WP To Do

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 60% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. A small install base leaves thin data to model from. The recent download trend is too spiky to read.

1. ★★★★★ sherly492

   10mo ago

   WP To Do has been a smart and efficient choice for me. I really appreciate how it combines simplicity with depth — it transformed my WordPress dashboard from just a site-management area into a full productivity hub. Now I can plan, track, and complete my tasks without ever leaving WordPress. It’s made my workflow smoother, helped me stay organized, and saved me from juggling between multiple tools.

   Read on wp.org ↗
2. ★★★★★ Vladimir

   10mo ago

   I found this plugin some days ago, looks very promissing – needed some help from developer; the developer is very professional, helpful and quick. If you need plugin for tasks tracking & control, I can recommend. Both plugin and developer.

   Read on wp.org ↗
3. ★★★★★ mmestiyak

   1.0y ago

   Really happy with the new re-creation, just what I was looking for. Simple, efficient, and gets the job done without any fuss.

   Read on wp.org ↗
4. ★★★★★ klausmeier9

   3.6y ago

   Description looks great, exactly what I need.But the Plugin did not work.This Issue is reported form another guy 2 month ago and still no fix available.-> Uninstall

   Read on wp.org ↗
5. ★★★★★ eoik

   3.9y ago

   i can’t add any task.

   Read on wp.org ↗
6. ★★★★★ robert568

   4.3y ago

   Tested om WP 5.7 and 6.0 in the admin back-end works well, but on frontend (in a post) no: – the table displays on top of the post, not in place where the shortcode [to do] is written – after submitting new task in a post it calls a wrong ling and a record is not saved – etc.

   Read on wp.org ↗

7 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. Medium · 4.4 WP To Do <= 1.3.0 - Authenticated (Admin+) Stored Cross-Site Scripting via Task Comments ↗
   2024-08-28 CVE-2024-3944 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.3.0 Patched in 2.0.1
2. Medium · 6.4 WP To Do <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
   2024-07-06 CVE-2024-37539 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.3.0 Patched in 2.0.2
3. Medium · 4.3 WP To Do <= 1.3.0 - Cross-Site Request Forgery via wptodo_addcomment ↗
   2024-05-29 CVE-2024-3943 Cross-Site Request Forgery (CSRF) Affects <= 1.3.0 Patched in 2.0.1
4. Medium · 4.3 WP To Do <= 1.3.0 - Cross-Site Request Forgery via wptodo_manage() ↗
   2024-05-29 CVE-2024-3945 Cross-Site Request Forgery (CSRF) Affects <= 1.3.0 Patched in 2.0.1
5. Medium · 4.3 WP To Do <= 1.3.0 - Cross-Site Request Forgery via wptodo_settings ↗
   2024-05-29 CVE-2024-3947 Cross-Site Request Forgery (CSRF) Affects <= 1.3.0 Patched in 2.0.1
6. Medium · 4.4 WP To Do <= 1.3.0 - Authenticated (Admin+) Stored Cross-Site Scripting via Settings ↗
   2024-05-29 CVE-2024-3946 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.3.0 Patched in 2.0.1
7. Medium · 6.4 WP To Do <= 1.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
   2024-01-17 CVE-2024-22292 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.2.8 Patched in 1.2.9

Automated install-time checks, tested on PHP 8.1.12 · WP 6.8.3

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2025-08-18 300+ → 100+ down after 820 days in tier
2. 2023-05-21 400+ → 300+ down

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• Zephyr Project Manager 1K+ installs · 4.7★ · 2 shared tags A
• Todo Block 300+ installs · 3.8★ · 2 shared tags B
• C Checker 100+ installs · 3.6★ · 2 shared tags D
• Eonet Project Manager 40+ installs · 4.2★ · 2 shared tags D
• To Do List Member 10+ installs · 3.6★ · 2 shared tags D
• WP Dashboard Notes 20K+ installs · 4.6★ · 1 shared tag A

Embed this report card

Drop a live Pulse card for WP To Do into a readme, a review or a deck. It updates itself.

WP To Do: 100+ active installs, 3.7★ (6 reviews). Plugin Pulse (WP Mayor), as of 2026-08-31. https://plugins.wpmayor.com/plugin/wp-todo