Zephyr Project Manager

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory searches this plugin turns up in, and which way each one is moving. WordPress.org publishes no history of search positions, so this starts the day we first tracked a keyword and never backfills.

wp.org is where the directory puts the plugin for that search. On merit is where it would sit if results were ranked on rating, support and updates, without the install boost. The last column is how far the wp.org position moved, from our first reading in the last 90 days to the latest.

34 searches this plugin appeared in over the last 90 days, 7 listed. 27 left out as unrelated or noise (years, numbers, stray words). 1 of its tags isn't in the top 24 for their own search.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 91% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Crossed into this band 4.6 years ago; a band this size takes about a year or more to cross, which places it about 80% of the way through.

1. ★★★★★ roberto180473

   1.5y ago

   Request for calendar command links within Projects, Tasks and subtasks Good evening.I wanted to ask if it would be possible to integrate within the section, projects, tasks and subtasks under calendars.This function allows you to quickly create a deadline in the calendar by updating it immediately and then seeing which project, task or subtask was created and by whom.In the end, it is a link link to the entries already in the tabs.It would be great if it could be updated in the next few days, as it is nothing to employ.Best regards and thanks for your attention.Roberto

   Read on wp.org ↗
2. ★★★★★ crowdfunding

   1.7y ago

   We have created our own website specifically built to manage tasks with the zephyr plugin. It beats paying per user as it gets so expensive when your team scales. I’m in the SEO space and find this plugin very helpful in streamlining tasks and projects of new clients. Great work Dylan! sshh dont tell anyone otherwise he will be too busy for me!

   Read on wp.org ↗
3. ★★★★★ kerwinf

   1.8y ago

   After installing the plugin and adding users assigned with only a Zephyr role, they are unable to access Zephyr or anything except WordPress Media. I was forced to install the User Role Manager and change the permissions of ALL Zephyr roles. Zephyr Manager and Admin roles have access/control to more WordPress settings and not just Zephyr. This seems too insecure for use.

   Read on wp.org ↗
4. ★★★★★ Peter

   2.6y ago

   Generally, I have tried all similar solutions for the markets and I always come back to Zephyr. Many thanks to the developer for a truly great product.

   Read on wp.org ↗
5. ★★★★★ fh888

   2.6y ago

   This Zephyr Project Manager WordPress plugin is the most user-friendly and cost-effective solution for managing company projects and tasks. Setting it up is incredibly easy! I enthusiastically recommend it to anyone!

   Read on wp.org ↗
6. ★★★★★ darinandrews1977

   2.8y ago

   I have been looking for a reliable project management software for my business and wordpress plugins have all had problems that I could not get fixed by the developers.. After I upgraded to the pro version I instantly ran into a few problems and was frustrated that I had to once again try to get it handled. I emailed Dylan and could not believe how fast he actually got back to me.. He was all over getting me fixed up, and in the end I probably cost him time but he got me going.. If I could give him a 10 star I would and I am grateful to have found this plugin.. Can’t wait to get to work tomorrow! Thanks again Dylan, you are awesome!

   Read on wp.org ↗
7. ★★★★★ genoxpress

   3.2y ago

   I took the upgrade especially because of the “Frontend Project Manager”. Really disappointed that it does not allow for navigation beyond the dashboard. Just returns 404 error if you attempt to reach sections like “Projects”, “Tasks”, etc. It means the user “must” sign in to the WP dashboard to get things done Update: I’m adding only 1 more star. The bare bones documentation on this plugin is holding it back in my opinion. This topic was modified 2 years, 11 months ago by genoxpress.

   Read on wp.org ↗
8. ★★★★★ lukapeteh

   3.3y ago

   I have been looking for a plugin that would easily replace Trello that I used to use when managing all sorts of projects. When building websites you have to be able to control the whole process, know what tasks need to be completed in what time, and me as a manager I need to know everything about the project itself. And here comes the great solution “Zephyr PRO Plugin for WordPress”. Even with a free version you can manage projects but when buying a very cheap PRO version you can see that this plugin was made specifically for project managers. I would really advise to check out the plugin and give the PRO version a shot. Categories, custom fields, reporting and analysis are amazing futures that really make this plugin stand out. I tried 6 different solutions but Zephyr PRO makes the most sense! And also: The support via email is great. I received my response in about 3 hours with detailed help. Thanks again!

   Read on wp.org ↗

All 21 disclosed vulnerabilities are patched in the current version (3.3.210). Sites still on an older version should update.

