UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP

1.2.79 – 2026-10-30

Dummy test users could be logged into using a public hash – FIXED/SECURITY

1.2.78 – 2026-10-28

A redirect_to with more than one query arg lost everything after the first on log in, log out, register and lost password links – FIXED

AJAX log in and register could redirect to another site through redirect_to; the redirect is now limited to allowed hosts, as for normal log in – FIXED/SECURITY

Setup wizard checkboxes buttons look unchecked on WordPress 7.0+ even when checked – FIXED

WP 2FA email verification code not sent and login button keeps spinning in login lightbox – FIXED

Update AUI 0.2.58 and SD 1.2.38 – CHANGED

1.2.77 – 2026-10-07

Fatal error during login 2FA on invalid code with themes that hook wp_login_failed – FIXED

1.2.76 – 2026-09-30

Arbitrary File Deletion via avatar/banner image crop – FIXED/SECURITY

1.2.75 – 2026-09-30

Login via modal/AJAX shows no error message when the account is not yet activated – FIXED

Update AUI 0.2.56 and SD 1.2.37 – CHANGED

1.2.74 – 2026-09-16

Update AUI 0.2.54 and SD 1.2.36 – CHANGED

1.2.73 – 2026-09-15

Privacy tab settings on the Account page now reflect immediately after saving, without needing to flush the object cache. – FIXED

Support for Wordfence 2FA in login form – ADDED

1.2.72 – 2026-08-18

Merge AUI 0.2.52 & SD 1.2.35 – CHANGED

1.2.71 – 2026-08-17

Arbitrary File Deletion via upload_file_remove() AJAX handler – FIXED/SECURITY

1.2.70 – 2026-08-03

Badge Widget Variable Substitution – FIXE