Zephyr Project Manager

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 91% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Modeled within the band wp.org reports; tightens as we track daily.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. A small install base leaves thin data to model from. The recent download trend is too spiky to read.

1. ★★★★★ roberto180473

   1.3y ago

   Request for calendar command links within Projects, Tasks and subtasks Good evening.I wanted to ask if it would be possible to integrate within the section, projects, tasks and subtasks under calendars.This function allows you to quickly create a deadline in the calendar by updating it immediately and then seeing which project, task or subtask was created and by whom.In the end, it is a link link to the entries already in the tabs.It would be great if it could be updated in the next few days, as it is nothing to employ.Best regards and thanks for your attention.Roberto

   Read on wp.org ↗
2. ★★★★★ crowdfunding

   1.6y ago

   We have created our own website specifically built to manage tasks with the zephyr plugin. It beats paying per user as it gets so expensive when your team scales. I’m in the SEO space and find this plugin very helpful in streamlining tasks and projects of new clients. Great work Dylan! sshh dont tell anyone otherwise he will be too busy for me!

   Read on wp.org ↗
3. ★★★★★ kerwinf

   1.6y ago

   After installing the plugin and adding users assigned with only a Zephyr role, they are unable to access Zephyr or anything except WordPress Media. I was forced to install the User Role Manager and change the permissions of ALL Zephyr roles. Zephyr Manager and Admin roles have access/control to more WordPress settings and not just Zephyr. This seems too insecure for use.

   Read on wp.org ↗
4. ★★★★★ Peter

   2.4y ago

   Generally, I have tried all similar solutions for the markets and I always come back to Zephyr. Many thanks to the developer for a truly great product.

   Read on wp.org ↗
5. ★★★★★ fh888

   2.4y ago

   This Zephyr Project Manager WordPress plugin is the most user-friendly and cost-effective solution for managing company projects and tasks. Setting it up is incredibly easy! I enthusiastically recommend it to anyone!

   Read on wp.org ↗
6. ★★★★★ darinandrews1977

   2.7y ago

   I have been looking for a reliable project management software for my business and wordpress plugins have all had problems that I could not get fixed by the developers.. After I upgraded to the pro version I instantly ran into a few problems and was frustrated that I had to once again try to get it handled. I emailed Dylan and could not believe how fast he actually got back to me.. He was all over getting me fixed up, and in the end I probably cost him time but he got me going.. If I could give him a 10 star I would and I am grateful to have found this plugin.. Can’t wait to get to work tomorrow! Thanks again Dylan, you are awesome!

   Read on wp.org ↗
7. ★★★★★ genoxpress

   3.0y ago

   I took the upgrade especially because of the “Frontend Project Manager”. Really disappointed that it does not allow for navigation beyond the dashboard. Just returns 404 error if you attempt to reach sections like “Projects”, “Tasks”, etc. It means the user “must” sign in to the WP dashboard to get things done Update: I’m adding only 1 more star. The bare bones documentation on this plugin is holding it back in my opinion. This topic was modified 2 years, 11 months ago by genoxpress.

   Read on wp.org ↗
8. ★★★★★ lukapeteh

   3.1y ago

   I have been looking for a plugin that would easily replace Trello that I used to use when managing all sorts of projects. When building websites you have to be able to control the whole process, know what tasks need to be completed in what time, and me as a manager I need to know everything about the project itself. And here comes the great solution “Zephyr PRO Plugin for WordPress”. Even with a free version you can manage projects but when buying a very cheap PRO version you can see that this plugin was made specifically for project managers. I would really advise to check out the plugin and give the PRO version a shot. Categories, custom fields, reporting and analysis are amazing futures that really make this plugin stand out. I tried 6 different solutions but Zephyr PRO makes the most sense! And also: The support via email is great. I received my response in about 3 hours with detailed help. Thanks again!

