Skip to content
PluginCanary

AcyMailing - An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress

by AcyMailing Newsletter Team · 5,000+ active installs · Checked 3 Nov 2026
Healthy8 Warnings

Healthy: vulnerability published 12 Oct 2026, fixed in 11.1.1.

80/ 100 Canary Score
Sub-scores for AcyMailing - An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress
Ownership100
Maintenance100
Security60
Support70
Reputation60

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 12 Oct 2026, fixed in 11.1.1. Update to version 11.1.1 or later.12 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 7 Oct 2026, fixed in 11.1.1. Update to version 11.1.1 or later.7 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 1 Oct 2026, fixed in 11.1.0. Update to version 11.1.0 or later.1 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 30 Sep 2026, fixed in 11.1.0. Update to version 11.1.0 or later.30 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 10 Sep 2026, fixed in 11.0.5. Update to version 11.0.5 or later.10 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 13 Aug 2026, fixed in 11.0.0. Update to version 11.0.0 or later.13 Aug 2026Evidence
  • WarningSEC-1Vulnerability published 13 Aug 2026, fixed in 11.0.0. Update to version 11.0.0 or later.13 Aug 2026Evidence
  • WarningSEC-1Vulnerability published 11 Aug 2026, fixed in 11.0.0. Update to version 11.0.0 or later.11 Aug 2026Evidence
  • InfoSEC-316 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence
  • InfoMOM-2Downloads in the last 4 weeks are down more than half vs the 26-week average. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
plugin-master21 Nov 2018 to 21 Nov 2018, 1 commits
acyba23 Nov 2018 to 6 Oct 2026, 642 commits

2 committers recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
29 days ago
Releases, 24 months
81
Tested up to
7.1 current
Requires PHP
7.4 supported 8.2+
Releases per quarter for AcyMailing - An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress
Q1 20240
Q2 202421
Q3 202413
Q4 20241
Q1 20252
Q2 202522
Q3 20251
Q4 20252
Q1 20262
Q2 20262
Q3 202648
Q4 20261

Last release 6 Oct 2026. Tested with WordPress 7.1 (current).

Support

0% of 1 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
12 Oct 2026AcyMailing <= 11.1.0 - Unauthenticated Stored Cross-Site Scripting via 'customField[]' Parameter7.2<= 11.1.011.1.10
7 Oct 2026AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress <= 11.1.0 - Unauthenticated Stored Cross-Site Scripting7.2<= 11.1.011.1.10
1 Oct 2026AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress <= 11.0.5 - Unauthenticated Arbitrary File Deletion9.1<= 11.0.511.1.00
30 Sep 2026AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress <= 11.0.5 - Unauthenticated Remote Code Execution9.8<= 11.0.511.1.00
10 Sep 2026AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress <= 11.0.4 - Unauthenticated Arbitrary File Read via 'user[name]' Parameter7.5<= 11.0.411.0.50
13 Aug 2026AcyMailing SMTP Newsletter <= 10.11.1 - Missing Authorization4.3<= 10.11.111.0.00
13 Aug 2026AcyMailing SMTP Newsletter <= 10.11.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting6.4<= 10.11.111.0.00
11 Aug 2026AcyMailing <= 10.11.1 - Authenticated (Subscriber+) Missing Authorization to Account Takeover via Notification Template Update8.8<= 10.11.111.0.00
6 Aug 2026AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress < 10.11.1 - Unauthenticated SQL Injection7.5< 10.11.110.11.10
8 Jul 2026AcyMailing <= 10.10.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'alignment' Attribute6.4<= 10.10.210.11.026
6 Jul 2026AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress <= 10.11.1 - Missing Authorization4.3<= 10.11.111.0.028
6 Jul 2026AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress <= 10.11.0 - Unauthenticated SQL Injection7.5<= 10.11.010.11.14
6 Jul 2026AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress <= 10.11.0 - Unauthenticated Stored Cross-Site Scripting7.2<= 10.11.010.11.14
19 May 2026AcyMailing <= 10.8.2 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation via 'acymailing_router'8.8<= 10.8.210.9.076
15 Apr 2026AcyMailing 9.11.0 - 10.8.1 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation8.89.11.0 to 10.8.110.8.20
30 Dec 2024AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress <= 9.11.0 - Reflected Cross-Site Scripting6.1<= 9.11.09.11.10
21 Aug 2024AcyMailing <= 9.7.2 - Authenticated (Subscriber+) Arbitrary File Upload via acym_extractArchive Function7.5<= 9.7.29.8.0712
5 Sep 2023AcyMailing SMTP Newsletter <= 8.6.2 - Reflected Cross-Site Scripting6.1<= 8.6.28.6.3645
29 Apr 2021AcyMailing SMTP Newsletter < 7.5.0 - Open Redirect6.1< 7.5.07.5.0637