1. Patched Medium · 6.4 Zephyr Project Manager <= 3.3.205 - Authenticated (Custom+) Stored Cross-Site Scripting via 'message' Parameter ↗
   2026-09-07 CVE-2026-76931 Improper Neutralization of Input During Web Page Generation Affects <= 3.3.205 Patched in 3.3.206
2. Patched Medium · 4.9 Zephyr Project Manager <= 3.3.203 - Authenticated (Custom+) Arbitrary File Read And Server-Side Request Forgery ↗
   2025-12-16 CVE-2025-12496 Improper Limitation of a Pathname to a Restricted Directory Affects <= 3.3.203 Patched in 3.3.204
3. Patched Medium · 4.4 Zephyr Project Manager <= 3.3.202 - Authenticated (Admin+) Stored Cross-Site Scripting ↗
   2025-09-25 CVE-2025-10490 Improper Neutralization of Input During Web Page Generation Affects <= 3.3.202 Patched in 3.3.203
4. Patched Medium · 4.3 Zephyr Project Manager <= 3.3.201 - Missing Authorization ↗
   2025-08-26 CVE-2025-54714 Missing Authorization Affects <= 3.3.201 Patched in 3.3.202
5. Patched Medium · 4.3 Zephyr Project Manager <= 3.3.200 - Missing Authorization ↗
   2025-04-16 CVE-2025-39552 Missing Authorization Affects <= 3.3.200 Patched in 3.3.201
6. Patched Medium · 6.1 Zephyr Project Manager <= 3.3.101 - Reflected Cross-Site Scripting ↗
   2025-04-10 CVE-2025-32526 Improper Neutralization of Input During Web Page Generation Affects <= 3.3.101 Patched in 3.3.102
7. Patched Medium · 5.5 Zephyr Project Manager <= 3.3.102 - Reflected Cross-Site Scripting ↗
   2024-08-20 CVE-2024-43915 Improper Neutralization of Input During Web Page Generation Affects <= 3.3.102 Patched in 3.3.103
8. Patched Medium · 4.3 Zephyr Project Manager <= 3.3.102 - Missing Authorization to Authenticated (Subscriber+) Status Updates ↗
   2024-08-20 CVE-2024-43916 Authorization Bypass Through User-Controlled Key Affects <= 3.3.102 Patched in 3.3.103
9. Patched Medium · 4.3 Zephyr Project Manager <= 3.3.100 - Authenticated (Subscriber+) Insecure Direct Object Reference ↗
   2024-08-16 CVE-2024-43322 Authorization Bypass Through User-Controlled Key Affects <= 3.3.100 Patched in 3.3.101
10. Patched High · 8.1 Zephyr Project Manager <= 3.3.101 - Authenticated (Subscriber+) Limited Privilege Escalation ↗
    2024-08-14 CVE-2024-7624 Improper Authorization Affects <= 3.3.101 Patched in 3.3.102
11. Patched Medium · 6.4 Zephyr Project Manager <= 3.3.100 - Authenticated (Subscriber+) Stored Cross-Site Scripting via filename Parameter ↗
    2024-08-02 CVE-2024-7356 Improper Neutralization of Input During Web Page Generation Affects <= 3.3.100 Patched in 3.3.101
12. Patched Medium · 5.3 Zephyr Project Manager <= 3.3.99 - Unauthenticated Information Exposure ↗
    2024-07-12 CVE-2024-38761 Insertion of Sensitive Information into Log File Affects <= 3.3.99 Patched in 3.3.100
13. Patched Medium · 4.4 Zephyr Project Manager <= 3.3.97 - Authenticated (Editor+) Stored Cross-Site Scripting ↗
    2024-07-09 CVE-2024-6536 Improper Neutralization of Input During Web Page Generation Affects <= 3.3.97 Patched in 3.3.99
14. Patched High · 8.8 Zephyr Project Manager <= 3.3.97 - Authenticated (Subscriber+) Privilege Escalation via User Meta Update ↗
    2024-07-04 CVE-2024-37484 Missing Authorization Affects <= 3.3.97 Patched in 3.3.99
15. Patched Medium · 4.3 Zephyr Project Manager <= 3.3.93 - Cross-Site Request Forgery ↗
    2023-06-13 CVE-2023-34373 Cross-Site Request Forgery Affects <= 3.3.93 Patched in 3.3.94
16. Patched Medium · 5.4 Zephyr Project Manager <= 3.3.9 - Open Redirect ↗
    2023-04-27 CVE-2023-31237 URL Redirection to Untrusted Site Affects <= 3.3.9 Patched in 3.3.10
17. Patched High · 7.2 Zephyr Project Manager < 3.2.55 - Missing Authorization to Cross-Site Scripting ↗
    2022-09-08 CVE-2022-2839 Improper Neutralization of Input During Web Page Generation Affects < 3.2.55 Patched in 3.2.55
18. Patched Medium · 6.1 Zephyr Project Manager <= 3.2.42 - Reflected Cross-Site Scripting ↗
    2022-08-29 Improper Neutralization of Input During Web Page Generation Affects < 3.2.5 Patched in 3.2.5
19. Patched High · 7.2 Zephyr Project Manager <= 3.2.42 - Missing Authorization to Cross-Site Scripting ↗
    2022-08-29 Missing Authorization Affects <= 3.2.4 Patched in 3.2.5
20. Patched Critical · 9.8 Zephyr Project Manager <= 3.2.42 - Unauthenticated SQL Injection ↗
    2022-08-29 CVE-2022-2840 Improper Neutralization of Special Elements used in an SQL Command Affects <= 3.2.4 Patched in 3.2.5
21. Patched Medium · 6.1 Zephyr Project Manager <= 3.2.40 - Reflected Cross-Site Scripting ↗
    2022-05-23 CVE-2022-1822 Improper Neutralization of Input During Web Page Generation Affects <= 3.2.4 Patched in 3.2.41

Translated into 17 languages, 3 at 90% or more

Whether ChatGPT and Claude name this plugin when asked the category question, and whether the readme gives them something to quote.

This plugin’s searches fall outside the topics measured so far. See the topics measured so far.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2022-03-20 300+ → 1K+ up

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

Embed this report card

Drop a live Pulse card for Zephyr Project Manager into a readme, a review or a deck. It updates itself.

Zephyr Project Manager: 1K+ active installs, 4.8★ (98 reviews). Plugin Pulse (WP Mayor), as of 2026-11-03. https://plugins.wpmayor.com/plugin/zephyr-project-manager