Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker

75 Quality Score

Active Installs

17/30

A 56 out of 30 popularity score reflects solid reach with 6,000 active installs, well above the baseline expected for this category.

Update Freshness

25/25

A perfect 100 maintenance score indicates the developer is shipping timely updates, with the last release dated June 2026 and tested against WordPress 7.0.

User Rating

11/15

A 76 out of 100 user rating from 181 reviews is decent but not outstanding, suggesting most users are satisfied while a noticeable minority have run into friction.

Support Health

8/15

A 50 out of 15 support score is strong on paper with 2 of 2 threads resolved, though the very low volume of support activity means there is limited public evidence of how the team handles complex issues.

WP Compatibility

15/15

A perfect 100 compatibility score confirms broad support, requiring only PHP 7.4 and WordPress 6.2, which covers the vast majority of active installations.

Scores higher than 43% of indexed plugins

About

Ease Project Management and Task Management using a powerful project manager with Kanban board, Gantt chart, milestone tracking & project reporting.

Active Installs 5k+

Rating ★★★½ 3.8/5

Last Updated 2026-09-25 6:48am GMT

Requires WordPress 6.2+

Tested Up To 7.1.2

Requires PHP 7.4+

Security History

26 known vulnerabilities, all patched

4 High 22 Medium

Most recent: August 26, 2026

View details ▸

Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker < 4.0.7 - Authenticated (Subscriber+) Insecure Direct Object Reference Medium

August 26, 2026 Patched in ["4.0.7"] CVE-2026-74929

Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker 2.2.0 - 4.0.6 - Authenticated (Subscriber+) Insecure Direct Object Reference Medium

August 26, 2026 Patched in ["4.0.7"] CVE-2026-74930

Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker <= 4.0.6 - Unauthenticated PHP Object Injection High

August 24, 2026 Patched in ["4.0.7"] CVE-2026-78262

Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker 2.1.0 - 4.0.6 - Unauthenticated Subscriber Account Creation Medium

August 24, 2026 Patched in ["4.0.7"] CVE-2026-74928

Project Manager <= 3.0.1 - Authenticated (Subscriber+) Information Exposure Medium

December 26, 2025 Patched in ["3.0.2"] CVE-2025-68040

WP Project Manager <= 2.6.26 - Authenticated (Subscriber+) SQL Injection via 'completed_at_operator' Medium

November 14, 2025 Patched in ["2.6.27"] CVE-2025-8994

WP Project Manager <= 2.6.25 - Unauthenticated Sensitive Information Exposure Medium

September 22, 2025 Patched in ["2.6.26"] CVE-2025-58269

WP Project Manager <= 2.6.22 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload Medium

April 10, 2025 Patched in ["2.6.23"] CVE-2025-2541

WP Project Manager – Task, team, and project management plugin featuring kanban board and gantt charts <= 2.6.22 - Authenticated (Subscriber+) Stored Cross-Site Scripting via SVG File Upload Medium

April 8, 2025 Patched in ["2.6.23"] CVE-2025-3100

WP Project Manager <= 2.6.24 - Cross-Site Request Forgery Medium

April 4, 2025 Patched in ["2.6.25"] CVE-2025-32280

WP Project Manager <= 2.6.17 - Authenticated (Subscriber+) SQL Injection via orderby Parameter Medium

February 14, 2025 Patched in ["2.6.18"] CVE-2024-13500

WP Project Manager <= 2.6.17 - Missing Authorization to Authenticated (Subscriber+) Limited Arbitrary Options Update Medium

February 14, 2025 Patched in ["2.6.18"] CVE-2024-13752

WP Project Manager <= 2.6.22 - Authenticated (Administrator+) Stored Cross-Site Scripting Medium

February 3, 2025 Patched in ["2.6.23"] CVE-2025-22649

WP Project Manager – Task, team, and project management plugin featuring kanban board and gantt charts <= 2.6.16 - Authenticated (Subscriber+) SQL Injection Medium

January 3, 2025 Patched in ["2.6.17"] CVE-2024-12195

WP Project Manager <= 2.6.15 - Authenticated (Subscriber+) Sensitive Information Exposure via Project Task List REST API Medium