Source: Wordfence Intelligence.

Reputation

Lifetime rating 4.8 from 157 ratings. Quarterly trends appear as new reviews arrive.

Rating distribution
5 star148
4 star1
3 star0
2 star2
1 star6

Momentum

5,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for AcyMailing - An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress
4 May 2026187
11 May 2026336
18 May 2026498
25 May 2026223
1 Jun 2026199
8 Jun 20266,107
15 Jun 2026757
22 Jun 2026366
29 Jun 2026345
6 Jul 20264,750
13 Jul 2026855
20 Jul 2026367
27 Jul 2026431
3 Aug 20266,834
10 Aug 20262,869
17 Aug 20262,712
24 Aug 2026642
31 Aug 20262,510
7 Sep 2026792
14 Sep 2026627
21 Sep 20262,523
28 Sep 2026947
5 Oct 20263,247
12 Oct 2026717
19 Oct 2026664
26 Oct 2026502
2 Nov 202698

Weekly downloads over the last 4 weeks are 67% below the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

SureContact - Newsletters, Email Marketing, Automation, Revenue Tracking & CRMScore 93 · 10,000+Hostinger Reach - AI-Powered Email Marketing for WordPressScore 91 · 1,000,000+MailPoet - Newsletters, Email Marketing, and AutomationScore 91 · 500,000+KlaviyoScore 91 · 100,000+Newsletters, Email Marketing, SMS and Popups by OmnisendScore 91 · 100,000+

Facts

Version11.1.1
AuthorAcyMailing Newsletter Team
Added23 Nov 2018
Last updated6 Oct 2026
Active installs5,000+
Requires WordPress5.8
Tested up to7.1.4
Requires PHP7.4
CategoryMarketing & Advertising > Email Marketing & Campaigns
Tagsautomation, newsletter, Contact List, drag-and-drop, Email Marketing

Other plugins by this author: AcyMailing integration for WooCommerce, Anti Spam and list cleaner - AcyChecker, AcyMailing integration for Contact Form 7, AcyMailing - Filter users in automations by database query, AcyMailing - Custom headers in emails, AcyMailing integration for Gravity Forms, AcyMailing integration for The Events Calendar, AcyMailing - Export users in automations, AcyMailing integration for Modern Events Calendar, AcyMailing integration for Ultimate Member, AcyMailing - table of contents generator, AcyMailing integration for Advanced Custom Fields (ACF)

Questions

Is AcyMailing - An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress still maintained?

AcyMailing - An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress was last updated on 6 Oct 2026. Its Canary status is Healthy.

Is AcyMailing - An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress safe?

AcyMailing - An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress has no open unpatched vulnerabilities on record. 16 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns AcyMailing - An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress?

The wordpress.org author is AcyMailing Newsletter Team. Recent committers: acyba, plugin-master. We have recorded no ownership change.

What can I use instead of AcyMailing - An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress?

Plugins in the same category with a higher Canary Score: SureContact - Newsletters, Email Marketing, Automation, Revenue Tracking & CRM, Hostinger Reach - AI-Powered Email Marketing for WordPress, MailPoet - Newsletters, Email Marketing, and Automation, Klaviyo, Newsletters, Email Marketing, SMS and Popups by Omnisend.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue