描述
User Profile & Membership Plugin for WordPress
The ultimate user profile & membership plugin for WordPress. The plugin makes it a breeze for users to sign-up and become members of your website. The plugin allows you to add beautiful user profiles to your site and is designed for creating advanced online communities and membership sites. Lightweight and highly extendible, Ultimate Member will enable you to create almost any type of site where users can join and become members with absolute ease.
该插件的功能包括:
- 前端用户个人资料
- 前端用户注册
- 前端用户登录
- 自定义表单字段
- 表单字段的条件逻辑
- 拖放表单生成器
- 用户帐户页面
- 自定义用户角色
- 会员目录
- 用户电子邮件
- 内容限制
- 有条件的导航菜单
- 在用户资料中显示作者的文章与评论
- Developer friendly with dozens of actions and filters
Read about all of the plugin’s features at Ultimate Member
付费扩展
Ultimate Member has a range of extensions that allow you to extend the power of the plugin. You can purchase all of these extensions at a significant discount with one of our paid plans or you can purchase extensions individually.
- Zapier – Allow to integrate the Zapier popular apps with Ultimate Member
- Stripe – Sell paid memberships to access your website via Stripe subscriptions
- User Notes – Allow users to create public and private notes from their profile
- Profile Tabs – Allow to add the custom tabs to profiles
- 用户位置-允许在会员目录页面的地图上显示用户,并允许用户通过其个人资料添加位置
- Unsplash允许用户从取消屏蔽中选择个人资料封面照片 从他们的个人资料
- 用户书签-允许用户为您网站中的内容添加书签
- 用户照片-允许用户将照片上传到他们的个人资料
- 网上论坛-允许用户围绕共享的主题,兴趣等来创建和加入网上论坛。
- 私有内容-向登录用户显示私有内容,只有他们才能访问
- User Tags – Lets you add a user tag system to your website
- Social Activity – Let users create public wall posts & see the activity of other users
- WooCommerce – Allow you to integrate WooCommerce with Ultimate Member
- Private Messages – Add a private messaging system to your site & allow users to message each other
- Followers – Allow users to follow each other on your site and protect their profile information
- Real-time Notifications – Add a notifications system to your site so users can receive real-time notifications
- Social Login – Let users register & login to your site via Facebook, Twitter, G+, LinkedIn, Instagram and Vkontakte (VK.com)
- bbPress – With the bbPress extension you can beautifully integrate Ultimate Member with bbPress
- MailChimp – Allow users to subscribe to your MailChimp lists when they signup on your site and sync user meta to MailChimp
- User Reviews – Allow users to rate & review each other using a 5 star rate/review system
- Verified Users – Add a user verification system to your site so user accounts can be verified
- myCRED – With the myCRED extension you can integrate Ultimate Member with the popular myCRED points management plugin
- Notices – Alert users to important information using conditional notices
- Profile Completeness – Encourage or force users to complete their profiles with the profile completeness extension
- Friends – Allows users to become friends by sending & accepting/rejecting friend requests
免费扩展
- JobsBoardWP – This free extension integrates Ultimate Member with the job board plugin JobBoardWP.
- ForumWP -此免费扩展将Ultimate Member与论坛插件 ForumWP集成在一起 。
- Terms & Conditions – Add a terms and condition checkbox to your registration forms & require users to agree to your T&Cs before registering on your site.
- Google reCAPTCHA – Stop bots on your registration & login forms with Google reCAPTCHA
- Online Users – Display what users are online with this extension
主题
我们的官方主题专为已登录和注销用户的网站而构建。 主题与Ultimate Member插件和扩展进行了深度集成,为登录/注销用户提供了不同的标头设计,并与Beaver Builder一起使用 和Elementor页面构建器。
Our other plugins
In addition to Ultimate Member, we also have two other plugins: ForumWP and JobBoardWP.
ForumWP
ForumWP is a forum plugin which adds an online forum to your website, allowing users to create topics and write replies. Forums are a great way to build and grow an online community.
JobBoardWP
JobBoardWP is a job board plugin which adds a modern job board to your website. Display job listings and allow employers to submit and manage jobs all from the front-end.
发展*翻译
If you’re a developer and would like to contribute to the source code of the plugin you can do so via our GitHub Repository.
Want to add a new language to Ultimate Member? Great! You can contribute via translate.wordpress.org.
If you are a developer and you need to know the list of UM Hooks, make this via our Hooks Documentation or Hooks Documentation v2.
If you are a developer and you need to know the structure of our code, make this via our Documentation API.
文档和支持
Got a problem or need help with Ultimate Member? Head over to our documentation and perform a search of the knowledge base. If you can’t find a solution to your issue then you can create a topic on the support forum.
区块
该插件提供了 4 个区块.
