Login & Register Forms – Popup, Slider, Profile & WooCommerce icon

Login & Register Forms – Popup, Slider, Profile & WooCommerce

Replace standard login and registration forms with interactive popup and inline design options. With over 40,000 active installations, a 4.8/5 rating, and a PF Score of 88.3, this plugin ranks in the top 1% of the entire catalog.

Generated on 8 Jul 2026. Score and stats mentioned may differ from current live data.

  • #418 Global Rank
  • 40K+ active installs
  • 4.8/5 254 ratings
  • Good support 8 threads
  • Since 2018 8 years active

PF Score (About PF Scores)

PF Score is not a quality guarantee. It is a ranking based on available public signals.

Platinum88.1
Platinum
Gold
Silver
Bronze
Low

Score Breakdown

76.7
Popularity 40% 40K+ active installs
93.4
Reputation 35% 4.8★ from 254 ratings
98.8
Freshness 25% Updated 12 days ago

No active penalty — 4 historical CVEs, resolved — details

Download Trends

Loading download data…

Vulnerabilities

4 Total
4 Patched
0 Active
100% Resolved rate
CWE-862 · Missing Authorization

Multiple plugins for WordPress utilizing the XootiX Framework are vulnerable to unauthorized modification of data due to a missing capability check on the 'import_settings' function in various versions. This makes it possible for authenticated attackers, with Subscriber-level access and above, to change arbitrary options on affected sites. This can be used to enable new user registration and set the default role for new users to Administrator.

8.8 High Affected 2.7.1 – 2.7.2 Patched in ✓ 2.7.3 Published 5 Jun 2024 CVE CVE-2024-5324
CWE-862 · Missing Authorization

The Login/Signup Popup ( Inline Form + Woocommerce ) plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the ‘export_settings’ function in versions 2.7.1 to 2.7.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to read arbitrary options on affected sites.

4.3 Medium Affected 2.7.1 – 2.7.2 Patched in ✓ 2.7.3 Published 5 Jun 2024 CVE CVE-2024-5665
CWE-352 · Cross-Site Request Forgery (CSRF)

The Login/Signup Popup plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.3. This is due to missing nonce validation on the reset_settings() function. This makes it possible for unauthenticated attackers to reset the plugin's settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.

4.3 Medium Affected All – 2.4 Patched in ✓ 2.4 Published 26 Jun 2023
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The plugin Login/Signup Popup ( Inline Form + Woocommerce ) for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘tab’ parameter in versions up to, and including, 2.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.

6.1 Medium Affected All – 2.1 Patched in ✓ 2.2 Published 17 Nov 2021

Vulnerability data provided by Wordfence Intelligence (opens in a new tab). CVE data: Copyright 1999–2026 The MITRE Corporation. CVE Terms of Use (opens in a new tab).

Support Statistics

8 Support threads
6 Resolved
75% Resolution rate

About Login & Register Forms

Give your WordPress or WooCommerce website a modern login experience with beautiful, fast, and fully customizable forms.

🚀 Live Demo

Give your WordPress or WooCommerce website a modern login experience with beautiful, fast, and fully customizable forms.

✔ Login
✔ Registration
✔ Lost Password
✔ Reset Password
✔ User Profile

Choose how your forms appear:

⭐ Popup
⭐ Slider
⭐ Inline

No more redirecting users to the default WordPress login page. Keep visitors on your website with a smooth, AJAX-powered experience that helps increase registrations and conversions.

Perfect for WooCommerce stores, membership websites, online communities, LMS platforms, and business websites.

❤️ Why You’ll Love It

  • AJAX-powered forms (no page reloads)

  • Different layouts

  • Custom Field Manager

  • Flexible shortcodes

  • Beautiful & fully customizable design

  • WPML compatible

  • Lightweight, fast & developer friendly

Power Up with Add-ons

🌐 Social Login

Allow users to log in or register instantly using their favorite social accounts.

Supported providers

  • Google
  • Facebook
  • Apple
  • X (Twitter)
  • LINE

Perfect for increasing registrations and reducing signup abandonment.

🔐 OTP Login & Two-Factor Authentication (2FA)

Offer secure, passwordless authentication using one-time verification codes.

