{"id":321932,"date":"2026-06-06T11:52:11","date_gmt":"2026-06-06T11:52:11","guid":{"rendered":"https:\/\/wordpress.org\/plugins\/ctm-login-as\/"},"modified":"2026-06-06T12:20:32","modified_gmt":"2026-06-06T12:20:32","slug":"craftyteam-login-as-user","status":"publish","type":"plugin","link":"https:\/\/wordpress.org\/plugins\/craftyteam-login-as-user\/","author":20730736,"comment_status":"closed","ping_status":"closed","template":"","meta":{"version":"1.0.13","stable_tag":"1.0.13","tested":"7.0","requires":"6.0","requires_php":"7.4","requires_plugins":null,"header_name":"CraftyTeam Login As User","header_author":"Sergiu Rus","header_description":"Securely log in as another WordPress user from the Users screen and WooCommerce orders, then return to the original administrator account.","assets_banners_color":"f6f7f9","last_updated":"2026-06-06 12:20:32","external_support_url":"","external_repository_url":"","donate_link":"","header_plugin_uri":"","header_author_uri":"https:\/\/craftyteam.ro","rating":0,"author_block_rating":0,"active_installs":0,"downloads":48,"num_ratings":0,"support_threads":0,"support_threads_resolved":0,"author_block_count":0,"sections":["description","installation","faq","changelog"],"tags":{"1.0.13":{"tag":"1.0.13","author":"craftyteam","date":"2026-06-06 12:20:32"}},"upgrade_notice":{"1.0.13":"<p>WooCommerce is now fully optional and the Users table action remains available without WooCommerce.<\/p>"},"ratings":[],"assets_icons":{"icon-256x256.png":{"filename":"icon-256x256.png","revision":3563125,"resolution":"256x256","location":"assets","locale":"","width":1254,"height":1254}},"assets_banners":{"banner-772x250.png":{"filename":"banner-772x250.png","revision":3563125,"resolution":"772x250","location":"assets","locale":"","width":2203,"height":714}},"assets_blueprints":{},"all_blocks":[],"tagged_versions":["1.0.13"],"block_files":[],"assets_screenshots":{"screenshot-1.png":{"filename":"screenshot-1.png","revision":3563125,"resolution":"1","location":"assets","locale":"","width":1194,"height":720},"screenshot-2.png":{"filename":"screenshot-2.png","revision":3563125,"resolution":"2","location":"assets","locale":"","width":678,"height":834}},"screenshots":[]},"plugin_section":[],"plugin_tags":[14295,42294,168751,3749,286],"plugin_category":[45],"plugin_contributors":[266035],"plugin_business_model":[],"class_list":["post-321932","plugin","type-plugin","status-publish","hentry","plugin_tags-login-as","plugin_tags-login-as-user","plugin_tags-switch-user","plugin_tags-user-switching","plugin_tags-woocommerce","plugin_category-ecommerce","plugin_contributors-craftyteam","plugin_committers-craftyteam"],"banners":{"banner":"https:\/\/ps.w.org\/craftyteam-login-as-user\/assets\/banner-772x250.png?rev=3563125","banner_2x":false,"banner_rtl":false,"banner_2x_rtl":false},"icons":{"svg":false,"icon":"https:\/\/ps.w.org\/craftyteam-login-as-user\/assets\/icon-256x256.png?rev=3563125","icon_2x":"https:\/\/ps.w.org\/craftyteam-login-as-user\/assets\/icon-256x256.png?rev=3563125","generated":false},"screenshots":[{"src":"https:\/\/ps.w.org\/craftyteam-login-as-user\/assets\/screenshot-1.png?rev=3563125","caption":""},{"src":"https:\/\/ps.w.org\/craftyteam-login-as-user\/assets\/screenshot-2.png?rev=3563125","caption":""}],"raw_content":"<!--section=description-->\n<p>CraftyTeam Login As User helps site administrators securely log in as another WordPress user or WooCommerce customer without asking for passwords.<\/p>\n\n<p>The plugin adds a secure Login As User action to the WordPress Users screen, user profile screens, WooCommerce order screens, and WooCommerce order lists. After switching into a user account, the original administrator can return through a visible frontend panel or the WordPress admin bar.<\/p>\n\n<h4>Key features<\/h4>\n\n<ul>\n<li>Login As User action for WordPress users.<\/li>\n<li>WooCommerce customer Login As User action from order screens and order lists.<\/li>\n<li>Secure return to the original administrator account.<\/li>\n<li>Local audit log under Users &gt; Login As Audit.<\/li>\n<li>Signed session cookie and temporary transient-based session storage.<\/li>\n<li>Administrator and super administrator target accounts are blocked by default.<\/li>\n<li>No tracking, no third-party services, no external API calls.<\/li>\n<li>Conditional admin and frontend CSS loading.<\/li>\n<\/ul>\n\n<h4>Security model<\/h4>\n\n<p>Only logged-in users with both <code>manage_options<\/code> and <code>edit_users<\/code> can start a Login As User session. Switching to administrator or super administrator target accounts is blocked by default and can only be changed intentionally through filters.<\/p>\n\n<p>The plugin uses WordPress nonces, capability checks, signed cookies, temporary transients, and safe redirect validation.<\/p>\n\n<h4>WooCommerce support<\/h4>\n\n<p>WooCommerce is optional. If WooCommerce is active, CraftyTeam Login As User adds customer Login As User actions to supported WooCommerce order screens. If WooCommerce is not active, the core WordPress user switching functionality continues to work.<\/p>\n\n<h3>Advanced Filters<\/h3>\n\n<p>Developers can customize selected behavior through these filters:<\/p>\n\n<ul>\n<li><code>ctm_login_as_session_duration<\/code> - changes the temporary Login As session duration. Default: 12 hours.