Input validation vulnerability in Email Encoder – Protect Email Addresses and Phone Numbers 2.1.7

The Email Encoder plugin for WordPress has a security issue that can allow attackers who have contributor-level or higher permissions to insert malicious scripts into pages. These scripts can then be executed when a user visits the page, regardless of their level of access. Versions up to and including 2.1.7 of the plugin are vulnerable to this issue because it does not properly sanitize user input or escape output.