripe confirms the payment
    • Security: Hardened addon version check, license requests, file field output and bundled Carbon Fields AJAX actions
    • Fix: One-time Stripe payments not being marked as paid
    • Fix: Fatal error when downloading Stripe invoices
    • Fix: Customers who abandoned a one-time Stripe checkout had no way to pay
    • Fix: Addon licenses entered since 2.9.14 not activating
    • Tweak: Removed unused Carbon Fields source files from the plugin package

  14. WP User Manager 2.9.19

    • Security: Enforced server-side Stripe plan validation on registration (thanks to Ananda Dhakal via Patchstack for responsible disclosure)
    • Security: Added authorization check to Stripe Connect callback (thanks to Wordfence PRISM for responsible disclosure)
    • Enhancement: Added “Fetch Stripe Products” button to Stripe settings
    • Enhancement: Stripe product webhook handlers to auto-sync product cache
    • Enhancement: Filter Stripe API queries to active products and prices only
    • Enhancement: Generic login error messages setting to prevent username enumeration
    • Fix: PHP 8 fatal in avatar cache key when $id_or_email is an object

  15. WP User Manager 2.9.18

    • Security: Hardened profile tab input validation (thanks to Yat via Wordfence for responsible disclosure)
    • Fix: Custom avatar not shown when a default avatar is also configured
    • Fix: Multiple roles not saving on the admin edit user page
    • Fix: Email content editor for ‘Delete Inactive Accounts’ not working with block themes

  16. WP User Manager 2.9.17

    • Security: Hardened file field input validation during registration (thanks to endy via Patchstack for responsible disclosure)

  17. WP User Manager 2.9.16

    • Fix: PHP 8.2+ dynamic property deprecation warnings in WPUM_Field
    • Fix: Account update no longer fails when avatar or cover image file is missing from disk
    • Fix: Password recovery now works when the username is an email address different from the stored email
    • Fix: Multicheckbox and multiselect fields no longer cause errors when the stored value is not an array

  18. WP User Manager 2.9.15

    • Fix: User role multiselect was disabled on the admin user profile after Carbon Fields upgrade

  19. WP User Manager 2.9.14

    • Improvement: Updated Brain\Cortex routing library for PHP 8.3 compatibility
    • Improvement: Upgraded Carbon Fields to a version compatible with PHP 8.1-8.3
    • Fix: Translation loading now uses the correct hook for WordPress 6.7+ compatibility
    • Improvement: Minimum PHP version raised from 7.2 to 7.4

20252 releases

  1. WP User Manager 2.9.13

    • Security: Fixed authenticated arbitrary file deletion vulnerability in custom avatar and cover image handling (Thanks to YC_Infosec via Wordfence)
    • Security: Fixed a PHP Object Injection vulnerability in the user nickname profile field (Thanks to Nguyen Ngoc Quang Bach (maysbachs) via Patchstack)

  2. WP User Manager 2.9.12

    • Security: Missing authorization to authenticated check for the unique usermeta key check when editing a field (Thanks to Tieu Pham Trong Nhan)
    • Security: Carbon Field sidebar AJAX action handlers removed which are not used but posed a CSRF security risk (Thanks to BrokenAC)

20243 releases

  1. WP User Manager 2.9.11

    • Security: Nonce check added to the admin action of fixing old plugin data

  2. WP User Manager 2.9.10

    • Improvement: + and other characters no longer accepted in username at registration
    • Fix: Required checkboxes field hidden with conditional logic incorrectly requires all boxes to be checked
    • Fix: Registration form duplicate id attribute HTML issues
    • Tested with WordPress 6.5

  3. WP User Manager 2.9.9

    • Fix: Stripe subscriptions not connecting to user correctly
    • Fix: Password field not allowing special characters

202313 releases

  1. WP User Manager 2.9.8

    • Fix: Unable to add new WPUM Blocks or edit existing ones
    • Fix: PHP 8.1 and 8.2 notices
    • Fix: Redirect loop when preventing access to the site unless logged in for sites installed in a subdirectory
    • Fix: Unable to submit WPUM forms as Elementor widgets
    • Fix: Displayed Stripe product prices incorrectly rounded to whole numbers
    • Fix: REST API endpoints not accessible when preventing access to the site unless logged in
    • Fix: Unable to remove all “Allowed Roles” in the custom field permissions tab
    • Fix: Unable to add blocks for the Likes, Private Content, and Social Login addons
    • Fix: Unable to delete custom role

