Newsletter – Send awesome emails from WordPress

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory searches this plugin turns up in, and which way each one is moving. WordPress.org publishes no history of search positions, so this starts the day we first tracked a keyword and never backfills.

wp.org is where the directory puts the plugin for that search. On merit is where it would sit if results were ranked on rating, support and updates, without the install boost. The last column is how far the wp.org position moved, from our first reading in the last 90 days to the latest.

1128 searches this plugin appeared in over the last 90 days, 20 listed. 967 left out as unrelated or noise (years, numbers, stray words).

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Crossed into this band 9 months ago and the previous band took 3.3 years to cross, so the real count is still just under 300K.

1. ★★★★★ edbellsmokeandbooze

   4mo ago

   BEST FREE NEWSLETTER PLUGIN ! Thank you !

   Read on wp.org ↗
2. ★★★★★ Justin

   5mo ago

   Having paid a stupid amount of money to Mailchimp over the years a website I webmaster for wanted to get a plugin to take over that job. Newsletter looked like it could. Personally I have always found Mailchimp way to confusing. Newsletter looked like it might be better. Unfortunately, I am very experienced and I found it a bit confusing… eventually I could sus it… but what about the admins of the website? NO CHANCE! They could not get it worked out, so the only option I had was to dump this plugin for one they could understand. The Newsletter plugin DOES do it all, granted, but the interface is not intuitive enough and feels as “IDK” as Mailchimp, just not quite as bad. I really wanted this plugin to be “the one” and I think it could be, if only the user interface was more simple, then the website admins could handle it.

   Read on wp.org ↗
3. ★★★★★ cendrinemedia

   6mo ago

   I have used this plugin for a long time. Until last week, it worked perfectly. Now, it no longer sends newsletters. I cannot find any solutions to resolve the issue. This topic was modified 2 months, 4 weeks ago by cendrinemedia.

   Read on wp.org ↗
4. ★★★★★ fert

   8mo ago

   It just works. Yes, it is a bit complex because it offers you lots of options. And yes, the newsletter editor could use a facelift. But keep in mind that most of the functionality of this beast comes for free. It is a fantastic plugin that does the job.

   Read on wp.org ↗
5. ★★★★★ PacificSailors

   8mo ago

   I used to use MailChimp and found it too overwhelming with having to go back and forth between WP and MC. Not to mention I couldn’t have more than 1000 subs. Now it’s all in my WP. And easy to use!

   Read on wp.org ↗
6. ★★★★★ Bettega

   9mo ago

   I’ve been using the free version of the Newsletter plugin and the experience has been consistently positive. The configuration process is straightforward, and the plugin provides a stable set of features without unnecessary overhead. I also integrated it with Amazon S3, and the setup worked as expected, with no compatibility issues so far. For users looking for a dependable newsletter solution with clean integration options, this plugin is a practical choice. I recommend it for projects that need a lightweight and well‑maintained tool.

   Read on wp.org ↗
7. ★★★★★ wdtp

   10mo ago

   The Newsletter Plugin is one the most well built and supported Plugins I’ve ever used for WordPress. Highly recommended! It strikes a fantastic balance between power and ease of use.

   Read on wp.org ↗
8. ★★★★★ dkoek

   11mo ago

   Works great with a lot of free features. I use it for a small volunteers community. Only problem is how to get a free SMTP server which has nothing to do with the newsletter plugin.

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 9.3.1 Fixed warning with WPML and the active languages filter returning a null value Added the autorecovery delay options on the main settings 9.3.1
2. — Version 9.3.0 Added new link tracking method (see the main Settings) Added stats reset button for draft newsletters Removed the obsolete constant NEWSLETTER_ACTION_TYPE Removed the obsolete constant NEWSLETTER_TRACKING_TYPE 9.3.0
3. — Version 9.2.9 Integrated the AI feature of the AI addon (now using the WP connectors) 9.2.9
4. — Version 9.2.8 Added autorecovery after a fatal error of the external delivery service 9.2.8
5. — Version 9.2.7 Fixed checkbox appearance on block settings with WP 7 9.2.7
6. — Version 9.2.6 Updated WP 7 compatibility Added note on preview of draft newsletters 9.2.6

All 24 disclosed vulnerabilities are patched in the current version (9.5.3). Sites still on an older version should update.

