If you've been using our WordPress plugins over the years, you may have noticed things went quiet for a while. That changes today. We're actively maintaining our plugin catalog again — and we're kicking things off with three releases in one day.
Our user registration plugin (formerly "WP Member Registration") received a security fix that stops a role-injection attack on the registration form: user-supplied fields can no longer set roles or capabilities during signup. Role assignment now happens exclusively through the plugin's own controlled logic.
If you use MemberHero, update to 6.9 now. Security researcher Khaled Alenazi (Nxploited) reported the issue responsibly — thank you.
Along with the fix, the plugin has a new name and a new look: MemberHero. Same plugin, same features — Ajax registration, login, and front-end profiles with unlimited custom fields — now under the brand it deserves.
The plugin that lets you manage WooCommerce products and categories straight from Google Sheets™ got a maintenance release: a fix for the plugin listing metadata that broke in 9.6, and verified compatibility with WordPress 7.0.
If you manage a store with hundreds or thousands of products, this is the tool that turns bulk updates from an afternoon of clicking into a single sync from a spreadsheet.
Our plugin for adding custom fields to WordPress comment forms hadn't seen an update since early 2024. It's now verified with WordPress 7.0, and the plugin listing got a cleanup and a completely new visual identity.
All three plugins now share a clean, modern brand family on WordPress.org — you'll recognize them instantly in the plugin directory. More of our catalog will get the same treatment in the coming weeks.
Two things are coming:
All releases are live on WordPress.org:
You can update directly from your WordPress dashboard. Questions or issues? Reach out through the support forums or contact us — we're listening again.
