Newsletter – Send awesome emails from WordPress

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 30% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price.

1. ★★★★★ edbellsmokeandbooze

   1mo ago

   BEST FREE NEWSLETTER PLUGIN ! Thank you !

   Read on wp.org ↗
2. ★★★★★ Justin

   3mo ago

   Having paid a stupid amount of money to Mailchimp over the years a website I webmaster for wanted to get a plugin to take over that job. Newsletter looked like it could. Personally I have always found Mailchimp way to confusing. Newsletter looked like it might be better. Unfortunately, I am very experienced and I found it a bit confusing… eventually I could sus it… but what about the admins of the website? NO CHANCE! They could not get it worked out, so the only option I had was to dump this plugin for one they could understand. The Newsletter plugin DOES do it all, granted, but the interface is not intuitive enough and feels as “IDK” as Mailchimp, just not quite as bad. I really wanted this plugin to be “the one” and I think it could be, if only the user interface was more simple, then the website admins could handle it.

   Read on wp.org ↗
3. ★★★★★ cendrinemedia

   4mo ago

   I have used this plugin for a long time. Until last week, it worked perfectly. Now, it no longer sends newsletters. I cannot find any solutions to resolve the issue. This topic was modified 2 months, 4 weeks ago by cendrinemedia.

   Read on wp.org ↗
4. ★★★★★ fert

   6mo ago

   It just works. Yes, it is a bit complex because it offers you lots of options. And yes, the newsletter editor could use a facelift. But keep in mind that most of the functionality of this beast comes for free. It is a fantastic plugin that does the job.

   Read on wp.org ↗
5. ★★★★★ PacificSailors

   6mo ago

   I used to use MailChimp and found it too overwhelming with having to go back and forth between WP and MC. Not to mention I couldn’t have more than 1000 subs. Now it’s all in my WP. And easy to use!

   Read on wp.org ↗
6. ★★★★★ Bettega

   7mo ago

   I’ve been using the free version of the Newsletter plugin and the experience has been consistently positive. The configuration process is straightforward, and the plugin provides a stable set of features without unnecessary overhead. I also integrated it with Amazon S3, and the setup worked as expected, with no compatibility issues so far. For users looking for a dependable newsletter solution with clean integration options, this plugin is a practical choice. I recommend it for projects that need a lightweight and well‑maintained tool.

   Read on wp.org ↗
7. ★★★★★ wdtp

   8mo ago

   The Newsletter Plugin is one the most well built and supported Plugins I’ve ever used for WordPress. Highly recommended! It strikes a fantastic balance between power and ease of use.

   Read on wp.org ↗
8. ★★★★★ dkoek

   8mo ago

   Works great with a lot of free features. I use it for a small volunteers community. Only problem is how to get a free SMTP server which has nothing to do with the newsletter plugin.

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 9.3.1 Fixed warning with WPML and the active languages filter returning a null value Added the autorecovery delay options on the main settings 9.3.1
2. — Version 9.3.0 Added new link tracking method (see the main Settings) Added stats reset button for draft newsletters Removed the obsolete constant NEWSLETTER_ACTION_TYPE Removed the obsolete constant NEWSLETTER_TRACKING_TYPE 9.3.0
3. — Version 9.2.9 Integrated the AI feature of the AI addon (now using the WP connectors) 9.2.9
4. — Version 9.2.8 Added autorecovery after a fatal error of the external delivery service 9.2.8
5. — Version 9.2.7 Fixed checkbox appearance on block settings with WP 7 9.2.7
6. — Version 9.2.6 Updated WP 7 compatibility Added note on preview of draft newsletters 9.2.6

