Shortcode-based contact form with a confirmation screen. A maintained fork of MW WP Form, tracking its security fixes and verified on WordPress 7.
Total Findings
68
Security Grade
Is Unomoon Form secure? In WP HealthKit's independent 2026 audit, Unomoon Form received an overall risk of HIGH and a report-card grade of C across 68 findings (0 critical, 7 high severity).
Directory audit — deterministic scanners only (Wordfence, OSV, PHPCS, PHPStan, Semgrep, Psalm, compat). Sign in and run a full audit for AI-grade analysis (security, quality, accessibility).
Show your audit status in your README or website.
[](https://wphealthkit.com/directory/unomoon-form)
Paste this in your GitHub README or any Markdown file. The badge updates automatically on every re-audit — no need to refresh the snippet.
Site owners: should they update?
Claim this listing to get a Verified badge, control public audits, and get automatic re-scans.
Claim This PluginGet a comprehensive security audit for your WordPress plugin or theme. Upload your zip and get results in minutes.
Start Free Audit