   Read on wp.org ↗

20 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. Medium · 4.9 Zephyr Project Manager <= 3.3.203 - Authenticated (Custom+) Arbitrary File Read And Server-Side Request Forgery ↗
   2025-12-16 CVE-2025-12496 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Affects <= 3.3.203 Patched in 3.3.204
2. Medium · 4.4 Zephyr Project Manager <= 3.3.202 - Authenticated (Admin+) Stored Cross-Site Scripting ↗
   2025-09-25 CVE-2025-10490 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.3.202 Patched in 3.3.203
3. Medium · 4.3 Zephyr Project Manager <= 3.3.201 - Missing Authorization ↗
   2025-08-26 CVE-2025-54714 Missing Authorization Affects <= 3.3.201 Patched in 3.3.202
4. Medium · 4.3 Zephyr Project Manager <= 3.3.200 - Missing Authorization ↗
   2025-04-16 CVE-2025-39552 Missing Authorization Affects <= 3.3.200 Patched in 3.3.201
5. Medium · 6.1 Zephyr Project Manager <= 3.3.101 - Reflected Cross-Site Scripting ↗
   2025-04-10 CVE-2025-32526 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.3.101 Patched in 3.3.102
6. Medium · 5.5 Zephyr Project Manager <= 3.3.102 - Reflected Cross-Site Scripting ↗
   2024-08-20 CVE-2024-43915 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.3.102 Patched in 3.3.103
7. Medium · 4.3 Zephyr Project Manager <= 3.3.102 - Missing Authorization to Authenticated (Subscriber+) Status Updates ↗
   2024-08-20 CVE-2024-43916 Authorization Bypass Through User-Controlled Key Affects <= 3.3.102 Patched in 3.3.103
8. Medium · 4.3 Zephyr Project Manager <= 3.3.100 - Authenticated (Subscriber+) Insecure Direct Object Reference ↗
   2024-08-16 CVE-2024-43322 Authorization Bypass Through User-Controlled Key Affects <= 3.3.100 Patched in 3.3.101
9. High · 8.1 Zephyr Project Manager <= 3.3.101 - Authenticated (Subscriber+) Limited Privilege Escalation ↗
   2024-08-14 CVE-2024-7624 Improper Authorization Affects <= 3.3.101 Patched in 3.3.102
10. Medium · 6.4 Zephyr Project Manager <= 3.3.100 - Authenticated (Subscriber+) Stored Cross-Site Scripting via filename Parameter ↗
    2024-08-02 CVE-2024-7356 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.3.100 Patched in 3.3.101
11. Medium · 5.3 Zephyr Project Manager <= 3.3.99 - Unauthenticated Information Exposure ↗
    2024-07-12 CVE-2024-38761 Insertion of Sensitive Information into Log File Affects <= 3.3.99 Patched in 3.3.100
12. Medium · 4.4 Zephyr Project Manager <= 3.3.97 - Authenticated (Editor+) Stored Cross-Site Scripting ↗
    2024-07-09 CVE-2024-6536 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.3.97 Patched in 3.3.99
13. High · 8.8 Zephyr Project Manager <= 3.3.97 - Authenticated (Subscriber+) Privilege Escalation via User Meta Update ↗
    2024-07-04 CVE-2024-37484 Missing Authorization Affects <= 3.3.97 Patched in 3.3.99
14. Medium · 4.3 Zephyr Project Manager <= 3.3.93 - Cross-Site Request Forgery ↗
    2023-06-13 CVE-2023-34373 Cross-Site Request Forgery (CSRF) Affects <= 3.3.93 Patched in 3.3.94
15. Medium · 5.4 Zephyr Project Manager <= 3.3.9 - Open Redirect ↗
    2023-04-27 CVE-2023-31237 URL Redirection to Untrusted Site ('Open Redirect') Affects <= 3.3.9 Patched in 3.3.10
16. High · 7.2 Zephyr Project Manager < 3.2.55 - Missing Authorization to Cross-Site Scripting ↗
    2022-09-08 CVE-2022-2839 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < 3.2.55 Patched in 3.2.55
17. Medium · 6.1 Zephyr Project Manager <= 3.2.42 - Reflected Cross-Site Scripting ↗
    2022-08-29 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < 3.2.5 Patched in 3.2.5
18. High · 7.2 Zephyr Project Manager <= 3.2.42 - Missing Authorization to Cross-Site Scripting ↗
    2022-08-29 Missing Authorization Affects <= 3.2.4 Patched in 3.2.5
19. Critical · 9.8 Zephyr Project Manager <= 3.2.42 - Unauthenticated SQL Injection ↗
    2022-08-29 CVE-2022-2840 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 3.2.4 Patched in 3.2.5
20. Medium · 6.1 Zephyr Project Manager <= 3.2.40 - Reflected Cross-Site Scripting ↗
    2022-05-23 CVE-2022-1822 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.2.4 Patched in 3.2.41

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0.1

Translated into 17 languages, 3 at 90% or more

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

No tier crossings observed yet.

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• Taskbuilder – Project Management & Task Management Tool With Kanban Board 700+ installs · 4.2★ · 2 shared tags A
• WP To Do 100+ installs · 3.8★ · 2 shared tags B
• Eonet Project Manager 40+ installs · 4.2★ · 2 shared tags D
• scifi Task Manager 10+ installs · 4.2★ · 2 shared tags D
• WTG Tasks Manager Beta 10+ installs · 3.6★ · 2 shared tags D
• Qloud Task Builders Checklists — installs · 3.6★ · 2 shared tags B

Embed this report card

Drop a live Pulse card for Zephyr Project Manager into a readme, a review or a deck. It updates itself.

Zephyr Project Manager: 1K+ active installs, 4.8★ (98 reviews). Plugin Pulse (WP Mayor), as of 2026-08-29. https://plugins.wpmayor.com/plugin/zephyr-project-manager