AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress

Older reviewers call it simple, fast and good value, while the two newest ones say the licence won't activate and support never replies.

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory searches this plugin turns up in, and which way each one is moving. WordPress.org publishes no history of search positions, so this starts the day we first tracked a keyword and never backfills.

wp.org is where the directory puts the plugin for that search. On merit is where it would sit if results were ranked on rating, support and updates, without the install boost. The last column is how far the wp.org position moved, from our first reading in the last 90 days to the latest.

76 searches this plugin appeared in over the last 90 days, 20 listed. 55 left out as unrelated or noise (years, numbers, stray words). 4 of its tags aren't in the top 24 for their own search.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Crossed into this band 47 days ago and a band this size takes about a year or more to cross, so the real count is still just under 6K.

1. ★★★★★ decoratie1202

   9mo ago

   When you pay for this plugin, it is not working. You cannot change any settings, or acces your license code. Gave it one star but this plugin is worth minus 20 stars. So they steal money from you Be aware from this plugin.

   Read on wp.org ↗
2. ★★★★★ cabbagetree

   1.5y ago

   support doesn’t reply, licence doesn’t work.. waste of time support system sucks..everytime has to fill a new form ..there is no way to track support ticket in system… support doesnt reply already watiing several days now

   Read on wp.org ↗
3. ★★★★★ Adam

   1.5y ago

   I’ve tried a few but this is the one for me that provides all the functionality I need in the freemium version. I guess if this newsletter ever gets serious, there’ll be the extra functionality there if we decide to upgrade.

   Read on wp.org ↗
4. ★★★★★ kuldaoo

   1.7y ago

   I use it since my old Joomla times. Very good tool. Thanks to all the developers

   Read on wp.org ↗
5. ★★★★★ kiikiikii

   2.6y ago

   Love everything about this plugin, easy to use. They added Woo block checkout compatibility recently, too. This topic was modified 2 years, 2 months ago by kiikiikii.

   Read on wp.org ↗
6. ★★★★★ dusterdoo

   2.6y ago

   Always – for me – scores a 10 on MailTester. Well thought out interface. Great design features, and love that it works with WordPress.

   Read on wp.org ↗
7. ★★★★★ perrineco

   2.6y ago

   Support never understands

   Read on wp.org ↗
8. ★★★★★ csamnana

   2.7y ago

   Very simple and useful plugin, I use the free veraion for years now and I like it.

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 10.11.1 A vulnerability allowing SQL injection has been patched. Updating is strongly recommended. See the whole changelog here. 10.11.1
2. — Version 11.0.0 We added a new option to handle the pixel tracking according to the new GDPR regulation. The code base has been completely reworked to improve security throughout the whole extension. We fixed a redirection to a 404 page 11.0.0
3. — Version 11.0.1 The tracking consent option is now also shown in the subscription forms edition page preview. We added back the pot file to allow custom translations with Loco Translate. The online version of an email can now be seen by 11.0.1
4. — Version 11.0.2 We fixed an issue that was breaking the display of some fields in the automations We fixed an issue that was blocking the followup creation See the whole changelog here. 11.0.2
5. — Version 11.0.3 The REST API now returns an error message when trying to create a campaign with unallowed lists. An issue that could occur in the automation conditions that could prevent adding new conditions in some cases has been fixe 11.0.3
6. — Version 11.0.4 A security has been added on the bounce messages handling to slightly improve performance. Pie charts have been fixed on the statistics page. See the whole changelog here. 11.0.4

All 19 disclosed vulnerabilities are patched in the current version (11.1.1). Sites still on an older version should update.

