Email Encoder – Protect Email Addresses and Phone Numbers

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 64% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. A declining trend compresses what a buyer would pay.

1. ★★★★★ GuitarPix

   2mo ago

   Exactly what I’d wanted out of it.

   Read on wp.org ↗
2. ★★★★★ RiccLazz

   3mo ago

   best plugin for email encryption. would love to see an option to disable encryption based on css classes or IDs. would be an upgrade to this fantastic plugin.

   Read on wp.org ↗
3. ★★★★★ 720florian

   5mo ago

   Good free plugin. I hope it will soon be able to automatically recognize phone numbers

   Read on wp.org ↗
4. ★★★★★ paulr25

   6mo ago

   I’m actually impressed that it’s still free.

   Read on wp.org ↗
5. ★★★★★ niveksa

   8mo ago

   Excellent plugin and support. Highly recommended.

   Read on wp.org ↗
6. ★★★★★ fletchadam

   9mo ago

   Encodes email addresses, phone numbers, ahrefs. Great!

   Read on wp.org ↗
7. ★★★★★ sankari

   10mo ago

   Thanks for the quick fix and your friendly and attentive support!

   Read on wp.org ↗
8. ★★★★★ neotek9

   12mo ago

   Works great but needs an update. Thank you. Receiving this in the error log. Notice: Function _load_textdomain_just_in_time was called <strong>incorrectly</strong>. Translation loading for the <code>email-encoder-bundle</code> domain was triggered too early. This is usually an indicator for some code in the plugin or theme running too early. Translations should be loaded at the <code>init</code> action or later. Please see <a href=”/”>Debugging in WordPress</a> for more information. (This message was added in version 6.7.0.) in /home/holistic/public_html/wp-includes/functions.php on line 6121 Happy to send a donation via PayPal. Cheers.

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 2.5.2 Fix: On iPhone/iPad, an email link set to open in a new tab (or opened via “Open Link in New Tab”) could show a Safari “cannot run the script” error — email links are now real links that open the mail app cleanly in ever 2.5.2
2. — Version 2.5.1 Fix: On large pages, a plain email inside another plugin’s inline script data (for example the Helpie FAQ list) could be encoded there and break that script, spilling raw content into the space below the footer — inline 2.5.1
3. — Version 2.5.0 Feature: Redesigned settings page — branded header with logo and version, modern layout, friendlier form controls Feature: Reorganised settings into clearer tabs, including a dedicated Exclusions tab and a tidied-up Tool 2.5.0
4. — Version 2.4.8 Fix: Emails inside dropdown options now display correctly in Firefox (and consistently across all browsers) Fix: Rich-text and styled markup inside mailto links (Divi 4 Text modules, Divi 5 Link blocks, etc.) is now pres 2.4.8
5. — Version 2.4.7 Security: Escaped data-enc-email attribute output to close XSS bypass reported by WPScan (CVE-2026-2840 follow-up) 2.4.7
6. — Version 2.4.6 Fix: Resolved _load_textdomain_just_in_time warning on WordPress 6.7+ Feature: Added “Copy Support Info” button to admin sidebar for easier support diagnostics Tweak: Improved settings loading performance with two-phase 2.4.6

10 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. High · 7.2 Email Encoder – Protect Email Addresses and Phone Numbers < 2.4.7 - Unauthenticated Stored Cross-Site Scripting ↗
   2026-06-11 CVE-2026-5776 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < 2.4.7 Patched in 2.4.7
2. Medium · 4.4 Email Encoder – Protect Email Addresses and Phone Numbers < 2.3.4 - Authenticated (Administrator+) Stored Cross-Site Scripting ↗
   2026-04-21 CVE-2024-7083 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < 2.3.4 Patched in 2.3.4
3. Medium · 6.4 Email Encoder – Protect Email Addresses and Phone Numbers <= 2.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via eeb_mailto Shortcode ↗
   2026-04-15 CVE-2026-2840 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.4.4 Patched in 2.4.5
4. Medium · 4.4 Email Encoder – Protect Email Addresses and Phone Numbers <= 2.2.1 - Authenticated (Admin+) Stored Cross-Site Scripting ↗
   2024-07-08 CVE-2024-4483 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.2.1 Patched in 2.2.2
5. Medium · 6.4 Email Encoder – Protect Email Addresses and Phone Numbers <= 2.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode ↗
   2024-02-13 CVE-2024-1282 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.2.0 Patched in 2.2.1
6. Medium · 6.4 Email Encoder – Protect Email Addresses and Phone Numbers <= 2.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
   2024-01-09 CVE-2023-7070 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.1.9 Patched in 2.1.10
7. Medium · 6.4 Email Encoder Bundle <= 2.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode ↗
   2023-11-15 CVE-2023-47821 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.1.8 Patched in 2.1.9
8. Medium · 6.4 Email Encoder <= 2.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode ↗
   2023-08-29 CVE-2023-4599 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.1.8 Patched in 2.1.9
9. Medium · 6.1 Email Encoder <= 2.1.1 - Reflected Cross Site Scripting ↗
   2021-08-02 CVE-2021-24599 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.1.1 Patched in 2.1.2
10. Medium · 6.1 Email Encoder < 1.4.2 - Cross-Site Scripting ↗
    2015-08-10 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < 1.4.2 Patched in 1.4.2

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0.1

Translated into 46 languages, 5 at 90% or more

Plus 22 more locales with partial translations.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2024-02-29 80K+ → 90K+ up after 407 days in tier
2. 2023-01-18 70K+ → 80K+ up after 3 days in tier
3. 2023-01-15 80K+ → 70K+ down after 1 days in tier
4. 2023-01-14 70K+ → 80K+ up after 1 days in tier
5. 2023-01-13 80K+ → 70K+ down after 1 days in tier
6. 2023-01-12 70K+ → 80K+ up after 6 days in tier
7. 2023-01-06 80K+ → 70K+ down after 2 days in tier
8. 2023-01-04 70K+ → 80K+ up after 3 days in tier

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• W wL Email Encrypter 90+ installs · 3.6★ · 3 shared tags D
• Email Address Obfuscation 2K+ installs · 4.2★ · 2 shared tags A
• PDF Password Protect 200+ installs · 4.0★ · 2 shared tags B
• Akismet Anti-spam: Spam Protection 5M+ installs · 4.7★ · 1 shared tag A
• Antispam Bee 700K+ installs · 4.8★ · 1 shared tag A
• WP Armour – Honeypot Anti Spam 400K+ installs · 5.0★ · 1 shared tag B

Embed this report card

Drop a live Pulse card for Email Encoder – Protect Email Addresses and Phone Numbers into a readme, a review or a deck. It updates itself.

Email Encoder – Protect Email Addresses and Phone Numbers: 90K+ active installs, 4.9★ (93 reviews). Plugin Pulse (WP Mayor), as of 2026-08-25. https://plugins.wpmayor.com/plugin/email-encoder-bundle