Pigeon Form
Audited at releasev0.1.8WordPress PluginAudited Today
Contact forms that make no outbound requests, load nothing on pages without a form, and keep every entry in your own database.
B
Total Findings
56
Security Grade
B
Security Findings
56Critical1
High4
Medium19
Low26
Info6
Executive Summary
Is Pigeon Form secure? In WP HealthKit's independent 2026 audit, Pigeon Form received an overall risk of CRITICAL and a report-card grade of B across 56 findings (1 critical, 4 high severity).
Directory audit — deterministic scanners only (Wordfence, OSV, PHPCS, PHPStan, Semgrep, Psalm, compat). Sign in and run a full audit for AI-grade analysis (security, quality, accessibility).