AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. A small install base leaves thin data to model from.

Older reviewers call it simple, fast and good value, while the two newest ones say the licence won't activate and support never replies.

1. ★★★★★ decoratie1202

   7mo ago

   When you pay for this plugin, it is not working. You cannot change any settings, or acces your license code. Gave it one star but this plugin is worth minus 20 stars. So they steal money from you Be aware from this plugin.

   Read on wp.org ↗
2. ★★★★★ cabbagetree

   1.3y ago

   support doesn’t reply, licence doesn’t work.. waste of time support system sucks..everytime has to fill a new form ..there is no way to track support ticket in system… support doesnt reply already watiing several days now

   Read on wp.org ↗
3. ★★★★★ Adam

   1.3y ago

   I’ve tried a few but this is the one for me that provides all the functionality I need in the freemium version. I guess if this newsletter ever gets serious, there’ll be the extra functionality there if we decide to upgrade.

   Read on wp.org ↗
4. ★★★★★ kuldaoo

   1.6y ago

   I use it since my old Joomla times. Very good tool. Thanks to all the developers

   Read on wp.org ↗
5. ★★★★★ kiikiikii

   2.4y ago

   Love everything about this plugin, easy to use. They added Woo block checkout compatibility recently, too. This topic was modified 2 years, 2 months ago by kiikiikii.

   Read on wp.org ↗
6. ★★★★★ dusterdoo

   2.4y ago

   Always – for me – scores a 10 on MailTester. Well thought out interface. Great design features, and love that it works with WordPress.

   Read on wp.org ↗
7. ★★★★★ perrineco

   2.5y ago

   Support never understands

   Read on wp.org ↗
8. ★★★★★ csamnana

   2.6y ago

   Very simple and useful plugin, I use the free veraion for years now and I like it.

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 10.11.1 A vulnerability allowing SQL injection has been patched. Updating is strongly recommended. See the whole changelog here. 10.11.1
2. — Version 11.0.0 We added a new option to handle the pixel tracking according to the new GDPR regulation. The code base has been completely reworked to improve security throughout the whole extension. We fixed a redirection to a 404 page 11.0.0
3. — Version 11.0.1 The tracking consent option is now also shown in the subscription forms edition page preview. We added back the pot file to allow custom translations with Loco Translate. The online version of an email can now be seen by 11.0.1
4. — Version 11.0.2 We fixed an issue that was breaking the display of some fields in the automations We fixed an issue that was blocking the followup creation See the whole changelog here. 11.0.2
5. — Version 11.0.3 The REST API now returns an error message when trying to create a campaign with unallowed lists. An issue that could occur in the automation conditions that could prevent adding new conditions in some cases has been fixe 11.0.3
6. — Version 11.0.4 A security has been added on the bounce messages handling to slightly improve performance. Pie charts have been fixed on the statistics page. See the whole changelog here. 11.0.4