  2. WP User Manager 2.9.7

  3. WP User Manager 2.9.6

  4. WP User Manager 2.9.5

  5. WP User Manager 2.9.4

  6. WP User Manager 2.9.3

  7. WP User Manager 2.9.2

  8. WP User Manager 2.9.1

  9. WP User Manager 2.9

  10. WP User Manager 2.8.19

  11. WP User Manager 2.8.18

  12. WP User Manager 2.8.17

  13. WP User Manager 2.8.16

202219 releases

  1. WP User Manager 2.8.15

  2. WP User Manager 2.8.14

  3. WP User Manager 2.8.13

  4. WP User Manager 2.8.12

  5. WP User Manager 2.8.11

  6. WP User Manager 2.8.10

  7. WP User Manager 2.8.9

  8. WP User Manager 2.8.8

  9. WP User Manager 2.8.7

  10. WP User Manager 2.8.6

  11. WP User Manager 2.8.5

  12. WP User Manager 2.8.4

  13. WP User Manager 2.8.3

  14. WP User Manager 2.8.2

  15. WP User Manager 2.8.1

  16. WP User Manager 2.8

  17. WP User Manager 2.7.2

  18. WP User Manager 2.7.1

  19. WP User Manager 2.7

202111 releases

  1. WP User Manager 2.6.9

  2. WP User Manager 2.6.8

  3. WP User Manager 2.6.7

  4. WP User Manager 2.6.6

  5. WP User Manager 2.6.5

  6. WP User Manager 2.6.4

  7. WP User Manager 2.6.3

  8. WP User Manager 2.6.2

  9. WP User Manager 2.6.1

  10. WP User Manager 2.6

  11. WP User Manager 2.5

202021 releases

  1. WP User Manager 2.4.2

  2. WP User Manager 2.4.1

  3. WP User Manager 2.4

  4. WP User Manager 2.3.13

  5. WP User Manager 2.3.12

  6. WP User Manager 2.3.11

  7. WP User Manager 2.3.10

  8. WP User Manager 2.3.9

  9. WP User Manager 2.3.8

  10. WP User Manager 2.3.7

  11. WP User Manager 2.3.6

  12. WP User Manager 2.3.5

  13. WP User Manager 2.3.4

  14. WP User Manager 2.3.3

  15. WP User Manager 2.3.2

  16. WP User Manager 2.3.1

  17. WP User Manager 2.3

  18. WP User Manager 2.2.3

  19. WP User Manager 2.2.2

  20. WP User Manager 2.2.1

  21. WP User Manager 2.2

201916 releases

  1. WP User Manager 2.1.14

  2. WP User Manager 2.1.13

  3. WP User Manager 2.1.12

  4. WP User Manager 2.1.11

  5. WP User Manager 2.1.10

  6. WP User Manager 2.1.9

  7. WP User Manager 2.1.8

  8. WP User Manager 2.1.7

  9. WP User Manager 2.1.6

  10. WP User Manager 2.1.5

  11. WP User Manager 2.1.4

  12. WP User Manager 2.1.3

  13. WP User Manager 2.1.2

  14. WP User Manager 2.1.1

  15. WP User Manager 2.1.0

  16. WP User Manager 2.0.9

201810 releases

  1. WP User Manager 2.0.8

  2. WP User Manager 2.0.7

  3. WP User Manager 2.0.6

  4. WP User Manager 2.0.5

  5. WP User Manager 2.0.4

  6. WP User Manager 2.0.3

  7. WP User Manager 2.0.2

  8. WP User Manager 2.0.1

  9. WP User Manager 2.0.0

  10. WP User Manager 1.4.3

20171 release

  1. WP User Manager 1.4.2

20169 releases

  1. WP User Manager 1.4.1

  2. WP User Manager 1.4.0

  3. WP User Manager 1.3.1

  4. WP User Manager 1.3.0

  5. WP User Manager 1.2.10

  6. WP User Manager 1.2.9

  7. WP User Manager 1.2.8

  8. WP User Manager 1.2.7

  9. WP User Manager 1.2.6

20159 releases

  1. WP User Manager 1.2.5

  2. WP User Manager 1.2.4

  3. WP User Manager 1.2.3

  4. WP User Manager 1.2.1

  5. WP User Manager 1.2.0

  6. WP User Manager 1.1.0

  7. WP User Manager 1.0.5

  8. WP User Manager 1.0.4

  9. WP User Manager 1.0.3

Questions about WP User Manager’s releases

What is the latest version of WP User Manager?

2.10.5, released on Nov 1, 2026 (1 week ago). It’s tested up to WordPress 7.1.4 and needs PHP 7.4 or later.

How often is WP User Manager updated?

20 releases in the last year, about one every 17 days. Its first release on WordPress.org dates from September 2015.

Know when your rivals ship

Track your plugin and its rivals: TrackWP sees each new release in the nightly snapshot and alerts you, with what it did to their rank.

Start free

Release dates come from the day each version’s folder was made in WP User Manager’s WordPress.org SVN repository; the notes from its readme’s changelog, as its authors wrote it.