GUIDE FOR MAGENTO 2 USER PROFILE EXTENSION.

This extension is also included in the Pearl Theme.

HOW TO INSTALL

This extension is FREE and OPEN-SOURCE. The source code and installation files are available on GitHub.

GitHub Repository

Access the extension source code and download the installation files from our GitHub repository:

https://github.com/Weltpixel/magento2-weltpixel-user-profile

Installation Instructions

Please refer to the README file in the GitHub repository for detailed installation instructions.

General Installation Steps

Step 1: Download or clone the repository from GitHub
Step 2: Copy the extension files to your Magento 2 app/code/ directory

Step 3: Run setup commands:

php bin/magento setup:upgrade
php bin/magento setup:di:compile
php bin/magento setup:static-content:deploy -f

Step 4: Flush cache: php bin/magento cache:flush

Extension Configuration.

Go to Admin > WeltPixel > User Profile > User Profile Settings
User Profile General Settings
- Enable User Profile - [ Yes / No ] - Enable / Disable the User Profile extension on your store.
- Enable User Profile Inline Edit - [ Yes / No ] - If enabled, allows the user to edit their profile inline, on the Profile page.
- Enable User Profile on Reviews - [ Yes / No ] - If enabled, the option displays the User Profile on reviews left by the user. If the review is approved, the name and avatar of the user will be displayed alongside the review.
- Enable Wishlist Collection Display - [ Yes / No ] - Allows the user to display their Wishlists publicly on their User Profile. This option requires the Multiple Ajax Wishlist and Share PRO extension to be configured with the "Enable Wishlist Privacy" option set to Yes.
- Enable Profile Picture - [ Yes / No ] - Allows the user to upload a Profile Picture.
- Profile Picture is Required - [ Yes / No ] - If set to Yes, the user cannot save their Profile without uploading a Profile Picture.
- Enable Cover Image - [ Yes / No ] - Allows the user to upload a Cover Image.
- Cover Image is Required - [ Yes / No ] - If set to Yes, the user cannot save their Profile without uploading a Cover Image.

Profile Visibility (v1.17.5).

Show my profile publicly - a control on the Edit Profile form that lets the customer decide whether their profile is visible to other visitors. A private profile is hidden from the public profile page, from the customer reviews listing on product pages, and from the reviews endpoint.
Profile Settings - a link in the customer account menu that opens the visibility control, so it stays reachable when Enable User Profile Inline Edit is on and the profile is edited in place.
A store setting under User Profile Settings decides whether profiles created automatically (for example through Social Login or on first review) start public or private.
Profiles that existed before v1.17.5 stay public until the customer changes the setting.

Extension Configuration.

Enable First Name - [ Yes / No ] - Allows the user to input their first name.
First Name is Required - [ Yes / No ] - If set to Yes, the user cannot save their Profile without specifiyng a first name.
Enable Last Name - [ Yes / No ] - Allows the user to input their Last Name.
Last Name is Required - [ Yes / No ] - If set to Yes, the user cannot save their Profile without specifying a Last Name.
Enable Gender - [ Yes / No ] - Allows the user to specify a gender.
Gender is Required - [ Yes / No ] - If set to Yes, the user cannot save their Profile without selecting a gender.
Enable Location - [ Yes / No ] - Allows the user to specify a location.
Location is Required - [ Yes / No ] - If set to Yes, the user cannot save their Profile without specifying a location.
Enable Date of Birth - [ Yes / No ] - Allows the user to set their birth date.
Date of Birth is Required - [ Yes / No ] - If set to Yes, the user cannot save their Profile without setting a date of birth.
Enable Biography - [ Yes / No ] - Allows the user to write a biography.
Biography is Required - [ Yes / No ] - If set to Yes, the user cannot save their Profile without setting a biography.

Change Log.