1. Patched High · 7.2 Newsletter <= 9.4.0 - Unauthenticated Stored Cross-Site Scripting via 'np1' Custom Field Parameter ↗
   2026-10-01 CVE-2026-96566 Improper Neutralization of Input During Web Page Generation Affects <= 9.4.0 Patched in 9.4.1
2. Patched Medium · 5.3 Newsletter <= 9.3.9 - Unauthenticated Insufficiently Protected Credentials via '/tnp/l/' Click-Tracking REST Endpoint (Raw Subscriber Token Cookie Disclosure) ↗
   2026-09-30 CVE-2026-92537 Insufficiently Protected Credentials Affects <= 9.3.9 Patched in 9.4.0
3. Patched Medium · 6.1 Newsletter <= 9.3.8 - Reflected Cross-Site Scripting via 'nn' Parameter ↗
   2026-09-17 CVE-2026-90981 Improper Neutralization of Input During Web Page Generation Affects <= 9.3.8 Patched in 9.3.9
4. Patched High · 7.2 Newsletter – Send awesome emails from WordPress <= 9.3.3 - Unauthenticated Stored Cross-Site Scripting ↗
   2026-08-19 CVE-2026-66596 Improper Neutralization of Input During Web Page Generation Affects <= 9.3.3 Patched in 9.3.4
5. Patched Medium · 4.3 Newsletter – Send awesome emails from WordPress <= 9.1.0 - Cross-Site Request Forgery to Newsletter Unsubscription ↗
   2026-01-19 CVE-2026-1051 Cross-Site Request Forgery Affects <= 9.1.0 Patched in 9.1.1
6. Patched Medium · 4.9 Newsletter <= 9.0.9 - Authenticated (Administrator+) SQL Injection ↗
   2025-12-15 CVE-2025-67999 Improper Neutralization of Special Elements used in an SQL Command Affects <= 9.0.9 Patched in 9.1.0
7. Patched Medium · 5.5 Newsletter <= 8.8.4 - Authenticated (Administrator+) Stored Cross-Site Scripting ↗
   2025-05-19 CVE-2025-3581 Improper Neutralization of Input During Web Page Generation Affects <= 8.8.4 Patched in 8.8.5
8. Patched Medium · 4.4 Newsletter <= 8.8.4 - Authenticated (Administrator+) Stored Cross-Site Scripting ↗
   2025-05-19 CVE-2025-3582 Improper Neutralization of Input During Web Page Generation Affects <= 8.8.4 Patched in 8.8.5
9. Patched Medium · 4.4 Newsletter <= 8.8.1 - Authenticated (Admin+) Stored Cross-Site Scripting ↗
   2025-05-13 CVE-2025-3584 Improper Neutralization of Input During Web Page Generation Affects <= 8.8.1 Patched in 8.8.2
10. Patched Medium · 4.4 Newsletter <= 8.7.0 - Authenticated (Admin+) Stored Cross-Site Scripting ↗
    2025-04-14 CVE-2025-3583 Improper Neutralization of Input During Web Page Generation Affects <= 8.7.0 Patched in 8.7.1
11. Patched Medium · 6.4 Newsletter <= 8.3.4 - Unauthenticated Stored Cross-Site Scripting via np1 ↗
    2024-06-04 CVE-2024-5317 Improper Neutralization of Input During Web Page Generation Affects <= 8.3.4 Patched in 8.3.5
12. Patched Medium · 4.3 Newsletter <= 8.0.6 - Cross-Site Request Forgery ↗
    2024-04-10 CVE-2024-31434 Cross-Site Request Forgery Affects <= 8.0.6 Patched in 8.0.7
13. Patched Medium · 5.3 Newsletter <= 8.2.0 - IP Spoofing ↗
    2024-03-28 CVE-2024-30522 Use of Less Trusted Source Affects <= 8.2.0 Patched in 8.2.1
14. Patched Medium · 4.7 Newsletter <= 8.0.6 - Cross-Site Request Forgery ↗