Features

  • Passwordless login via Email, SMS or WhatsApp OTP
  • Two-Factor Authentication (2FA)
  • Authenticator app support
  • Verify phone numbers during registration
  • Verify phone numbers during WooCommerce checkout
  • Reduce fake accounts and fraudulent orders

✉️ Email Verification & User Approval

Protect your website from fake registrations.

Verification methods

  • Verification Code
  • One-Click Verification Link
  • Manual User Approval

📝 Custom Registration Fields

Create registration forms tailored to your business.

Features

  • Unlimited custom fields
  • Text, Textarea, Select, Radio, Checkbox, File Upload and more
  • Display fields on User Profile
  • Display fields on WooCommerce My Account
  • Reuse WooCommerce billing & shipping fields

🛡️ Security

Protect your forms against spam, bots and brute-force attacks.

Includes

  • Google reCAPTCHA v2 & v3
  • Cloudflare Turnstile
  • Friendly Captcha (GDPR-friendly)
  • Password Strength Meter
  • Login Attempt Limiter

📍 Address Autocomplete

Automatically fill billing and shipping addresses using Google Places Autocomplete for faster checkout and more accurate customer information.

❤️ Built for Performance

Built with performance in mind, the plugin is lightweight, responsive and developer-friendly. It integrates seamlessly with both WordPress and WooCommerce while maintaining fast page loads and a smooth user experience.

Screenshots

Registration Form.

Registration Form.

Lost Password Form

Lost Password Form

Reset password form.

Reset password form.

Available registration Fields

Available registration Fields

Customizable Field

Customizable Field

General Settings 1

General Settings 1

General Settings 2

General Settings 2

Style Settings 1

Style Settings 1

Style Settings 2

Style Settings 2

Shortcodes

Shortcodes

Frequently Asked Questions

How to setup?
  1. Go to apperance->menus
  2. Under Login Popup Tab , select the desired option.
Shortcodes

Please check “How to use” tab under plugin settings for more information.

Use shortcode [xoo_el_pop] to include it anywhere on the website. ( See info tab in settings to know more )
[xoo_el_pop type=”login” display=”button” text=”Login” change_to=”logout” redirect_to=”same”]

For Inline form
[xoo_el_inline_form active=”login”]

You can also trigger popup using class.
Login – xoo-el-login-tgr
Register – xoo-el-reg-tgr
Lost Password – xoo-el-lostpw-tgr
For eg: Login

How to translate?
  1. Download PoEdit.
  2. Open the easy-login-woocommerce.pot file in PoEdit. (/plugins/easy-login-woocommerce/languages/
    easy-login-woocommerce.pot)
  3. Create new translation & translate the text.
  4. Save the translated file with name “easy-login-woocommerce-Language_code”. For eg: German(easy-login-woocommerce-de_DE)
    , French(easy-login-woocommerce-fr_FR). — Language code list
  5. Save Location: Your wordpress directory/wp-content/languages/
How to override templates?

Plugin template files are under templates folder.
Copy the template to your theme/templates/easy-login-woocommerce folder
If the template file is under sub directory, say in /globals folder then the copy directory will be
theme/templates/easy-login-woocommerce/globals/ For more info, check template header description

Ratings & Reviews

Recent Reviews

Loading reviews…

View all reviews on WordPress.org (opens in a new tab)

Changelog

4.0.2

  • Security – Hardened password-reset verification and abuse protections. Thanks to Artus KG and ryan fabella for responsibly reporting these issues.

4.0.1

  • Fix – Caching issue [nonce verification causing -1]
  • Fix – registration disabled option

4.0.0

  • New – [Profile Builder]
  • New – width attribute for inline forms

3.2.8

  • New – [Profile Builder] Allow users to update their data using shortcode [xoo_el_profile]

3.2.7

  • Fix – white page crash fix/ajax failing

3.2.6

  • Fix – some users faced issues with the login with recent update

3.2.5

  • Fix – Security related issue

3.2.4

  • Fix – error in recent update 3.2.2

3.2.3

  • OTP add-on crash fix on update

3.2.2

  • UI Improvements
  • Added option to create button themes

3.2.1

  • OTP add-on bug fix

3.2.0

  • Improved design
  • New – Login & register texts
  • New – Button Styling
  • Settings UI update

