Email Address Encoder

A lightweight plugin that protects email addresses from email-harvesting robots, by encoding them into decimal and hexadecimal entities.

v1.0.25Till KrüssUpdated 2026-04-12Added Nov 21, 2011100k+ installs84% rating100% support resolved
41
Score
109
Errors
8
Warnings
+0
Change

Category Scores

Security0
Repo100
Performance100
Maintainability79

Top Issues by Category

Issues Details

117 issues found in latest scan

ERROR61
wp_function_not_compatible_with_requires_wp

Function "__()" requires WordPress 2.1.0, but your plugin minimum supported version is WordPress 2.0.0.

ERROR36
WordPress.Security.EscapeOutput.UnsafePrintingFunction

All output should be run through an escaping function (like esc_html_e() or esc_attr_e()), found '_e'.

ERROR10
WordPress.Security.EscapeOutput.OutputNotEscaped

All output should be run through an escaping function (see the Security sections in the WordPress Developer Handbooks), found '"\n<style type=\"text/css\">{$styles}</style>\n"'.

WARNING2
WordPress.Security.ValidatedSanitizedInput.InputNotSanitized

Detected usage of a non-sanitized input variable: $_POST[&#039;_wpnonce&#039;]

WARNING2
WordPress.Security.ValidatedSanitizedInput.MissingUnslash

$_POST[&#039;_wpnonce&#039;] not unslashed before sanitization. Use wp_unslash() or similar

WARNING1
WordPress.Security.NonceVerification.Missing

Processing form data without nonce verification.

WARNING1
WordPress.Security.ValidatedSanitizedInput.InputNotValidated

Detected usage of a possibly undefined superglobal array index: $_POST[&#039;notice&#039;]. Check that the array index exists before using it.

WARNING1
WordPress.WP.EnqueuedResourceParameters.MissingVersion

Resource version not set in call to wp_enqueue_script(). This means new versions of the script may not always be loaded due to browser caching.

WARNING1
WordPress.WP.EnqueuedResourceParameters.NotInFooter

In footer ($in_footer) is not set explicitly wp_enqueue_script; It is recommended to load scripts in the footer. Please set this value to `true` to load it in the footer, or explicitly `false` if it should be loaded in the header.

ERROR1
WordPress.WP.I18n.MissingArgDomain

Missing $domain parameter in function call to _e().

ERROR1
missing_direct_file_access_protection

PHP file should prevent direct access. Add a check like: if ( ! defined( 'ABSPATH' ) ) exit;

Latest Snapshot

Findings

117

Errors

109

Warnings

8

Score History

First score snapshot

First scan completed Jun 20, 2026

v1.0.25 · Plugin Check 2.0.0 · Model 2026.06-mvp-static-v2

Jun 20, 2026

v1.0.25

41

Latest

Findings
117
Errors
109
Warnings
8
Plugin Check
2.0.0
Model
2026.06-mvp-static-v2

Related Plugins