    2024-01-10 Cross-Site Request Forgery Affects <= 8.0.6 Patched in 8.0.7
15. Patched Medium · 6.4 Newsletter <= 7.8.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode ↗
    2023-08-17 CVE-2023-4772 Improper Neutralization of Input During Web Page Generation Affects <= 7.8.9 Patched in 7.9.0
16. Patched Medium · 4.7 Newsletter <= 7.6.8 - Reflected Cross-Site Scripting ↗
    2023-03-27 CVE-2023-27922 Improper Neutralization of Input During Web Page Generation Affects <= 7.6.8 Patched in 7.6.9
17. Patched Medium · 5.5 Newsletter <= 7.4.5 - Authenticated (Admin+) Stored Cross-Site Scripting ↗
    2022-05-30 CVE-2022-1889 Improper Neutralization of Input During Web Page Generation Affects < 7.4.6 Patched in 7.4.6
18. Patched Medium · 6.1 Newsletter – Send awesome emails from WordPress <= 7.4.4 - Reflected Cross-Site Scripting ↗
    2022-05-23 CVE-2022-1756 Improper Neutralization of Input During Web Page Generation Affects <= 7.4.4 Patched in 7.4.5
19. Patched Medium · 6.5 Newsletter <= 6.8.1 - Reflected Cross-Site Scripting ↗
    2020-08-03 CVE-2020-35933 Improper Neutralization of Input During Web Page Generation Affects < 6.8.2 Patched in 6.8.2
20. Patched High · 7.5 Newsletter <= 6.8.1 - Authenticated PHP Object Injection ↗
    2020-08-02 CVE-2020-35932 Deserialization of Untrusted Data Affects < 6.8.2 Patched in 6.8.2
21. Patched High · 8.3 Newsletter <= 6.7.6 - Stored Cross-Site Scripting ↗
    2020-07-12 Improper Neutralization of Input During Web Page Generation Affects <= 6.7.6 Patched in 6.7.7
22. Patched Medium · 5.5 Newsletter <= 6.5.3 - CSV Injection ↗
    2020-03-16 Improper Input Validation Affects <= 6.5.3 Patched in 6.5.4
23. Patched Medium · 4.3 Newsletter <= 3.8.2 - Open Redirect ↗
    2015-03-30 URL Redirection to Untrusted Site Affects <= 3.8.2 Patched in 3.8.3
24. Patched Medium · 6.1 Newsletter <= 3.2.6 - Reflected Cross-Site Scripting ↗
    2013-05-14 Improper Neutralization of Input During Web Page Generation Affects <= 3.2.6 Patched in 3.2.7

Translated into 122 languages, 14 at 90% or more

Plus 98 more locales with partial translations.

Whether ChatGPT and Claude name this plugin when asked the category question, and whether the readme gives them something to quote.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-01-29 300K+ → 200K+ down after 1196 days in tier
2. 2022-10-21 400K+ → 300K+ down after 1 days in tier
3. 2022-10-20 300K+ → 400K+ up after 49 days in tier
4. 2022-09-01 400K+ → 300K+ down after 365 days in tier
5. 2021-09-01 300K+ → 400K+ up after 1249 days in tier
6. 2018-04-01 200K+ → 300K+ up after 784 days in tier
7. 2016-02-07 100K+ → 200K+ up

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

Embed this report card

Drop a live Pulse card for Newsletter – Send awesome emails from WordPress into a readme, a review or a deck. It updates itself.

Newsletter – Send awesome emails from WordPress: 200K+ active installs, 4.6★ (1,205 reviews). Plugin Pulse (WP Mayor), as of 2026-11-01. https://plugins.wpmayor.com/plugin/newsletter