Ultimate Member
Depends
Confidence: Medium
Free core suits hobby communities and simple member directories on low-stakes WordPress sites.
New check
Comparison
Ultimate Member and Paid Memberships Pro both land on Depends.
Free core suits hobby communities and simple member directories on low-stakes WordPress sites.
Buy if you run WordPress and need gated content with Stripe/PayPal subscriptions, and you will keep the plugin patched.
| Compare | Ultimate Member | Paid Memberships Pro |
|---|---|---|
| Verdict | Depends | Depends |
| Best for | WordPress community sites with user profiles | WordPress sites selling memberships |
| Who it's not for | Paid membership businesses . security track record is disqualifying | Non-WordPress projects |
| Privacy | Poor: six-plus CVEs from 2022-2026, including an actively exploited authentication bypass (CVE-2023-3460).⁵ | Multiple public CVEs (SQLi, CSRF, auth bypass) across 2023-2026; patching discipline is mandatory. |
| Support quality | Forum-based; threads show unresolved issues | No user support evidence in sources |
| Public sentiment | support threads report the plugin breaking on some WordPress versions, login sessions failing, and complaints about paid-extension pricing.⁹ | WordPress reviewers rate it well, but Reddit threads flag fee changes and its exit from the repo.15 |
| Biggest gotcha | CVE-2023-3460 auth bypass was actively exploited as a zero-day; patch fast or get hacked⁴ | Repeated CVEs (SQLi, CSRF, auth bypass) mean slow patching is genuinely risky |