Hubu gives the logged-in half of your site the same care as the public half. Instead of dropping members into the WordPress admin, it builds a front-end dashboard on your own pages, with login and registration screens that look like they belong to your brand.

Everything is organised into modules you switch on from one screen, so a site that only needs a nicer login page never loads the rest.

User Panel

A complete front-end dashboard for your members: profile editing, activity and security widgets, all styled to match your brand.

The panel menu is yours to arrange. Rename, reorder or switch off its endpoints, choose who sees each one by role, pick an icon, and add your own content to an endpoint — no template editing required.

Authentication

Branded login, registration and password-recovery flows with strong-password rules, rate limiting, an international phone field, and a form builder to choose, order and label the registration fields.

WooCommerce

Merges the WooCommerce My Account area into the user panel: orders, downloads and addresses become native endpoints with matching icons and styling. WooCommerce’s own hooks keep firing, so extensions that add to My Account keep working.

This module only appears when WooCommerce is active.

Asset Cleanup

Blocks theme and plugin CSS/JS from the panel and login pages, so your layout stays pixel-perfect on any theme and loads noticeably faster.

Multilingual

Show the member panel, the sign-in pages and emails in more than one language. Each member gets their own language: the one they chose, the one they were browsing your site in, or their browser’s. You translate texts, menu labels and form fields on the screens you already use, by picking a language at the top of the page. The panel keeps one simple address in every language.

It is off by default, so a single-language site stays exactly as it is. Turn it on under Settings Setup Languages, or let it switch on by itself when WPML, Polylang or TranslatePress is active.

Built to be extended

Every module exposes filters under the hubu/ prefix — dashboard boxes, panel menus, endpoint providers, notification templates and email views are all filterable. Notifications are delivered through a queue rather than during the request that triggered them.

Translation ready

Every string ships translatable in the hubu-panel text domain, with translations loaded from /languages.

External services

Hubu Panel works on its own. It contacts the services below only in the situations described. It performs no license checks and gets its updates from WordPress.org.

hubu.pro: optional account connection

Hubu’s own service, used only if you connect your site to a hubu.pro account. Connecting is optional and needs no paid licence.

Connecting: when an administrator clicks Connect in the Hubu admin screens, the browser goes to hubu.pro (https://hubu.pro/license/authorize/) to sign in or register and approve the site. The address carries your site URL, a random one-time value and a hash used to verify the return; no password or key is sent. When you come back, the plugin sends the one-time code and your site’s details to https://hubu.pro/wp-json/hubu/v1/connect/ to complete the connection.
What is shared: the site URL, site name, language, and the WordPress, PHP and Hubu (and Hubu Pro, if installed) versions. Nothing about your visitors, users or content. The same details are sent once a day while the site is connected, and you can see and trim them with the hubu/connection/site_report filter.
Disconnecting: when you click Disconnect, the account owner disconnects the site on hubu.pro, or you deactivate the plugin while connected, the plugin tells hubu.pro and stops reporting. Nothing is sent after that.

Nothing is sent to hubu.pro unless an administrator connected the site. The service is provided by Hubu: terms of service, privacy policy.

Gravatar: profile pictures

The panel header and the account page show each member’s profile picture through WordPress’s own avatar functions. Unless another plugin supplies local avatars, WordPress serves those pictures from Gravatar: the visitor’s browser loads the image from gravatar.com, which receives a hash of the member’s email address and the usual request data, such as the visitor’s IP address. This happens whenever a panel page with a profile picture is displayed. The service is provided by Automattic: terms of service, privacy policy.

ipapi.co: country detection for phone fields (off by default)

Phone fields preselect the visitor’s country. By default the country is detected on your server only, and nothing is sent anywhere. If you choose a “Detection source” that uses the browser (in a phone field’s options, in the registration or account form builder), the visitor’s browser asks ipapi.co for its country when a form with a phone field is shown; ipapi.co receives the visitor’s IP address. The answer is cached in the browser for a week. The service is provided by ipapi.co: terms of service, privacy policy.