AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress

78 Quality Score

Active Installs

17/30

With around 7,000 active installs, AcyMailing sits well below the top newsletter plugins like MailPoet (500,000 installs), which keeps its popularity score modest even after weighting.

Update Freshness

25/25

The plugin was updated on 9 July 2026 and is tested against WordPress 7.0.1, signalling active and current development with no signs of abandonment.

User Rating

14/15

A 96 out of 100 across 157 reviews is excellent and suggests strong user satisfaction among those who have installed it.

Support Health

8/15

Support thread data shows zero threads and zero resolutions, which is either a sign that users rarely need help or that support requests go through paid channels and the forum; either way it limits confidence.

WP Compatibility

15/15

Compatibility is full marks, with support back to WordPress 5.0 and PHP 7.4, covering the vast majority of current installations.

Scores higher than 68% of indexed plugins

About

Boost audience engagement & lead generation with AcyMailing, an all-in-one newsletter automation tool for your marketing success.

Active Installs 5k+

Rating ★★★★½ 4.8/5

Last Updated 2026-09-24 2:59pm GMT

Requires WordPress 5.8+

Tested Up To 7.1.2

Requires PHP 7.4+

Security History

15 known vulnerabilities, all patched

8 High 7 Medium

Most recent: September 10, 2026

View details ▸

AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress <= 11.0.4 - Unauthenticated Arbitrary File Read via 'user[name]' Parameter High

September 10, 2026 Patched in ["11.0.5"] CVE-2026-77807

AcyMailing SMTP Newsletter <= 10.11.1 - Missing Authorization Medium

August 13, 2026 Patched in ["11.0.0"] CVE-2026-28181

AcyMailing SMTP Newsletter <= 10.11.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting Medium

August 13, 2026 Patched in ["11.0.0"] CVE-2026-28182

AcyMailing <= 10.11.1 - Authenticated (Subscriber+) Missing Authorization to Account Takeover via Notification Template Update High

August 11, 2026 Patched in ["11.0.0"] CVE-2026-15426

AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress < 10.11.1 - Unauthenticated SQL Injection High

August 6, 2026 Patched in ["10.11.1"] CVE-2026-14920

AcyMailing <= 10.10.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'alignment' Attribute Medium

July 8, 2026 Patched in ["10.11.0"] CVE-2026-12170

AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress <= 10.11.0 - Unauthenticated Stored Cross-Site Scripting High

July 6, 2026 Patched in ["10.11.1"] CVE-2026-57741

AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress <= 10.11.0 - Unauthenticated SQL Injection High

July 6, 2026 Patched in ["10.11.1"] CVE-2026-57739

AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress <= 10.11.1 - Missing Authorization Medium

July 6, 2026 Patched in ["11.0.0"] CVE-2026-57740

AcyMailing <= 10.8.2 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation via 'acymailing_router' High

May 19, 2026 Patched in ["10.9.0"] CVE-2026-5200

AcyMailing 9.11.0 - 10.8.1 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation High

April 15, 2026 Patched in ["10.8.2"] CVE-2026-3614

AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress <= 9.11.0 - Reflected Cross-Site Scripting Medium

December 30, 2024 Patched in ["9.11.1"] CVE-2025-24617

AcyMailing <= 9.7.2 - Authenticated (Subscriber+) Arbitrary File Upload via acym_extractArchive Function High

August 21, 2024 Patched in ["9.8.0"] CVE-2024-7384

AcyMailing SMTP Newsletter <= 8.6.2 - Reflected Cross-Site Scripting Medium

September 5, 2023 Patched in ["8.6.3"] CVE-2023-41867

AcyMailing SMTP Newsletter < 7.5.0 - Open Redirect Medium

April 29, 2021 Patched in ["7.5.0"] CVE-2021-24288

What It Does

AcyMailing is a WordPress newsletter plugin that lets you build mailing lists, design emails with a drag-and-drop editor, and set up marketing automation workflows directly from your dashboard. It handles subscription forms, list segmentation, and scheduled campaigns without routing everything through a separate email service. The marketing automation add-on covers drip sequences and behavioural triggers.

Who It's For

It fits site owners who want a self-hosted newsletter tool bundled into WordPress rather than paying Mailchimp or ActiveCampaign on a per-contact basis. Small to mid-sized businesses, membership sites, and bloggers who send regular campaigns and need basic automation will get the most out of it. Sites that need a simple opt-in form and a weekly broadcast are also well served.

Who Should Skip It

If you already use a dedicated ESP like Mailchimp, ConvertKit, or Klaviyo and are happy with it, this plugin adds complexity without much benefit. Sites expecting the same enterprise-level deliverability tools and analytics as a paid SaaS platform will likely be disappointed.

The Bottom Line

AcyMailing delivers solid ratings and clearly active development, but its 7,000 active installs and zero tracked support threads make it hard to recommend over MailPoet, which has roughly 70 times the user base at a comparable quality score. It is a reasonable pick for WordPress users who specifically want an all-in-one, self-hosted newsletter and automation suite and do not mind a smaller community. Treat it as a viable mid-tier option rather than the default choice.

Pick Elementor if your primary need is a full visual page builder rather than newsletter functionality, since the overlap with AcyMailing is minimal.

Hostinger Reach – AI-Powered Email Marketing for WordPress 89/100

Pick Hostinger Reach if you are on Hostinger hosting and want a tightly integrated, AI-assisted email tool that requires less setup than AcyMailing.

MC4WP: Mailchimp for WordPress 89/100

Pick MC4WP if you already use Mailchimp and only need a lightweight way to pipe WordPress forms into your existing account.

MailPoet – Newsletters, Email Marketing, and Automation 89/100

Pick MailPoet if you want a similarly self-hosted newsletter solution with a much larger install base (500,000), which usually means better community resources and more third-party integrations.

Page Builder by SiteOrigin 87/100

Pick SiteOrigin if you are evaluating page builders rather than newsletter tools, since it does not overlap meaningfully with AcyMailing's core function.