What's new in v.1.17.5 - September 16, 2026

Security release: 1.17.5 is a catalog-wide security and hardening release for every WeltPixel extension, published alongside Adobe's September 2026 Magento security bulletins (APSB26-138 and APSB26-146, the actively exploited CVE-2026-75650). Upgrading is strongly recommended for every store.
WeltPixel Backend (shared by every WeltPixel extension): the licence lookup now uses bound database parameters instead of building its query from the module name, TLS certificate verification is enforced on the licence activation call, and the module information and cron status pages escape their output.
Profile save and edit now derive ownership from the customer session instead of trusting request parameters, require a signed-in customer with a valid form key, and only accept an explicit allowlist of editable fields, so profile and customer ids can no longer be mass-assigned.
The profile image upload requires an authenticated session and a form key, writes into a session-derived folder and verifies the file is a real image. Remote profile images are fetched over http(s) only from publicly routable hosts, without following redirects.
The customer reviews endpoint is keyed on the public profile instead of a customer id, so it can no longer be used to enumerate customers.
Customer-authored biography HTML is sanitised by a dedicated service, and profile name, avatar and cover image values are escaped at every template sink.
New Feature: Profiles can now be private. A new Show my profile publicly control on the Edit Profile form, a store setting for whether automatically created profiles start public, and a Profile Settings account menu link. Private profiles are hidden from the profile page, the reviews endpoint and the product review listing. Existing profiles stay public.
Run setup:upgrade after updating for the new column.
Availability: version 1.17.5 of this extension ships in the edition bundled with the Pearl Theme and Marketing Suite PRO packages, delivered through Composer on an active Support & Updates plan. As a one-time decision for this security release, the public GitHub repository was also updated to 1.17.5 on September 17, 2026; this is not a commitment to publish future releases there, and the bundled editions remain the way to receive future versions.

What's new in v.1.17.0 - May 18, 2026

New Feature: Introduced compatibility with the newly released Magento 2.4.9, as well as the latest Magento Security Patches for previous versions.
New Feature: Introduced compatibility with PHP 8.5.

What's new in v.1.16.0 - January 7, 2026

Giving back: As a celebration of over 10 years of activity within the Magento 2 ecosystem, and as a way to give back to the community, a number of WeltPixel extensions (both FREE and paid) have officially gone fully Open Source via public Github repositories. Find the full list on Github.
This extension has moved to a fully Open Source model and is available publicly on Github. See the link in the Change Log entry above to find it.

What’s new in v.1.15.9 - October 28, 2025

Magento Compatibility: Introduced compatibility with the latest released Magento 2 Security Patches - Magento 2.4.8-p3, Magento 2.4.7-p8, Magento 2.4.6-p13, Magento 2.4.5-p15 & Magento 2.4.4-p16.
New Feature: Added improvements to Magento Admin messaging around Product Updates to ensure visual clarity for users not running the latest product release.
New Feature: Added .ddev.site and .cloudwaysapps.com as accepted development domains. These domains will no longer require additional license keys.

What’s new in v.1.15.7 - September 2, 2025

Magento Compatibility: Introduced compatibility with the latest released Magento 2 Security Patches - Magento 2.4.8-p2, Magento 2.4.7-p7, Magento 2.4.6-p12, Magento 2.4.5-p14 & Magento 2.4.4-p15.
Added additional validations to prevent Magento Admin errors when the Backend extension could not fetch the current server user due to permissions issues.
Added adjustments to frontend templates to adhere to Magento Best Practices regarding XSS validations.
Fixed a CSP issue that would sometimes prevent orders from being created via the Magento Admin.

What’s new in v.1.15.3 - June 20, 2025

Magento Compatibility: Introduced compatibility with the latest Magento 2.4.8-p1, 2.4.7-p6, 2.4.6-p11 & 2.4.5-p13 Security Patches releases. Upgrade ASAP to keep your store secure.
Fixed the Backend functionality that enables users to change the default Magento CSP Restriction Mode via the Magento Admin. This was broken starting with Magento 2.4.7.

What’s new in v.1.15.0 - April 22, 2025

Magento Compatibility: Introduced compatibility with the new Magento 2.4.8 release, as well as the accompanying 2.4.7-p5, 2.4.6-p10, 2.4.5-p12 and 2.4.4-p13 Security Patches.
PHP Compatibility: Introduced compatibilty with PHP 8.4, which is now officially compatible with the latest Magento 2.4.8 version.
New Feature: Added magento2.docker as a valid domain for development purposes.
New Feature: Added ddev.site as a valid domain for development purposes.
Fixed an issue that would prevent certain extension options from correctly applying in Single Store Mode instances.
Added backend licensing adjustments for compatibility with the Google Analytics & Social Marketing Suite PRO.

What’s new in v.1.14.13 - February 17, 2025

Magento Compatibility: Introduced compatibility with the newly released Magento 2.4.7-p4, 2.4.6-p9, 2.4.5-p11 and 2.4.4-p12 versions.
Fixed an issue related to licensing which would prevent license keys from being validated various subdomains.

What’s new in v.1.14.11 - January 15, 2025

Removed deprecated Magento 2.2.x code version from extension package.

What’s new in v.1.14.9 - November 26, 2024

Added minor Magento Admin adjustments to the module status section for increased clarity and compatibility with server-side Social Pixel addons.

What’s new in v.1.14.7 - October 11, 2024

Compatibility: Introduced compatibility with the latest Magento 2.4.7-p3, 2.4.6-p8, 2.4.5-p10 and 2.4.4-p11 versions, which come with critical security adjustments for the platform. Magento 2 merchants are urged to upgrade to the latest patches ASAP.
Added various code updates for increased security around the licensing functionality as well as the Help Center and WeltPixel Developer Magento Admin sections.

What’s new in v.1.14.5 - August 23, 2024

Compatibility: Introduced compatibility with the latest Magento 2.4.7-p2, 2.4.6-p7, 2.4.5-p9 and 2.4.4-p10 versions, which come with critical security adjustments for the platform. Magento 2 merchants are urged to upgrade to the latest patches ASAP.

What’s new in v.1.14.3 - June 20, 2024

Compatibility: Introduced compatibility with the latest Magento 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 versions, which come with critical security adjustments for the platform. Magento 2 merchants are urged to upgrade to the latest patches ASAP.
New Feature: Added a new section in the Magento Admin that checks to make sure the latest product version is installed and notifies in case an update is available, as well as a button that allows for new features to be requested.

What’s new in v.1.14.1 - April 19, 2024

Updated a deprecated/incorrect jQuery function that was used in the extension's functionality related to Ajax.
Confirmed compatibility with the latest Magento 2.4.7 release, as well as newly released 2.4.6-p5, 2.4.5-p7 & 2.4.4-p8 Security Patches.
Confirmed compatibility with PHP 8.3 on the Magento 2.4.7 release. PHP 8.2 is also supported for this Magento version.
Added security improvements to the Backend module's license verification process.

What’s new in v.1.11.21 - January 9, 2024

Fixed an error that would be thrown in the WeltPixel -> Extensions Version admin section when a module's composer.json file was missing the version node.

What’s new in v.1.11.19 - October 19, 2023

Optimized the license verification process for increased Magento Admin performance, as well as to account for licensing server downtimes.
Fixed an issue that would sometimes result in an error being thrown when using older PHP versions, such as PHP 7.4.
Confirmed compatibility with the newly released Magento 2.4.6-p3, 2.4.5-p5, and 2.4.4-p6 Security Patches.

What’s new in v.1.11.17 - June 28, 2023

Fixed an issue that would cause an incorrect table prefix to be added to the User Profile's database tables if a prefix was defined in the Magento configuration.
Confirmed compatibility with the latest Magento Security Patch releases 2.4.6-p1, 2.4.5-p3 and 2.4.4-p4.
Fixed an error related to PHP 8.2 that would show when accessing the WeltPixel Debugger.
Added .localdev as a universally accepted licensing domain.

What’s new in v.1.11.15 - March 22, 2023

Fixed an error that would sometimes be thrown in the WeltPixel Debugger, depending on various server permissions.
Added compatibility with the latest Magento 2.4.6 and 2.4.5-p2 versions.

What’s new in v.1.11.11 - November 23, 2022

Confirmed compatibility with the latest Magento Security Patch releases 2.4.5-p1 and 2.4.4-p2.

What’s new in v.1.11.7 - September 1, 2022

Confirmed compatibility with the latest Magento 2.4.5 and 2.4.4-p1 versions.
Updated installation/upgrade scripts to use data patches.