3.1.2

  • Fix – Astra theme styling

3.1.1

  • Fix – Autocomplete address settings not showing
  • Improved field design

3.1.0

  • Improved field design

3.0.4

  • Fix – core files update

3.0.3

  • Fix – compatibility with older safari versions

3.0.2

  • Fix – Reset password email not working for non-woocommerce users

3.0.1

  • Fix – auto opening of popup in 3.0.0

3.0.0

  • New – Reset password using verification code
  • UI – Improved fields layout

2.9.6

  • Settings UI Fix – image not loading

2.9.5

  • Patchstack vulnerability fix

2.9.4

  • Added option to replace woocommerce lost password form template

2.9.3

  • Settings UI update

2.9.2

  • Settings UI update

2.9.1

  • Fix – Form fields settings title fix

2.9.0

  • Form fields settings title improvement

2.8.9

  • Fix – translation missing
  • New – OTP add-on now supports Two factor authentication (2FA)

2.8.8

  • New – Replaced shortcode [xoo_el_action] with new shortcode [xoo_el_pop]

2.8.7

  • New – Enable Required (*) icon
  • New – Autocomplete address Field and add-on
  • Fix – URL stripping.
  • Fix – Woocommerce outdated template version

2.8.6

  • URL escaping in shortcode
  • Fix – Placeholder for country

2.8.5

  • Wordfence firewall compatiblitiy ( shows wordfence errors now)
  • Close popup by pressing escape button

2.8.4

  • New – Shortcode generator
  • Fix – URL endpoint not adding on registration

2.8.3

  • New Field – User role
  • Compatibility with paid membership pro plugin

2.8.2

  • New Field – Profile Picture

2.8.1

  • Fix – Deprecated warning in PHP 8.2

2.8

  • New – Profile builder add-on ( allow logged in users to update their profile fields )
  • Improved – File Upload field

2.7.9

  • Fix – WP Rocket recent update hiding popup

2.7.8

  • Fix – Mailpoet compatibility

2.7.7

  • New – Upload file field
  • New – Use firstname/lastname/username in shortcode [xoo_el_action]
  • New – Mailpoet compatibility
  • Fix – WPML shortcode compatibility

2.7.6

  • Fix – error for non-woocommerce users

2.7.5

  • New – added new redirect option – using URL. ?redirect_to=
  • New – Checkout block “login” link now opens the popup.
  • Fix – OTP Login add-on causing crash
  • Template update => xoo-el-login-section.php | xoo-el-register-section.php

2.7.4

  • New – Added separate shortcode option for woocommerce checkout page
  • Fix – Removed select2 library when not needed
  • Fix – woocommerce outdated template version notice

2.7.3

  • Fix – Security issue
  • Fix – Field label WPML compatibility.

2.7.2

  • Fix – Password reset link not working for non-woocommerce users & when “Handle reset password” option disabled.
  • Fix – Fields disappeared in 2.7.1

2.7.1

  • New – Import/Export settings option
  • Fix – Password eye toggle not working without icons.

2.7

  • New – Field styling options
  • New – Option to open popup using custom classes
  • New – Show custom fields under users profile table
  • Fix – Reset field not working

2.6.5

  • Fix- Field settings were not getting saved for some users.

2.6.4

  • Fix – Autofill browser’s saved email/password for login ( Visit Fields page after update to make it effective )

2.6.3

  • New – added login_redirect and register_redirect attributes for inline form shortcode
  • Fix – missing translation
  • Fix – RTL settings styling
  • Fix – alignment issues when field label is active

2.6.2

  • Fix – Deprecated warning fix

2.6.1

  • Fix – error generated without woocommerce
  • Update – Translations

2.6

  • New – Single field Form pattern
  • New – Popup style – Sidebar
  • New – Navigation pattern option ( Footer links, Tabs )
  • New – Add logo above form
  • New – Polylang support
  • New – RTL Support
  • New – Option to edit shortcode of my account page
  • Update – removed scrollbar script to reduce file size

