OttoKit
OttoKit keeps widening its WordPress trigger surface one plugin at a time
Comparison · Mkt Auto
Buttondown vs Pimcore
A side-by-side editorial comparison of Buttondown and Pimcore — release velocity, themes, recent moves, and the top alternatives to consider.
Buttondown vs Pimcore: at a glance
What is Buttondown?
Buttondown ships almost daily, and most of it is someone else's bug report closed.
The changelog is a near-daily log of two to four items, overwhelmingly fixes, many crediting the customer who reported them by name. The editor accounts for a disproportionate share — pasted Word documents locking it, cursors that would not sit between stacked tables, blank lines above tables that could not be deleted. Feature work is smaller and steadier: multi-select subscribe form fields, a searchable font specimen panel, Bluesky link cards that re-sync themselves.
What is Pimcore?
Pimcore is shipping a security advisory almost every week.
Pimcore releases on a weekly-to-fortnightly patch cadence across two supported lines - 2026.2.x and the older 12.3.x - and the defining feature of the last two months is the volume of security work. Nearly every release carries at least one GHSA: WebDAV rename permissions, ImageGallery hotspot unserialize, Classificationstore field-name validation, blind SSRF via email test-send, Custom Report field allowlisting. Around it sits ordinary bug fixing in workflows, thumbnails, and data object handling.
Buttondown vs Pimcore: editorial side-by-side
Buttondown
5.0MKT AUTO
Buttondown ships almost daily, and most of it is someone else's bug report closed.
◆ Current state
The changelog is a near-daily log of two to four items, overwhelmingly fixes, many crediting the customer who reported them by name. The editor accounts for a disproportionate share — pasted Word documents locking it, cursors that would not sit between stacked tables, blank lines above tables that could not be deleted. Feature work is smaller and steadier: multi-select subscribe form fields, a searchable font specimen panel, Bluesky link cards that re-sync themselves.
◆ Where it's heading
The pattern is a small team working a public queue in the open, and the fixes cluster where newsletter software actually breaks: rich-text editing, subscriber state transitions, and cross-posting to social platforms. Several recent items concern silent failures specifically — automations skipping sends without saying so, cross-posts marked failed after publishing, resubscribes quietly changing subscriber state. Correcting quiet-wrong behaviour into loud-correct behaviour is the through-line, and it matters more in a product where a mistake reaches someone's whole list.
◆ Prediction
Expect the cadence to hold and the editor to keep generating items, since that is where the reported bugs concentrate. The entries are day-stamped batches, so individual releases carry no version or theme to read direction from.
Pimcore
5.0MKT AUTO
Pimcore is shipping a security advisory almost every week.
◆ Current state
Pimcore releases on a weekly-to-fortnightly patch cadence across two supported lines - 2026.2.x and the older 12.3.x - and the defining feature of the last two months is the volume of security work. Nearly every release carries at least one GHSA: WebDAV rename permissions, ImageGallery hotspot unserialize, Classificationstore field-name validation, blind SSRF via email test-send, Custom Report field allowlisting. Around it sits ordinary bug fixing in workflows, thumbnails, and data object handling.
◆ Where it's heading
The advisories are not scattered; they cluster on the surfaces where Pimcore accepts structured input from an authenticated user - custom reports, classification stores, WebDAV, grid configuration. The fixes follow a consistent method of allowlisting fields, enforcing permissions at the operation rather than the screen, and refusing to echo raw database errors. Read together, this is a deliberate audit of the admin surface rather than a run of unrelated reports, and it is being done in public one patch at a time.
◆ Prediction
The audit pattern points at the remaining input-accepting admin surfaces - imports, grid and filter parsers, WebDAV operations beyond MOVE - so expect more advisories of the same shape before the cadence slows.
Alternatives to Buttondown and Pimcore
Other Mkt Auto products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either Buttondown or Pimcore.
Craft CMS
Craft 6's alphas keep converting the plugin API, one removal at a time
Joomla
Two security releases ship the same day, and 6.2 finally clears alpha
Flodesk
Flodesk just moved its analytics out of the dashboard and into Claude and ChatGPT.
Formidable Forms
Formidable widens MCP compatibility and locks down signature files
Mailtrap
Mailtrap is assembling a full email operations platform, one category step at a time
See all Buttondown alternatives → · See all Pimcore alternatives →
Recent activity from Buttondown and Pimcore
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
- 1d agoPimcoreWebDAV MOVE now enforces rename permission
- 1d agoButtondownMulti-select signup fields and self-syncing Bluesky cards
- 2d agoButtondownSilent automation skips fixed; re-adding unsubscribers keeps them pending
- 5d agoButtondownFaster draft sends; Word paste no longer locks the editor
- 6d agoButtondownBlank line above a table can be deleted
- 8d agoPimcoreThree security advisories close unserialize, Classificationstore, and Twig sandbox holes
- 8d agoButtondownFont picker becomes a searchable specimen panel
- 11d agoPimcore12.3 branch patch: object deserialization and Carbon assertion fixes
- 11d agoPimcoreBug batch: inheritance precedence, cache sessions, workflow checkboxes
- 12d agoButtondownNon-square icons no longer stretch in the archive navbar
- 13d agoPimcoreBlind SSRF in email test-send closed; language permissions enforced on grids
- 21d agoPimcoreCustom Report locked to a field allowlist; raw DB errors no longer leak
Frequently asked questions
What is the difference between Buttondown and Pimcore?
They serve adjacent needs but don't currently overlap on shipped themes. Buttondown and Pimcore are shipping at a similar cadence (velocity 5.0 vs 5.0, both within Sparkpulse's "active" band). See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Is Buttondown better than Pimcore?
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Buttondown and Pimcore are shipping at a similar cadence (velocity 5.0 vs 5.0, both within Sparkpulse's "active" band). For your specific use case, the alternatives sections above list other Mkt Auto products to evaluate alongside.
What are the best alternatives to Buttondown?
Top Buttondown alternatives in Mkt Auto are ranked by recent ship velocity. Browse the "Buttondown alternatives" section above for the current picks, or visit /alternatives/buttondown for the full list with editorial commentary on each.
What are the best alternatives to Pimcore?
Top Pimcore alternatives in Mkt Auto are ranked by recent ship velocity. Browse the "Pimcore alternatives" section above for the current picks, or visit /alternatives/pimcore for the full list with editorial commentary on each.