<\/li>\n<li><code>ctm_login_as_allow_admin_targets<\/code> - allows administrator or super administrator target accounts when intentionally enabled. Default: false.<\/li>\n<li><code>ctm_login_as_target_can_be_switched<\/code> - controls whether a specific target user can be accessed.<\/li>\n<li><code>ctm_login_as_default_redirect<\/code> - changes the default redirect after switching into a user account.<\/li>\n<li><code>ctm_login_as_woocommerce_redirect<\/code> - changes the redirect used by WooCommerce order actions.<\/li>\n<li><code>ctm_login_as_audit_limit<\/code> - changes the number of local audit events stored. Default: 150.<\/li>\n<\/ul>\n\n<!--section=installation-->\n<ol>\n<li>Upload the plugin folder to <code>\/wp-content\/plugins\/craftyteam-login-as-user\/<\/code>, or install the plugin ZIP from Plugins &gt; Add New &gt; Upload Plugin.<\/li>\n<li>Activate CraftyTeam Login As User from the Plugins screen.<\/li>\n<li>Go to Users, a user profile, or a WooCommerce order and use the Login As User action.<\/li>\n<li>Use the frontend return panel or admin bar button to return to the original administrator account.<\/li>\n<\/ol>\n\n<!--section=faq-->\n<dl>\n<dt id=\"who%20can%20use%20login%20as%20user%3F\"><h3>Who can use Login As User?<\/h3><\/dt>\n<dd><p>Only logged-in users who have both <code>manage_options<\/code> and <code>edit_users<\/code> can start a Login As User session.<\/p><\/dd>\n<dt id=\"can%20administrators%20switch%20into%20other%20administrator%20accounts%3F\"><h3>Can administrators switch into other administrator accounts?<\/h3><\/dt>\n<dd><p>No. Administrator and super administrator target accounts are blocked by default. This is intentional.<\/p><\/dd>\n<dt id=\"does%20the%20plugin%20track%20users%20or%20send%20data%20to%20third%20parties%3F\"><h3>Does the plugin track users or send data to third parties?<\/h3><\/dt>\n<dd><p>No. The plugin does not track users, does not connect to third-party services, and does not send data externally.<\/p><\/dd>\n<dt id=\"does%20woocommerce%20have%20to%20be%20installed%3F\"><h3>Does WooCommerce have to be installed?<\/h3><\/dt>\n<dd><p>No. WooCommerce integration is optional. The plugin works for WordPress users even when WooCommerce is not active.<\/p><\/dd>\n<dt id=\"where%20is%20the%20audit%20log%20stored%3F\"><h3>Where is the audit log stored?<\/h3><\/dt>\n<dd><p>The audit log is stored locally in the WordPress options table and is visible under Users &gt; Login As Audit.<\/p><\/dd>\n\n<\/dl>\n\n<!--section=changelog-->\n<h4>1.0.13<\/h4>\n\n<ul>\n<li>Loaded WooCommerce integration only when WooCommerce is active.<\/li>\n<li>Hardened the Users table button for standard and multisite user lists.<\/li>\n<\/ul>\n\n<h4>1.0.12<\/h4>\n\n<ul>\n<li>Prepared the plugin for WordPress.org submission.<\/li>\n<li>Added a WordPress.org-compatible <code>readme.txt<\/code> file.<\/li>\n<li>Added GPLv2-or-later license metadata.<\/li>\n<li>Added uninstall cleanup for plugin options and active Login As session transients.<\/li>\n<li>Updated default UI text and plugin naming for the public plugin directory.<\/li>\n<li>Hardened inline SVG output through an explicit allowed HTML list.<\/li>\n<\/ul>\n\n<h4>1.0.11<\/h4>\n\n<ul>\n<li>Applied the same discreet button design across Users, user profile, WooCommerce order, WooCommerce order list, and frontend return buttons.<\/li>\n<li>Removed SVG icons from action buttons.<\/li>\n<li>Used muted grey backgrounds, black text, and 5px border radius for action buttons.<\/li>\n<\/ul>\n\n<h4>1.0.10<\/h4>\n\n<ul>\n<li>Aligned the Login As button in the Users table column with the row text.<\/li>\n<li>Removed vertical centering that made the button appear visually displaced.<\/li>\n<\/ul>\n\n<h4>1.0.9<\/h4>\n\n<ul>\n<li>Moved the Login As column to the first position in the Users table, immediately after the checkbox column.<\/li>\n<li>Simplified the Users table button style.<\/li>\n<\/ul>\n\n<h4>1.0.8<\/h4>\n\n<ul>\n<li>Improved the Users table layout and column sizing.<\/li>\n<li>Refined the Users list button style.<\/li>\n<\/ul>\n\n<h4>1.0.7<\/h4>\n\n<ul>\n<li>Adjusted the Users table layout so the Login As column appears closer to the expected position.<\/li>\n<\/ul>\n\n<h4>1.0.6<\/h4>\n\n<ul>\n<li>Moved the WooCommerce order Login As card with high priority inside the order details area.<\/li>\n<li>Kept the dedicated Login As column in Users.<\/li>\n<\/ul>","raw_excerpt":"Securely log in as another WordPress user from the Users screen and WooCommerce orders.","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/321932","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=321932"}],"author":[{"embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/craftyteam"}],"wp:attachment":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=321932"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=321932"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=321932"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=321932"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=321932"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=321932"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}