Template updates
/templates/xoo-el-popup.php
/templates/global/xoo-el-header.php

2.5

  • New – Password eye toggle
  • New – Login, reset & lost password fields under field editor.
  • New – Tab & Button texts as settings
  • New – Separate login and registration forms using inline shortcode
  • New – Email can be set as optional
  • Fix – #login & #register opening popup only once

2.4

  • Security fix

2.3

  • Security fix

2.2

  • Security update
  • Settings UI update

2.1

  • New – Added option to replace woocommerce checkout login form
  • Fix – Minor Bugs

2.0

*** MAJOR UPDATE ***
* New – WPML Compatible
* Tweak – Template Changes
* Tweak – Code Optimized
* Tweak – Fields Tab separated
* Fix – Inline Form always showing on the top
* Fix – Multiple IDs warning
* Fix – Popup Flashing on page load
* Fix – Minor Bugs

1.7

  • Fix – Registration issue for non woocommerce users
  • Fix – OTP login activate/deactivate issue

1.6

  • New – Mailchimp integration
  • New – Added attribute “display” & “change_to_text”in shortcode [xoo_el_action]
  • Tweak – Generate username functionality more secured
  • Minor improvements

1.5

  • Fix – Security issue

1.4

  • Added “Hello Firstname” for menu item
  • Minor bug fixes

1.3

  • Major Release.
  • New – Form input icons.
  • New – Remember me checkbox.
  • New – Terms and conditions checkbox.
  • Tweak – Template changes
  • Tweak – Removed font awesome icons , added custom font icons.

1.2

  • Fix – Not working on mobile devices.
  • New – Sidebar Image.
  • New – Popup animation.

1.1

  • Fix – Not working on mobile devices.
  • New – Extra input padding.

1.0.0

  • Initial Public Release.

Alternatives to Login & Register Forms

Other WordPress plugins serving a similar purpose, ranked by relevance and PF Score.

Gold73.4
OTP Login & Register Woocommerce icon

OTP Login & Register Woocommerce

Allow users to log in/sign up with a one-time password (OTP) sent to their mobile device.

★ 4.6/5·1K+ installs·Updated 9 Aug 2026
Silver58.2
Wapu Auth – Social Login for WordPress and WooCommerce icon

Wapu Auth

Google and Facebook social login for WordPress and WooCommerce through Wapu Auth Broker, with secure account linking, sessions and local…

70+ installs·Updated 12 Aug 2026
Bronze53.9
Guard Dog icon

Guard Dog

Plugin-first WordPress login and account security with custom login URLs, 2FA, passkeys, CAPTCHA protection, access control, sessions, and activity lo…

★ 5/5·10+ installs·Updated 5 Aug 2026
Platinum98.7
Really Simple Security – Simple and Performant Security (formerly Really Simple SSL) icon

Really Simple Security

Hardens WordPress security with two-factor authentication, login protection, and vulnerability detection across 3 million active sites.

★ 4.9/5·3.0M+ installs·Updated 27 Jul 2026
Platinum98.3
Limit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force Prevention icon

Limit Login Attempts Security

Defends WordPress logins with brute force protection, two-factor authentication, and IP blocking.

★ 4.8/5·1.0M+ installs·Updated 12 Aug 2026
Platinum97.6
Wordfence Security – Firewall, Malware Scan, and Login Security icon

Wordfence Security

Firewall, malware scanner, and two-factor authentication for WordPress site security.

★ 4.7/5·5.0M+ installs·Updated 10 Aug 2026
Platinum93.5
Nextend Social Login and Register icon

Nextend Social Login and Register

Enable one-click registration and login using Facebook, Google, X, and other social accounts.

★ 4.9/5·200K+ installs·Updated 28 Jul 2026
Platinum86.9
Two Factor icon

Two Factor

Add two-factor authentication using TOTP, email, or backup codes to secure WordPress accounts.

★ 4.8/5·100K+ installs·Updated 27 Mar 2026
Platinum86.3
Shield Security – Smart Bot Blocking, Brute-Force Login Protection & File Scanning icon

Shield Security

Blocks bots automatically and repairs security issues while filtering out non-critical alerts.

★ 4.8/5·30K+ installs·Updated 9 Jun 2026