Advanced Forms for ACF v1.9.3.9

Decryption key:

To view the content, you need to Sign In or Register.

Advanced Forms for ACF v1.9.3.9
Changelog & Release Notes = November 14, 2026 =

= 1.9.3.9 =
- Fix: Fixed file uploads being dropped on ACF 6.8.11.

= 1.9.3.8 =
- Security: Fixed a missing authorization check on the form import handler. An unauthenticated request to `admin-post.php` could overwrite an existing form (identified by its publicly visible form key) and inject stored cross-site scripting via the form description — potentially leading to site takeover. The import handler now requires the `edit_pages` capability and a valid nonce, and rejects malformed uploads (Disclosed by Jakub Herman / Patchstack).
- Security: Form titles and descriptions are now sanitised on output (`esc_html()` for the title, `wp_kses_post()` for the description).
- Fix: Fixed a PHP warning ("Trying to access array offset on value of type null") when saving a form.

= 1.9.3.7 =
- New: Added copy-to-clipboard button for the shortcode field on the form edit screen.
- Pro Fix: Fixed issue where HTML in integration field labels was escaped by ACF 6.7+.

Decryption key:

To view the content, you need to Sign In or Register.

Advanced Forms for ACF v1.9.3.8
== Changelog ==

= 1.9.3.8 =
* Security: Fixed a missing authorization check on the form import handler. An unauthenticated request to `admin-post.php` could overwrite an existing form (identified by its publicly visible form key) and inject stored cross-site scripting via the form description — potentially leading to site takeover. The import handler now requires the `edit_pages` capability and a valid nonce, and rejects malformed uploads. Thanks to Jakub Herman / Patchstack for the responsible disclosure.
* Security: Form titles and descriptions are now sanitised on output (`esc_html()` for the title, `wp_kses_post()` for the description).
* Fixed a PHP warning ("Trying to access array offset on value of type null") when saving a form.

Decryption key:

To view the content, you need to Sign In or Register.

Advanced Forms for ACF v1.9.3.7
== Changelog ==

= 1.9.3.7 =

* Added copy-to-clipboard button for the shortcode field on the form edit screen.

*Pro*

* Fixed issue where HTML in integration field labels was escaped by ACF 6.7+.