SigmaForms Pro - AI Form Builder For WordPress v1.4.12

SigmaForms Pro - AI Form Builder For WordPress v1.4.12
### Security
- Fixed an arbitrary file deletion vulnerability in the submission delete handlers (CVE-2026-78657)
- File upload fields now ignore values that did not arrive as a real upload
- Stored upload URLs are deleted only when they resolve to a file inside the uploads directory

SigmaForms Pro - AI Form Builder For WordPress v1.4.11
### Security
- Fixed a stored cross site scripting issue where signature values submitted to the public abandoned form endpoint were rendered unescaped in the admin submission and abandoned form screens
- Signature data URIs are now validated in full, instead of by prefix only, everywhere they are accepted or displayed
- Field values received by the public abandoned form tracking endpoint are sanitised on the way in
- Form, submission, abandoned form and AI generation REST routes now require the same capability as the admin screens, so submission data is no longer readable by lower roles. Sites that delegate form management can adjust this with the `sigmaforms_manage_forms_capability` filter
- The temporary upload capability used for anonymous form submissions is now granted only for the duration of the upload itself, after the nonce check, instead of for the whole request
- License data is unserialised with a class allow list, closing a PHP object injection path
- Exported CSV cells beginning with a formula character are escaped, so submission exports cannot execute in spreadsheet software
- Added a capability check to the conditional suggestions AJAX handler
- Added a payload size limit and a per client rate limit to the public mobile signature endpoints

### Fixed
- Plugin Check compliance: replaced `date()`, `strip_tags()` and `parse_url()` with `gmdate()`, `wp_strip_all_tags()` and `wp_parse_url()`, and documented the remaining sanitisation and template variable notices
- Declared compatibility with WordPress 7.1

SigmaForms Pro - AI Form Builder For WordPress v1.4.10
## 1.4.10 [10th August 2026]
### Removed

- Promotion notice feature and all of its assets, AJAX handler, and dismissal logic
- Dashboard feed widget and its remote feed requests, transients, and styles

SigmaForms Pro - AI Form Builder For WordPress v1.4.9
## 1.4.9 [9th August 2026]
### Added

- New "Transition" form theme - a card driven quiz/funnel style with selectable image cards, animated states and a multi-step progress bar
- Field label images on every field type, with the image positioned above, below, left or right of the label text
- Label image sizing by percentage of the field (stays proportional on any screen) or by fixed pixels, plus an optional height and a Full Width option
- Drag to resize label images directly in the form preview - edge handles for width and height, corner handle for both, hold Shift to keep the aspect ratio
- Built in image cropper for label and option images, using the WordPress media cropper. Crops always start from the original upload and are saved as a new attachment, so the source file is never modified
- Per option images for Radio, Checkbox and Dropdown fields, with a shared position and size per field. Dropdowns with images render an image capable listbox while keeping the native select for validation and conditional logic
- "Show Country Flag Icons" toggle for Country and International Phone fields, to show or hide flag icons on the frontend
- Separate "Show Field Label Text" and "Show Field Label Image" toggles, so the text and the image can be hidden independently
- Automatic retention policy for form view logs - set how many days of view history to keep (default 60) from Settings > Advanced > Data Cleanup, with a live count of entries queued for deletion

### Improved

- View log cleanup runs in small batches inside a time budget, so clearing a large backlog never holds a long database lock or exceeds the PHP time limit

## 1.4.7 [13th July 2026]

### Added

- CC and BCC email fields for form submission notifications in global settings and per-form email overrides
- Support for multiple email addresses (comma-separated) in To, CC, and BCC fields

## 1.4.6 [6th July 2026]

### Fixed

- Fixed critical security vulnerability that allowed unauthenticated arbitrary file upload and remote code execution via public form file fields

SigmaForms Pro - AI Form Builder For WordPress v1.4.5 Nulled
No changelogs

SigmaForms Pro - AI Form Builder For WordPress v1.4.4 Nulled
No changelogs

SigmaForms Pro - AI Form Builder For WordPress v1.4.2
## 1.4.2 [14th May 2026]

### Fixed
- Admin notice styling and handling

SigmaForms Pro - AI Form Builder For WordPress v1.4.1
## 1.4.1 [29th April 2026]

### Added

- Export/Import Settings feature in Advanced Settings tab
- Export all SigmaForms settings to JSON file with timestamp
- Import settings from previously exported JSON file with automatic saving
- Settings validation and sanitization on import for security

### Fixed

- Plugins list "Settings" link now opens SigmaForms Settings (`sigmaforms-settings`) instead of the Forms list