21 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. High · 7.2 Newsletter – Send awesome emails from WordPress <= 9.3.3 - Unauthenticated Stored Cross-Site Scripting ↗
   2026-08-19 CVE-2026-66596 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 9.3.3 Patched in 9.3.4
2. Medium · 4.3 Newsletter – Send awesome emails from WordPress <= 9.1.0 - Cross-Site Request Forgery to Newsletter Unsubscription ↗
   2026-01-19 CVE-2026-1051 Cross-Site Request Forgery (CSRF) Affects <= 9.1.0 Patched in 9.1.1
3. Medium · 4.9 Newsletter <= 9.0.9 - Authenticated (Administrator+) SQL Injection ↗
   2025-12-15 CVE-2025-67999 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 9.0.9 Patched in 9.1.0
4. Medium · 5.5 Newsletter <= 8.8.4 - Authenticated (Administrator+) Stored Cross-Site Scripting ↗
   2025-05-19 CVE-2025-3581 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 8.8.4 Patched in 8.8.5
5. Medium · 4.4 Newsletter <= 8.8.4 - Authenticated (Administrator+) Stored Cross-Site Scripting ↗
   2025-05-19 CVE-2025-3582 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 8.8.4 Patched in 8.8.5
6. Medium · 4.4 Newsletter <= 8.8.1 - Authenticated (Admin+) Stored Cross-Site Scripting ↗
   2025-05-13 CVE-2025-3584 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 8.8.1 Patched in 8.8.2
7. Medium · 4.4 Newsletter <= 8.7.0 - Authenticated (Admin+) Stored Cross-Site Scripting ↗
   2025-04-14 CVE-2025-3583 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 8.7.0 Patched in 8.7.1
8. Medium · 6.4 Newsletter <= 8.3.4 - Unauthenticated Stored Cross-Site Scripting via np1 ↗
   2024-06-04 CVE-2024-5317 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 8.3.4 Patched in 8.3.5
9. Medium · 4.3 Newsletter <= 8.0.6 - Cross-Site Request Forgery ↗
   2024-04-10 CVE-2024-31434 Cross-Site Request Forgery (CSRF) Affects <= 8.0.6 Patched in 8.0.7
10. Medium · 5.3 Newsletter <= 8.2.0 - IP Spoofing ↗
    2024-03-28 CVE-2024-30522 Use of Less Trusted Source Affects <= 8.2.0 Patched in 8.2.1
11. Medium · 4.7 Newsletter <= 8.0.6 - Cross-Site Request Forgery ↗
    2024-01-10 Cross-Site Request Forgery (CSRF) Affects <= 8.0.6 Patched in 8.0.7
12. Medium · 6.4 Newsletter <= 7.8.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode ↗
    2023-08-17 CVE-2023-4772 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 7.8.9 Patched in 7.9.0
13. Medium · 4.7 Newsletter <= 7.6.8 - Reflected Cross-Site Scripting ↗
    2023-03-27 CVE-2023-27922 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 7.6.8 Patched in 7.6.9
14. Medium · 5.5 Newsletter <= 7.4.5 - Authenticated (Admin+) Stored Cross-Site Scripting ↗
    2022-05-30 CVE-2022-1889 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < 7.4.6 Patched in 7.4.6
15. Medium · 6.1 Newsletter – Send awesome emails from WordPress <= 7.4.4 - Reflected Cross-Site Scripting ↗
    2022-05-23 CVE-2022-1756 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 7.4.4 Patched in 7.4.5
16. Medium · 6.5 Newsletter <= 6.8.1 - Reflected Cross-Site Scripting ↗
    2020-08-03 CVE-2020-35933 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < 6.8.2 Patched in 6.8.2
17. High · 7.5 Newsletter <= 6.8.1 - Authenticated PHP Object Injection ↗
    2020-08-02 CVE-2020-35932 Deserialization of Untrusted Data Affects < 6.8.2 Patched in 6.8.2
18. High · 8.3 Newsletter <= 6.7.6 - Stored Cross-Site Scripting ↗
    2020-07-12 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 6.7.6 Patched in 6.7.7
19. Medium · 5.5 Newsletter <= 6.5.3 - CSV Injection ↗
    2020-03-16 Improper Input Validation Affects <= 6.5.3 Patched in 6.5.4
20. Medium · 4.3 Newsletter <= 3.8.2 - Open Redirect ↗
    2015-03-30 URL Redirection to Untrusted Site ('Open Redirect') Affects <= 3.8.2 Patched in 3.8.3
21. Medium · 6.1 Newsletter <= 3.2.6 - Reflected Cross-Site Scripting ↗
    2013-05-14 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.2.6 Patched in 3.2.7

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0

Translated into 122 languages, 12 at 90% or more

Plus 98 more locales with partial translations.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-01-29 300K+ → 200K+ down after 1196 days in tier
2. 2022-10-21 400K+ → 300K+ down after 1 days in tier
3. 2022-10-20 300K+ → 400K+ up

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• Hostinger Reach – AI-Powered Email Marketing for WordPress 1M+ installs · 4.3★ · 3 shared tags A
• Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce 5K+ installs · 4.7★ · 3 shared tags A
• Constant Contact Forms by MailMunch 2K+ installs · 4.1★ · 3 shared tags A
• Elastic Email Subscribe Form 100+ installs · 4.0★ · 3 shared tags D
• MailPoet – Newsletters, Email Marketing, and Automation 500K+ installs · 4.4★ · 2 shared tags A
• Brevo – Email, SMS, Web Push, Chat, and more. 100K+ installs · 4.1★ · 2 shared tags A

Embed this report card

Drop a live Pulse card for Newsletter – Send awesome emails from WordPress into a readme, a review or a deck. It updates itself.

Newsletter – Send awesome emails from WordPress: 200K+ active installs, 4.6★ (1,203 reviews). Plugin Pulse (WP Mayor), as of 2026-08-25. https://plugins.wpmayor.com/plugin/newsletter