December 18, 2024 Patched in ["2.6.16"] CVE-2024-10548

WP Project Manager <= 2.6.31 - Authenticated (Project Manager+) SQL Injection Medium

December 2, 2024 Patched in ["3.0.0"] CVE-2024-12015

WP Project Manager <= 2.6.14 - Missing Authorization to Project Milestone and Task Creation/Deletion Medium

November 19, 2024 Patched in ["2.6.15"] CVE-2024-10520

WP Project Manager – Task, team, and project management plugin featuring kanban board and gantt charts <= 2.6.13 - Insecure Direct Object Reference to Unauthenticated Authorization Bypass High

November 12, 2024 Patched in ["2.6.14"] CVE-2024-10174

WP Project Manager <= 2.6.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting Medium

December 7, 2023 Patched in ["2.6.9"] CVE-2023-49860

WP Project Manager <= 2.6.7 - Missing Authorization Medium

December 7, 2023 Patched in ["2.6.8"] CVE-2023-40003

WP Project Manager <= 2.6.0 - Authenticated (Subscriber+) SQL Injection High

September 4, 2023 Patched in ["2.6.1"] CVE-2023-34383

WP Project Manager <= 2.6.4 - Arbitrary Usermeta Update to Authenticated (Subscriber+) Privilege Escalation High

July 24, 2023 Patched in ["2.6.5"] CVE-2023-3636

Appsero <= 1.2.1 - Missing Authorization Medium

December 16, 2022 Patched in ["2.6.13"]

Appsero <= 1.2.0 - Cross-Site Request Forgery Medium

December 14, 2022 Patched in ["2.6.13"] CVE-2022-47150

WP Project Manager <= 2.4.13 - Authenticated Stored Cross-Site Scripting Medium

October 11, 2021 Patched in ["2.4.14"] CVE-2021-36826

WP Project Manager <= 2.4.0 - Cross-Site Request Forgery Bypass Medium

September 16, 2020 Patched in ["2.4.1"] CVE-2020-36745

What It Does

Project Manager is a full project management suite for WordPress that adds kanban boards, Gantt charts, milestones, task tracking, and time tracking directly inside the WordPress dashboard. It lets small teams plan, assign, and report on work without leaving their existing site or paying for a SaaS tool like Asana or Trello.

Who It's For

This plugin is a good fit for small agencies, freelance coordinators, and in-house teams of roughly 2 to 15 people who already run their business on WordPress and want to keep project data on their own hosting. Construction, creative, nonprofit, and client services teams listed in the use cases will get the most from the milestone and time tracking features.

Who Should Skip It

If you already use a dedicated SaaS platform like Asana, Monday, or ClickUp, there is no real reason to duplicate that workflow inside WordPress. Enterprises needing SSO, advanced permissions, or strict compliance features should look elsewhere, since this plugin targets lighter, self-hosted use cases.

The Bottom Line

With an overall score of 75.82 out of 100, perfect maintenance and compatibility scores, and a healthy 76 rating from 181 users, Project Manager is a reliable, actively maintained option for teams that want project management embedded in WordPress. The main weaknesses are its modest install base compared with mainstream SaaS tools and limited public support volume, which together make it better suited to small teams than to large organizations. If you want native kanban, Gantt, and time tracking on your own hosting without a separate subscription, it is worth a serious look.

Pick FluentBoards if you want a slightly higher overall score and tighter integration with FluentCRM and the broader Fluent ecosystem for sales and marketing workflows.

SureFeedback Client Site 76/100

Pick SureFeedback when your priority is collecting visual client feedback on designs and live sites rather than running internal task management.

Atarim – Visual Feedback, Review & AI Collaboration 76/100

Pick Atarim if your workflow centers on visual website feedback and AI assisted collaboration with clients, rather than traditional kanban and Gantt style planning.

Zephyr Project Manager 75/100

Pick Zephyr Project Manager if you want a similarly scoped kanban and task tool with a lighter interface and you do not need the AI powered features bundled here.