Email Address Encoder
by Till Krüss 4.2 (160 reviews)

Email Address Encoder

A lightweight plugin that protects email addresses from email-harvesting robots, by encoding them into decimal and hexadecimal entities.

Email Address Encoder ranks #410 among WordPress.org plugins with 100,000+ active installations, is #30 of 3,634 in the Communication category, a 4.2/5 rating from 160 reviews, and was last updated Apr 12, 2026. Data from WordPress.org, refreshed twice daily — see methodology.

Tested up to WP 7.0.8 (Current: 7.1.4)
v1.0.25 Current Version v1.0.25
Updated 6 months ago Last Update on 12 Apr, 2026
Refreshed 18 hours ago Last Refreshed on
#30 of 3,634 in Communication Top 1% by installs Downloads -29.8% this week
View on WordPress.org
Rank
#410
— No change
Active Installs
100K+
-23.6%
KW Avg Position
32.8
— No change
Downloads
1.7M
+79 today
Support Resolved
50%
— No change
Rating
84%
Review 4.2 out of 5
4.2 (160 reviews)

Next Milestone 200K

Total Progress 29.3%
100K+ 200K+
128
Ranks to Climb
-
Growth Needed
8,000,000
Active Installs
Pro

Unlock Exact Install Count

See the precise estimated active installs for this plugin, calculated from real-time ranking data.

  • Exact install estimates within tiers
  • Track install growth over time
  • Milestone progress predictions
Upgrade to Pro
Need 70,719 more installs to reach 200K+

Rank Changes

387 398 409 419 430 25-10-2026 26-10-2026 27-10-2026 28-10-2026 29-10-2026 30-10-2026 31-10-2026 01-11-2026
387 398 409 419 430 17-10-2026 18-10-2026 19-10-2026 20-10-2026 21-10-2026 22-10-2026 23-10-2026 24-10-2026 25-10-2026 26-10-2026 27-10-2026 28-10-2026 29-10-2026 30-10-2026 31-10-2026 01-11-2026
Current #410
Change
Best #

Upgrade to Pro

Unlock 30-day and 90-day rank history charts with a Pro subscription.

Upgrade Now

Active Installs Growth

Active Installs 0,000,000+
Growth +0.0%
Peak 0,000,000

Downloads Growth

0 100 200 300 400 500 600 25-10-2026 26-10-2026 27-10-2026 28-10-2026 29-10-2026 30-10-2026 31-10-2026 01-11-2026
0 200 400 600 800 1K 17-10-2026 18-10-2026 19-10-2026 20-10-2026 21-10-2026 22-10-2026 23-10-2026 24-10-2026 25-10-2026 26-10-2026 27-10-2026 28-10-2026 29-10-2026 30-10-2026 31-10-2026 01-11-2026
Downloads
Growth
Peak

Upgrade to Pro

Unlock 30-day, 90-day, and yearly download history charts with a Pro subscription.

Upgrade Now

Reviews & Ratings

4.2
160 reviews
Overall 84%
5
119 (74%)
4
6 (4%)
3
3 (2%)
2
6 (4%)
1
26 (16%)

Support Threads Overview

Resolved
Unresolved
2
Total Threads
1
Resolved
1
Unresolved
50%
Resolution Rate

Security History

Source: WPVulnerability

4 known vulnerabilities on record · 1 in the last 24 months · checked 1 week ago

  1. Email Address Encoder [email-address-encoder] < 1.0.25

    CVE-2026-5305 · Fixed in v1.0.25

  2. Email Address Encoder [email-address-encoder] < 1.0.24

    CVE-2024-43927 · Fixed in v1.0.24

  3. Email Address Encoder [email-address-encoder] < 1.0.23

    CVE-2023-48765 · Fixed in v1.0.23

  4. Email Address Encoder [email-address-encoder] < 1.0.23

    CVE-2023-48765 · Fixed in v1.0.23

TL;DR

AI summary of the plugin's readme

This plugin is for WordPress site owners who publish email addresses in posts, pages, comments, or widgets. It solves email harvesting by encoding plain email addresses and mailto links into decimal and hexadecimal entities.

  • Encodes email addresses in posts
  • Encodes mailto links
  • Decimal and hexadecimal entity encoding
  • Works on comments and excerpts
  • Works on text widgets
  • No JavaScript required
  • [encode] shortcode for phone numbers
  • Free page scanner tool

Frequently Asked Questions

Common questions about Email Address Encoder

This plugin searches for email addresses using WordPress filters like the_content, widget_text and others. Found email addresses are encoded using decimal and hexadecimal HTML entities, which obfuscates the email addresses to protect it from being read by most email-harvesting robots. Alternatively, you can use the [encode] shortcode: [encode]+1 (555) 123-4567[/encode]
You can use the "Page Scanner" found under Settings -> Email Encoder to see whether all your email addresses are protected. Alternatively, you can manually look at the "page source" of your site. Please note: Chrome’s Developer Tools, Safari’s Web Inspector and others automatically decode decimal and hexadecimal entities. You need to look at the "plain HTML source code".
This guide will help you encode all email addresses that aren’t caught.

Sign In / Register

You need to sign in or register to use this feature.