Skip to content
PluginCanary

Email Encoder

Email Encoder - Protect Email Addresses and Phone Numbers
by Online Optimisation · 90,000+ active installs · Checked 4 Nov 2026
Healthy

Healthy: maintained, last release 21 Sep 2026, 27 releases in 24 months, no unpatched vulnerabilities.

87/ 100 Canary Score
Sub-scores for Email Encoder
Ownership100
Maintenance100
Security80
Support70
Reputation75

How the score works

Quick answers

Is Email Encoder still maintained?
Yes. Last release 21 Sep 2026, 27 releases in the last 24 months. 21 Sep 2026 · wordpress.org
Who owns Email Encoder, and has it changed hands?
Changed. New committer oojosh made a first commit on 18 Sep 2026. 18 Sep 2026 · SVN log
Was Email Encoder removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
Is Email Encoder safe?
10 known vulnerabilities, all fixed (latest in 2.4.7). Not on the exploited list. 11 Jun 2026 · Wordfence Intelligence
Is the latest Email Encoder update safe to install?
Caution. Ownership change before 2.5.5: new committer oojosh made a first commit on 18 Sep 2026. No one-star spike after it. 21 Sep 2026 · Release history

Active signals

Facts we detected, with links to the source.

  • InfoMOM-2Downloads in the last 4 weeks are down more than half vs the 26-week average. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
WebFactory25 Mar 2019 to 6 May 2019, 6 commits
ironikus16 May 2019 to 15 Jun 2024, 30 commits
onlineoptimisation30 Sep 2025 to 4 Aug 2026, 64 commits
oojosh18 Sep 2026 to 21 Sep 2026, 4 commits

New committer oojosh made a first commit on 18 Sep 2026.

Maintenance

Last release
44 days ago
Releases, 24 months
27
Tested up to
7.0 vs 7.1
Requires PHP
7.4 supported 8.2+
Releases per quarter
Releases per quarter for Email Encoder
Q1 20243
Q2 20241
Q3 20240
Q4 20240
Q1 20250
Q2 20250
Q3 20250
Q4 202512
Q1 20266
Q2 20264
Q3 20265
Q4 20260

Last release 21 Sep 2026. Tested up to 7.0, 1 major version behind WordPress 7.1.

Reputation

Last 90 days: 5.0 (1 review). Lifetime: 4.9.

Average rating per quarter for Email Encoder
Q1 20245.0
Q2 20245.0
Q4 20245.0
Q2 20255.0
Q3 20255.0
Q4 20255.0
Q1 20264.5
Q2 20265.0
Q3 20265.0
Q4 20265.0

Average rating stayed at 5.0 between Q1 2024 and Q4 2026.

Rating distribution
5 star89
4 star3
3 star0
2 star2
1 star0
Latest low reviews

Security record

3 vulnerabilities in 24 months (10 on record), all patched (latest fixed in 2.4.7).

Show 10 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
11 Jun 2026Email Encoder - Protect Email Addresses and Phone Numbers < 2.4.7 - Unauthenticated Stored Cross-Site Scripting7.2< 2.4.72.4.7Patched before disclosure
21 Apr 2026Email Encoder - Protect Email Addresses and Phone Numbers < 2.3.4 - Authenticated (Administrator+) Stored Cross-Site Scripting4.4< 2.3.42.3.4Patched before disclosure
15 Apr 2026Email Encoder - Protect Email Addresses and Phone Numbers <= 2.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via eeb_mailto Shortcode6.4<= 2.4.42.4.5Patched before disclosure
8 Jul 2024Email Encoder - Protect Email Addresses and Phone Numbers <= 2.2.1 - Authenticated (Admin+) Stored Cross-Site Scripting4.4<= 2.2.12.2.2Patched before disclosure
13 Feb 2024Email Encoder - Protect Email Addresses and Phone Numbers <= 2.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4<= 2.2.02.2.1Patched before disclosure
9 Jan 2024Email Encoder - Protect Email Addresses and Phone Numbers <= 2.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 2.1.92.1.10Patched before disclosure
15 Nov 2023Email Encoder Bundle <= 2.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode6.4<= 2.1.82.1.9Patched before disclosure
29 Aug 2023Email Encoder <= 2.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4<= 2.1.82.1.974
2 Aug 2021Email Encoder <= 2.1.1 - Reflected Cross Site Scripting6.1<= 2.1.12.1.2Patched before disclosure
10 Aug 2015Email Encoder < 1.4.2 - Cross-Site Scripting6.1< 1.4.21.4.22

Changelog mentions of security fixes: 2.5.4 (security).

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

50% of 2 support threads resolved in the last 2 months.

Momentum

90,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Email Encoder
4 May 20264,222
11 May 20266,392
18 May 20265,812
25 May 20263,618
1 Jun 20262,980
8 Jun 20262,841
15 Jun 20262,446
22 Jun 20261,887
29 Jun 20261,927
6 Jul 202639,775
13 Jul 202649,016
20 Jul 20268,898
27 Jul 20265,348
3 Aug 202648,147
10 Aug 20267,040
17 Aug 20264,749
24 Aug 20264,319
31 Aug 20263,784
7 Sep 20262,481
14 Sep 202642,702
21 Sep 202651,873
28 Sep 20266,584
5 Oct 20265,431
12 Oct 20263,478
19 Oct 20264,968
26 Oct 20262,944
2 Nov 2026472

Weekly downloads over the last 4 weeks are 75% below the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

hCaptcha for WPScore 94 · 70,000+ActiveLayer Anti-SpamScore 93 · 10,000+SilentShieldScore 93 · 10,000+Akismet Anti-spamScore 92 · 5,000,000+CryptXScore 92 · 10,000+

Facts

Version2.5.5
AuthorOnline Optimisation
Added10 Feb 2010
Last updated21 Sep 2026
Active installs90,000+
Requires WordPress4.7
Tested up to7.0.8
Requires PHP7.4
CategorySecurity & Privacy > Security Scanning & Malware Protection
Tagshide, encode, encrypt, protect, anti-spam

Other plugins by this author: WP Mailto Links - Protect Email Addresses, LabelLoom - Sticker Sheet Maker

Questions

Is Email Encoder still maintained?

Yes. Last release 21 Sep 2026, 27 releases in the last 24 months.

Who owns Email Encoder, and has it changed hands?

Changed. New committer oojosh made a first commit on 18 Sep 2026.

Was Email Encoder removed from wordpress.org?

No. Listed on wordpress.org as of 4 Nov 2026.

Is Email Encoder safe?

10 known vulnerabilities, all fixed (latest in 2.4.7). Not on the exploited list.

Is the latest Email Encoder update safe to install?

Caution. Ownership change before 2.5.5: new committer oojosh made a first commit on 18 Sep 2026. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 4 Nov 2026.Report a data issue