14 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. Medium · 4.3 AcyMailing SMTP Newsletter <= 10.11.1 - Missing Authorization ↗
   2026-08-13 CVE-2026-28181 Missing Authorization Affects <= 10.11.1 Patched in 11.0.0
2. Medium · 6.4 AcyMailing SMTP Newsletter <= 10.11.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting ↗
   2026-08-13 CVE-2026-28182 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 10.11.1 Patched in 11.0.0
3. High · 8.8 AcyMailing <= 10.11.1 - Authenticated (Subscriber+) Missing Authorization to Account Takeover via Notification Template Update ↗
   2026-08-11 CVE-2026-15426 Improper Privilege Management Affects <= 10.11.1 Patched in 11.0.0
4. High · 7.5 AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress < 10.11.1 - Unauthenticated SQL Injection ↗
   2026-08-06 CVE-2026-14920 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects < 10.11.1 Patched in 10.11.1
5. Medium · 6.4 AcyMailing <= 10.10.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'alignment' Attribute ↗
   2026-07-08 CVE-2026-12170 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 10.10.2 Patched in 10.11.0
6. High · 7.2 AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress <= 10.11.0 - Unauthenticated Stored Cross-Site Scripting ↗
   2026-07-06 CVE-2026-57741 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 10.11.0 Patched in 10.11.1
7. High · 7.5 AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress <= 10.11.0 - Unauthenticated SQL Injection ↗
   2026-07-06 CVE-2026-57739 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 10.11.0 Patched in 10.11.1
8. Medium · 4.3 AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress <= 10.11.1 - Missing Authorization ↗
   2026-07-06 CVE-2026-57740 Missing Authorization Affects <= 10.11.1 Patched in 11.0.0
9. High · 8.8 AcyMailing <= 10.8.2 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation via 'acymailing_router' ↗
   2026-05-19 CVE-2026-5200 Missing Authorization Affects <= 10.8.2 Patched in 10.9.0
10. High · 8.8 AcyMailing 9.11.0 - 10.8.1 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation ↗
    2026-04-15 CVE-2026-3614 Missing Authorization Affects 9.11.0 - 10.8.1 Patched in 10.8.2
11. Medium · 6.1 AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress <= 9.11.0 - Reflected Cross-Site Scripting ↗
    2024-12-30 CVE-2025-24617 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 9.11.0 Patched in 9.11.1
12. High · 7.5 AcyMailing <= 9.7.2 - Authenticated (Subscriber+) Arbitrary File Upload via acym_extractArchive Function ↗
    2024-08-21 CVE-2024-7384 Unrestricted Upload of File with Dangerous Type Affects <= 9.7.2 Patched in 9.8.0
13. Medium · 6.1 AcyMailing SMTP Newsletter <= 8.6.2 - Reflected Cross-Site Scripting ↗
    2023-09-05 CVE-2023-41867 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 8.6.2 Patched in 8.6.3
14. Medium · 6.1 AcyMailing SMTP Newsletter < 7.5.0 - Open Redirect ↗
    2021-04-29 CVE-2021-24288 URL Redirection to Untrusted Site ('Open Redirect') Affects < 7.5.0 Patched in 7.5.0

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0

Translated into 30 languages, 6 at 90% or more

Plus 6 more locales with partial translations.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-08-06 7K+ → 6K+ down after 263 days in tier
2. 2025-11-16 8K+ → 7K+ down after 2 days in tier
3. 2025-11-14 7K+ → 8K+ up after 81 days in tier
4. 2025-08-25 8K+ → 7K+ down after 2 days in tier
5. 2025-08-23 7K+ → 8K+ up after 1 days in tier
6. 2025-08-22 8K+ → 7K+ down after 2 days in tier
7. 2025-08-20 7K+ → 8K+ up after 2 days in tier
8. 2025-08-18 8K+ → 7K+ down after 2 days in tier

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• Hostinger Reach – AI-Powered Email Marketing for WordPress 1M+ installs · 4.3★ · 2 shared tags A
• MailPoet – Newsletters, Email Marketing, and Automation 500K+ installs · 4.4★ · 2 shared tags A
• Newsletter – Send awesome emails from WordPress 200K+ installs · 4.6★ · 2 shared tags B
• Brevo – Email, SMS, Web Push, Chat, and more. 100K+ installs · 4.1★ · 2 shared tags A
• Newsletters, Email Marketing, SMS and Popups by Omnisend 100K+ installs · 4.4★ · 2 shared tags A
• FluentCRM – Email Newsletter, Automation, Email Marketing, Email Campaigns, Optins, Leads, and CRM Solution 80K+ installs · 4.7★ · 2 shared tags A

Embed this report card

Drop a live Pulse card for AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress into a readme, a review or a deck. It updates itself.

AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress: 6K+ active installs, 4.8★ (157 reviews). Plugin Pulse (WP Mayor), as of 2026-08-28. https://plugins.wpmayor.com/plugin/acymailing