What’s new in v.1.11.1 - April 25, 2022

Added improvements to Date Picker styling.
Fixed an incorrect licensing message on B2B Magento Enterprise instances which would display when an invalid license was entered.
Confirmed compatibility with the latest Magento 2.4.4 and 2.3.7-p3 versions as well as PHP 8.1.

What’s new in v.1.10.17 - October 22, 2021

Confirmed compatibility with the latest Magento 2.4.3-p1 and 2.3.7-p2 versions.

What’s new in v.1.10.15 - August 31, 2021

Confirmed compatibility with the newly released Magento 2.4.3, 2.4.2-p2 and 2.3.7-p1 versions.
Added .localhost as an accepted domain termination for the licensing process.

What’s new in v.1.10.11 - July 7, 2021

Added improvments to the WeltPixel Developer Magento Admin section. Latest Cron Jobs now lists the last 100 executed Cron Jobs.

What’s new in v.1.10.9 - May 18, 2021

Confirmed compatibility with the newly released Magento 2.3.7 and 2.4.2-p1 versions.

What’s new in v.1.10.7 - March 26, 2021

Added a new Magento Admin comment for the inline User Profile edit functionality.
Excluded Magento 2.0.x - 2.2.x from new features and fixes starting with this release.
Adjusted WeltPixel Developer section comments.

What’s new in v.1.10.5 - February 12, 2021

Confirmed compatibility with the newly released Magento 2.4.2 version.
Added additional backend versioning verifications.
Backend module code optimizations.

What’s new in v.1.10.1 - October 22, 2020

Confirmed compatibility with the newly released Magento 2.4.1 version.

What’s new in v.1.10.0 - August 10, 2020

Confirmed compatibility with the newly released Magento 2.4.0 version.

What’s new in v.1.9.8 - July 6, 2020

Whitelisted domain for Content Security Policies introduced in Magento 2.3.5.

What’s new in v.1.9.7 - May 7, 2020

AConfirmed compatibility with Magento 2.3.5.
Implemented small Backend performance optimizations.
Added nxcli.net (Nexcess temporary URL) as a valid domain in the licensing process.
Added an option in the Developer section to allow for switching Magento's CSP between "report-only" and "restrict".

What’s new in v.1.9.6 - April 9, 2020

Added a patch for jQuery UI (Magento 2.3.0 - 2.3.2).
Removed Crop and Rotate functionality for images uploaded via Inline Edit.
Fixed a Backend issue on Magento Commerce whereby the Category Schedule functionality was not working properly.

What’s new in v.1.9.5 - March 10, 2020

Added backend Google reCaptcha compatibility for Magento 2.3.x

What’s new in v.1.9.4 - February 5, 2020

Code enhancements for increased security. Changed User Group info collection method.
Confirmed compatibility for Magento 2.3.4.

What’s new in v.1.9.2 - November 27, 2019

Added Magento and PHP version in the WeltPixel Developer section.
Confirmed compatibility with the latst Magento 2.3.3 version.

What’s new in v.1.9.1 - October 16, 2019

Added the possibility to edit wishlists directly from the User Profile.
Confirmed compatibility with the latst Magento 2.3.3 version.
Included the WeSupply Toolbox integration extension - Proactive Notifications Email & SMS, Returns & RMA, Store Locator, Delivery Date Estimate, Logistics Analytics, NPS & CSAT score. Get Free on-boarding and launch within 24 hours.

What’s new in v.1.9.0 - July 18, 2019

Implemented font optimizations for increased performance.
Confirmed compatibility with Magento 2.3.2.
Added HTTPS endpoint for licensing process.

What’s new in v.1.8.5 - June 7, 2019

Integrated Social Login with the User Profile extension. If the integration is enabled, Signing Up with Social Login creates a profile.
Small performance improvements.

What’s new in v.1.8.4 - April 25, 2019

Fixed an bug whereby Reviews in the User Profile were not displayed correctly.
Added PHP version in the WeltPixel Developer Section.

What’s new in v.1.8.3 - April 3rd, 2019

Initial release.