1. Patched High · 7.2 AcyMailing <= 11.1.0 - Unauthenticated Stored Cross-Site Scripting via 'customField[]' Parameter ↗
   2026-10-12 CVE-2026-102562 Improper Neutralization of Input During Web Page Generation Affects <= 11.1.0 Patched in 11.1.1
2. Patched High · 7.2 AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress <= 11.1.0 - Unauthenticated Stored Cross-Site Scripting ↗
   2026-10-07 CVE-2026-105318 Improper Neutralization of Input During Web Page Generation Affects <= 11.1.0 Patched in 11.1.1
3. Patched Critical · 9.1 AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress <= 11.0.5 - Unauthenticated Arbitrary File Deletion ↗
   2026-10-01 CVE-2026-95588 Improper Limitation of a Pathname to a Restricted Directory Affects <= 11.0.5 Patched in 11.1.0
4. Patched Critical · 9.8 AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress <= 11.0.5 - Unauthenticated Remote Code Execution ↗
   2026-09-30 CVE-2026-94389 Improper Control of Generation of Code Affects <= 11.0.5 Patched in 11.1.0
5. Patched High · 7.5 AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress <= 11.0.4 - Unauthenticated Arbitrary File Read via 'user[name]' Parameter ↗
   2026-09-10 CVE-2026-77807 Improper Limitation of a Pathname to a Restricted Directory Affects <= 11.0.4 Patched in 11.0.5
6. Patched Medium · 4.3 AcyMailing SMTP Newsletter <= 10.11.1 - Missing Authorization ↗
   2026-08-13 CVE-2026-28181 Missing Authorization Affects <= 10.11.1 Patched in 11.0.0
7. Patched Medium · 6.4 AcyMailing SMTP Newsletter <= 10.11.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting ↗
   2026-08-13 CVE-2026-28182 Improper Neutralization of Input During Web Page Generation Affects <= 10.11.1 Patched in 11.0.0
8. Patched High · 8.8 AcyMailing <= 10.11.1 - Authenticated (Subscriber+) Missing Authorization to Account Takeover via Notification Template Update ↗
   2026-08-11 CVE-2026-15426 Improper Privilege Management Affects <= 10.11.1 Patched in 11.0.0
9. Patched High · 7.5 AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress < 10.11.1 - Unauthenticated SQL Injection ↗
   2026-08-06 CVE-2026-14920 Improper Neutralization of Special Elements used in an SQL Command Affects < 10.11.1 Patched in 10.11.1
10. Patched Medium · 6.4 AcyMailing <= 10.10.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'alignment' Attribute ↗
    2026-07-08 CVE-2026-12170 Improper Neutralization of Input During Web Page Generation Affects <= 10.10.2 Patched in 10.11.0
11. Patched High · 7.2 AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress <= 10.11.0 - Unauthenticated Stored Cross-Site Scripting ↗
    2026-07-06 CVE-2026-57741 Improper Neutralization of Input During Web Page Generation Affects <= 10.11.0 Patched in 10.11.1
12. Patched High · 7.5 AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress <= 10.11.0 - Unauthenticated SQL Injection ↗
    2026-07-06 CVE-2026-57739 Improper Neutralization of Special Elements used in an SQL Command Affects <= 10.11.0 Patched in 10.11.1
13. Patched Medium · 4.3 AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress <= 10.11.1 - Missing Authorization ↗
    2026-07-06 CVE-2026-57740 Missing Authorization Affects <= 10.11.1 Patched in 11.0.0
14. Patched High · 8.8 AcyMailing <= 10.8.2 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation via 'acymailing_router' ↗
    2026-05-19 CVE-2026-5200 Missing Authorization Affects <= 10.8.2 Patched in 10.9.0
15. Patched High · 8.8 AcyMailing 9.11.0 - 10.8.1 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation ↗
    2026-04-15 CVE-2026-3614 Missing Authorization Affects 9.11.0 - 10.8.1 Patched in 10.8.2
16. Patched Medium · 6.1 AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress <= 9.11.0 - Reflected Cross-Site Scripting ↗
    2024-12-30 CVE-2025-24617 Improper Neutralization of Input During Web Page Generation Affects <= 9.11.0 Patched in 9.11.1
17. Patched High · 7.5 AcyMailing <= 9.7.2 - Authenticated (Subscriber+) Arbitrary File Upload via acym_extractArchive Function ↗
    2024-08-21 CVE-2024-7384 Unrestricted Upload of File with Dangerous Type Affects <= 9.7.2 Patched in 9.8.0
18. Patched Medium · 6.1 AcyMailing SMTP Newsletter <= 8.6.2 - Reflected Cross-Site Scripting ↗
    2023-09-05 CVE-2023-41867 Improper Neutralization of Input During Web Page Generation Affects <= 8.6.2 Patched in 8.6.3
19. Patched Medium · 6.1 AcyMailing SMTP Newsletter < 7.5.0 - Open Redirect ↗
    2021-04-29 CVE-2021-24288 URL Redirection to Untrusted Site Affects < 7.5.0 Patched in 7.5.0

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0

Translated into 31 languages, 5 at 90% or more

Plus 7 more locales with partial translations.

Whether ChatGPT and Claude name this plugin when asked the category question, and whether the readme gives them something to quote.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-09-14 6K+ → 5K+ down after 39 days in tier
2. 2026-08-06 7K+ → 6K+ down after 263 days in tier
3. 2025-11-16 8K+ → 7K+ down after 2 days in tier
4. 2025-11-14 7K+ → 8K+ up after 81 days in tier
5. 2025-08-25 8K+ → 7K+ down after 2 days in tier
6. 2025-08-23 7K+ → 8K+ up after 1 days in tier
7. 2025-08-22 8K+ → 7K+ down after 2 days in tier
8. 2025-08-20 7K+ → 8K+ up after 2 days in tier

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

Embed this report card

Drop a live Pulse card for AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress into a readme, a review or a deck. It updates itself.

AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress: 5K+ active installs, 4.8★ (157 reviews). Plugin Pulse (WP Mayor), as of 2026-10-31. https://plugins.wpmayor.com/plugin/acymailing