Email Address Obfuscation
Email Address Obfuscation
Description
A lightweight plugin that protects email addresses from email-harvesting bots, by converting email addresses characters to HTML entities. Hide email from Spam Bots using a shortcode [obfuscate_email] and built-in WordPress function antispambot().
Features
- Obfuscate plain email address
- Obfuscate href mailto link in HTML anchor element
- Support for custom CSS class
- Support for email subject
Usage
Obfuscate plain email address
[obfuscate_email email="your@email.com"]
Create clickable email address
[obfuscate_email email="your@email.com" link=true]
Add CSS class to the HTML anchor element
[obfuscate_email email="your@email.com" link=true class="my-class another-class"]
Obfuscate email address with email subject
[obfuscate_email email='your@email.com?subject=My custom email subject']
Shortcode parameter
emailrequired – Email address.linkoptional – Set true if you want to create clickable email address.classoptional – Add space separated list of classes.
Screenshots
Faq
The plugin converts email addresses characters from email parameter of [obfuscate_email] shortcode to HTML entities. Email addresses on your web page will be obfuscated (hidden) from bots, while keeping them visible to humans. In fact, there are no visible changes to your website for visitors.
View source code of your page (press Ctrl + U in web browser) and look for the place, where an email address is placed. You should see decimal entities instead of email address.
** Please note ** Inspector in developer tools automatically decode decimal and hexadecimal entities. You need to use View source code.
Reviews
A simple but efficient solution
By lukascech on September 8, 2025
Just what I was looking for, thanks!
Excellent - a badly needed plugin
By groggy72 on June 19, 2025
Thanks to the dev for an awesome plugin. Not all heroes wear capes.
Works as designed
By netro1 on November 18, 2024
5-stars - Very useful plugin which does what is it claiming to do. Thanks developer.
Does exactly what it says it will
By Scott DeLuzio (scott.deluzio) on October 14, 2022
Changelog
1.2.0
- Added support for email subject.
1.1.0
- Security Fix: Resolved a Stored Cross-Site Scripting (XSS) vulnerability in the
classparameter of the shortcode, allowing Contributor+ users to inject malicious scripts. (CVE-2024-11935 | Reported by theviper17y) - Minor code improvements and optimizations.
1.0.1
- Tested compatibility with WordPress 6.2.
1.0.0
- Tested compatibility with WordPress 6.1.1.
- Added translation folder and POT file.
0.9.2
- Tested compatibility with WordPress 6.0.3.
0.9.1
- Shortcode changed from email_obfuscate to obfuscate_email.
0.9.0
- Release Candidate.