- Form Choose display form
- Member Directory Choose display directory
- Account Displaying the account page of the current user
- Password Reset Displaying the password reset form
安装
- 激活插件。
- 就是这样。进入终极会员>自定义插件选项设置
- 有关更多详细信息,请访问官方的文档页面。
常见问题
-
我需要知道任何编码才能使用此插件吗?
-
不,我们构建的Ultimate Member非常易于使用,不需要您手动构建短代码或具有任何编码知识。
-
终极会员支持移动响应吗?
-
是。 Ultimate Member旨在很好地适应任何屏幕分辨率。 它包括针对手机,平板电脑和台式机的特定设计。
-
终极会员是否兼容多站点?
-
是。 Ultimate Member在单站点和多站点WordPress安装上都可以很好地工作。
-
插件可以使用任何WordPress主题吗?
-
Yes. Ultimate Member will work with any properly coded theme. However, some themes may cause conflicts with the plugin. If you find a styling issue with your theme please create a post in the community forum.
-
插件可以与缓存插件一起使用吗?
-
The plugin works with popular caching plugins by automatically excluding Ultimate Member pages from being cached. This ensures other visitors to a page will not see the private information of another user. However, if you add features of Ultimate Member to other pages you have to exclude those pages from being cached through your cache plugin settings panel.
-
Does Ultimate Member restrict access to wp-login.php when the plugin is active?
-
The plugin does not restrict access to the wp-login.php page when active, so that our plugin does not interfere with the existing functionality of a website or other plugins that may utilise the default login page. If you wish to restrict access to the wp-login.php page you can use a plugin such as WPS Hide Login or another plugin that removes the ability to login via wp-login.php.
-
Are Ultimate Member Login/Registration pages required?
-
No, you do not need to use our plugin’s login or registration pages and can use another plugin or the default WordPress methods for user registration and login.
-
Are additional PHP modules necessary for the plugin to work correctly?
-
No specific extensions are needed. But we highly recommended keep active these PHP modules:
mbstring
,json
,dom
,exif
,gd
,fileinfo
,curl
,iconv
. wp-admin > Tools > Site Health page has a summary about your installation and required modules. All major extensions are listed here.
评价
贡献者及开发者
「Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin」是开源软件。 以下人员对此插件做出了贡献。
贡献者「Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin」插件已被翻译至 27 种本地化语言。 感谢所有译者为本插件所做的贡献。
对开发感兴趣吗?
更新日志
Important:
IMPORTANT: PLEASE UPDATE THE PLUGIN TO AT LEAST VERSION 2.6.7 IMMEDIATELY. VERSION 2.6.7 PATCHES SECURITY PRIVILEGE ESCALATION VULNERABILITY. PLEASE SEE THIS ARTICLE FOR MORE INFORMATION
2.10.5 2025-06-25
Enhancements
- Added: Filter hook
um_password_reset_form_primary_btn_classes
for primary button classes in UM Password Reset form. - Added: Filter hook
um_login_form_primary_btn_classes
for primary button classes in UM Login form. - Added: Filter hook
um_register_form_primary_btn_classes
for primary button classes in UM Registration form. - Tweak: Refactored Site Health data, added hooks for 3rd-party integration.
- Tweak: Avoid using
um_user( 'password_reset_link' )
and make it directly withUM()->password()->reset_url( $user_id )
for getting a proper reset URL. - Tweak: Avoid using
um_user( 'account_activation_link' )
and make it directly withUM()->permalinks()->activate_url( $user_id )
for getting a proper activation URL.
Bugfixes
- Fixed: Stripped shortcodes in the user data during the Account, Registration and Profile forms submission. (Thanks to MissVeronica)
- Fixed: Email placeholders values.
- Fixed: Refactor deactivation logic to un-schedule Action Scheduler actions.
- Fixed: Action Scheduler library errors. Updated to the recent 3.9.2 version.
- Fixed: Secondary email field validation.
- Fixed: Action Scheduler batch actions with users who have Undefined status.
- Fixed: Restrictions for 3rd-party Gutenberg Blocks.
- Fixed: Date/time picker filter-types range query on Member Directories.
- Fixed: Renamed “Macedonia, the former Yugoslav Republic of” to the official “North Macedonia”.
Deprecated
- Fully deprecated
account_activation_link_tags_patterns( $placeholders )
function. It’s not used previously. Used email function arguments instead. - Fully deprecated
account_activation_link_tags_replaces( $replace_placeholders )
function. It’s not used previously. Used email function arguments instead. - Fully deprecated
UM()->profile()->add_placeholder()
function. Used email function arguments instead. - Fully deprecated
UM()->profile()->add_replace_placeholder()
function. Used email function arguments instead. - Fully deprecated
UM()->user()->add_activation_placeholder()
function. Used email function arguments instead. - Fully deprecated
UM()->user()->add_activation_replace_placeholder()
function. Used email function arguments instead. - Deprecated
UM()->user()->maybe_generate_password_reset_key( $userdata )
function. UseUM()->common()->users()->maybe_generate_password_reset_key( $userdata )
instead. - Deprecated
UM()->user()->set_last_login()
function. UseUM()->common()->users()->set_last_login( $user_id )
instead.
