WPCOM Member

by Lomu

View on WordPress.org

61 Quality Score

Active Installs

14/30

With only 1,000 active installs and no ratings, the plugin has minimal traction in the wider WordPress ecosystem.

Update Freshness

25/25

It was updated within days of this assessment, which keeps the maintenance score at full marks.

User Rating

0/15

Zero ratings out of zero submitted gives no signal at all about user satisfaction.

Support Health

8/15

No public support threads have been opened, so the 50% score reflects an untested support channel rather than a proven one.

WP Compatibility

15/15

It is tested up to WordPress 7.0.1 and requires PHP 7.4, so modern stack compatibility is solid.

Scores higher than 9% of indexed plugins

About

WPCOM Member - User profile & membership plugin for WordPress

Active Installs 1k+

Rating 0/5

Last Updated 2026-07-26 2:23pm GMT

Requires WordPress 6.2+

Tested Up To 7.0.4

Requires PHP 7.4+

Security History

7 known vulnerabilities, all patched

2 Critical 4 High 1 Medium

Most recent: December 15, 2025

View details ▸

WPCOM Member <= 1.7.16 - Authentication Bypass via Weak OTP High

December 15, 2025 Patched in ["1.7.17"] CVE-2025-14002

WPCOM Member <= 1.7.14 - Authenticated (Contributor+) Local File Inclusion via Shortcode High

October 31, 2025 Patched in ["1.7.15"] CVE-2025-11920

WPCOM Member <= 1.7.7 - Authenticated (Contributor+) Local File Inclusion High

April 16, 2025 Patched in ["1.7.8"] CVE-2025-39570

WPCOM Member <= 1.7.6 - Unauthenticated Time-Based SQL Injection High

March 13, 2025 Patched in ["1.7.7"] CVE-2025-2221

WPCOM Member <= 1.7.5 - Authentication Bypass via 'user_phone' Critical

March 6, 2025 Patched in ["1.7.6"] CVE-2025-1475

WPCOM Member <= 1.5.4 - Reflected Cross-Site Scripting Medium

September 30, 2024 Patched in ["1.5.4.1"] CVE-2024-47378

WPCOM Member <= 1.5.2.1 - Unauthenticated Privilege Escalation via User Meta Critical

September 6, 2024 Patched in ["1.5.3"] CVE-2024-7493

What It Does

WPCOM Member is a Chinese-developed user profile and membership plugin for WordPress that provides registration, login, and member management features. It is maintained by WPCOM, a Chinese hosting provider, and is primarily documented for that market.

Who It's For

This plugin is best suited for site owners running Chinese-language WordPress sites on WPCOM-style hosting who need a basic front-end user centre. It works for small communities or internal sites where simple profile and membership handling is enough.

Who Should Skip It

Anyone running an English-language production site, an e-commerce store, or a paid subscription business should skip this plugin given the lack of ratings, no trackable support history, and significantly more mature alternatives in the same category.

The Bottom Line

WPCOM Member delivers the basics on paper and is freshly maintained, but the complete absence of ratings, support history, and English documentation makes it a risky choice for any non-Chinese audience. For a score of 60.93/100, the safer bet for almost everyone is Ultimate Member or User Registration.

Related Plugins

Ultimate Member 90/100

Pick Ultimate Member if you want a polished, battle-tested profile and membership system with 200,000 installs and a large community.

User Registration & Membership 89/100

Choose User Registration when you need a drag-and-drop form builder and built-in paid membership tiers.

Paid Membership Subscriptions 86/100

Go with Paid Member Subscriptions if recurring payments and Stripe or PayPal integration are core requirements.

Simple Membership 83/100

Simple Membership is a better fit when you want straightforward content restriction without a heavy form builder.

Content Control 83/100

Content Control is the right pick if your main need is restricting page or block content rather than building full user profiles.