Templates required update
- password-reset.php
Cached and optimized/minified assets(JS/CSS) must be flushed/re-generated after upgrade
2.10.4 2025-05-15
Bugfixes
- Fixed: Security issue CVE ID: CVE-2025-47691. Used “sniccowp/php-scoper-wordpress-excludes” for getting the recent WordPress functions list and added them to the dynamic blacklist based on the WordPress version.
- Fixed: The Action Scheduler action
um_set_default_account_status
. Case when some users were approved manually or deleted, and we need to reset the admin notice. Addederror_log()
to the wrong conditions. - Fixed: Reset Password request from not a predefined password reset page. It’s possible to submit reset password form sitewide using block or shortcode.
- Fixed: Setting ‘Allow users to change email’ for the Account page. It works now for any role instead of only the roles with ‘Can edit other member accounts?’ capability enabled.
2.10.3 2025-04-24
Enhancements
- Added: The
Ignore the "User Role > Registration Options"
setting. It provides an ability to auto-approve users if they were created via wp-admin > Users screen. - Tweak: Avoid email notifications to Administrator about user registration via wp-admin > Users screen.
- Tweak: Updated the Action Scheduler implementation to improve flexibility and clarity. Refactor Action Scheduler for not only email handling.
Bugfixes
- Fixed: Member Directory styles when it’s rendered on the Gutenberg builder page.
- Fixed: Member Directory filtering query when the custom users metatable is used.
- Fixed: PHP Warning that occurs when using the
getimagesize
function with an image from an external source. - Fixed: Reset Password email notification’s the {password_reset_link}` placeholder.
- Fixed: Changed “Turkey” to the current official term “Türkiye”.
Cached and optimized/minified assets(JS/CSS) must be flushed/re-generated after upgrade
2.10.2 2025-04-02
Enhancements
- Added:
UM()->common()-filesystem()::maybe_init_wp_filesystem();
method. - Added:
UM()->common()-filesystem()::remove_dir();
method.
Bugfixes
- Fixed: Security issue CVE ID: CVE-2025-1702. Reviewed general search scripts and suggested another solution that uses only
$wpdb->prepare()
.
2.10.1 2025-03-03
Bugfixes
- Fixed: Security issue CVE ID: CVE-2025-1702.
- Fixed: Activation link redirects to Reset Password after registration without password field and required email activation.
- Fixed: Honeypot scripts/styles for themes without pre-rendered shortcodes. Enqueue honeypot scripts/styles everytime.
- Fixed: Profile photo metadata when Gravatar image is used.
Cached and optimized/minified assets(JS/CSS) must be flushed/re-generated after upgrade
2.10.0 2025-02-18
Enhancements
- Added: User Profile
form-id
attribute and updated code for Profile/Cover photos actions dropdowns. - Added: Honeypot scripts/styles via
wp_add_inline_script()
,wp_add_inline_style()
changed from direct adding in header and footer. - Updated: We’ve made improvements to requests for extension updates to boost stability.
- Updated: PHP requirement – the minimum PHP version is now upgraded to 7.0.
- Updated: Using $wpdb and WPCS for queries. Set minimum required version to 6.2 due to using %i for
$wpdb->prepare()
. - Updated: Revised wp-admin user actions handling. Now, the required capability is
edit_users
instead ofmanage_options
. - Removed: User Profile hidden inputs on view mode.
- Tweak: WPCS enhancements.
Bugfixes
- Fixed: Security issue CVE ID: CVE-2024-12276.
- Fixed: Custom usermeta table metakeys for filtering in member directory (from
_money_spent
towc_money_spent_
and addedwc_order_count_
). - Fixed: Layout for “Download your data” and “Erase of your data” fields.
- Fixed: Image sizes used for Open Graph meta in User Profile headers are now corrected.
- Fixed: “Delete account text” settings visibility issue in wp-admin.
- Fixed: The “Privacy Policy” field in the registration form. Disallowed HTML from the “Privacy Policy” content (like
<form>
) is filtered out by thewp_kses()
function. - Fixed: Password fields are now sanitized the WordPress native way, with
wp_unslash()
omitted post-submission.
Templates required update
- gdpr-register.php
- profile.php
Cached and optimized/minified assets(JS/CSS) must be flushed/re-generated after upgrade