SigmaForms Pro - AI Form Builder For WordPress v1.7.0

SigmaForms Pro - AI Form Builder For WordPress v1.7.0
## 1.7.0 [8th November 2026]

### Added

- New "Soft" form theme: outlined fields with floating labels and field icons, pill-style choices, compact sizing; marked "New" and listed first in Settings and the form editor

## 1.6.0 [19th October 2026]

### Security

- Hardened public form endpoints, hid the saved SMTP password, tightened permission checks and randomised upload file names

### Added

- Per-field columns in the submissions CSV export
- Styled confirm dialogs and notices in the admin
- `sigmaforms_abandoned_session_limit` filter
- `sigmaforms_email_from_address` filter
- Option to remove the saved SMTP password
- "Global default" form theme for new forms, and an "Apply to all existing forms" option in Form Styling

### Improved

- `sigmaforms_manage_forms_capability` now covers admin menus and AJAX
- Webhooks are sent after the response; emails use the site's From address and reply to the submitter
- Form scripts and the abandonment tracker load only where needed; about 30 fewer scripts on admin screens
- Submission indexes on status and date, added right after updating
- Form editor: choice options as condition values, duplicates placed after the original, form IDs in filters
- Wrong file types are reported when the file is picked
- New forms store submissions by default

### Fixed

- Expired nonces broke submissions, and a double-click could submit twice
- Multi-step forms: blocking alert, skipped required radios and invalid emails, hidden required fields blocking Next, and a page break at the end hiding the form
- Required fields hidden by conditional logic blocked the submission; "User Data" conditions never matched on the front end
- CSV rows broke on quotes; SMTP passwords with special characters or "0" were not saved as typed
- Abandoned tracking failed on cached pages and returned 500 for invalid requests
- Admin: `admin.js` loaded twice, vague session-expired error, raw AI debug output, untranslatable messages and `'` in translations
- Block editor preview was unstyled and the legacy block loaded a broken script
- Choosing a theme in Settings had no effect on existing forms, and forms on the global Custom theme kept their old colours
- REST submissions ignored the form's success message, unrated Ratings saved as 0, missed radios showed no error, and uninstall left license transients

SigmaForms Pro - AI Form Builder For WordPress v1.5.0
## 1.5.0 [27th September 2026]

### Added

- Shared admin header with a "More" menu, and screen switching without a page reload
- SVG icons throughout the admin, replacing Dashicons

### Improved

- All admin screens and the Dashboard widget redesigned
- License screen protected from other plugins' CSS
- Expired links now show a "Back" link instead of an empty page

### Fixed

- Failed settings saves showed as successful
- Dashboard widget links opened a "Link expired" page, and its title ignored the white label brand
- Analytics listed all 24 hours for forms with no submissions
- Expired Analytics filter links ended on an empty page
- The form editor showed "Add New" when editing a form
- The form editor's save message vanished after one second
- Tables broke on small screens and split dates mid-word
- Icon-only buttons had no accessible labels
- `wpdb:repare()` was called without placeholders

SigmaForms Pro - AI Form Builder For WordPress v1.4.12
### Security
- Fixed an arbitrary file deletion vulnerability in the submission delete handlers (CVE-2026-78657)
- File upload fields now ignore values that did not arrive as a real upload
- Stored upload URLs are deleted only when they resolve to a file inside the uploads directory

SigmaForms Pro - AI Form Builder For WordPress v1.4.11
### Security
- Fixed a stored cross site scripting issue where signature values submitted to the public abandoned form endpoint were rendered unescaped in the admin submission and abandoned form screens
- Signature data URIs are now validated in full, instead of by prefix only, everywhere they are accepted or displayed
- Field values received by the public abandoned form tracking endpoint are sanitised on the way in
- Form, submission, abandoned form and AI generation REST routes now require the same capability as the admin screens, so submission data is no longer readable by lower roles. Sites that delegate form management can adjust this with the `sigmaforms_manage_forms_capability` filter
- The temporary upload capability used for anonymous form submissions is now granted only for the duration of the upload itself, after the nonce check, instead of for the whole request
- License data is unserialised with a class allow list, closing a PHP object injection path
- Exported CSV cells beginning with a formula character are escaped, so submission exports cannot execute in spreadsheet software
- Added a capability check to the conditional suggestions AJAX handler
- Added a payload size limit and a per client rate limit to the public mobile signature endpoints

### Fixed
- Plugin Check compliance: replaced `date()`, `strip_tags()` and `parse_url()` with `gmdate()`, `wp_strip_all_tags()` and `wp_parse_url()`, and documented the remaining sanitisation and template variable notices
- Declared compatibility with WordPress 7.1

SigmaForms Pro - AI Form Builder For WordPress v1.4.10
## 1.4.10 [10th August 2026]
### Removed

- Promotion notice feature and all of its assets, AJAX handler, and dismissal logic
- Dashboard feed widget and its remote feed requests, transients, and styles

SigmaForms Pro - AI Form Builder For WordPress v1.4.9
## 1.4.9 [9th August 2026]
### Added

- New "Transition" form theme - a card driven quiz/funnel style with selectable image cards, animated states and a multi-step progress bar
- Field label images on every field type, with the image positioned above, below, left or right of the label text
- Label image sizing by percentage of the field (stays proportional on any screen) or by fixed pixels, plus an optional height and a Full Width option
- Drag to resize label images directly in the form preview - edge handles for width and height, corner handle for both, hold Shift to keep the aspect ratio
- Built in image cropper for label and option images, using the WordPress media cropper. Crops always start from the original upload and are saved as a new attachment, so the source file is never modified
- Per option images for Radio, Checkbox and Dropdown fields, with a shared position and size per field. Dropdowns with images render an image capable listbox while keeping the native select for validation and conditional logic
- "Show Country Flag Icons" toggle for Country and International Phone fields, to show or hide flag icons on the frontend
- Separate "Show Field Label Text" and "Show Field Label Image" toggles, so the text and the image can be hidden independently
- Automatic retention policy for form view logs - set how many days of view history to keep (default 60) from Settings > Advanced > Data Cleanup, with a live count of entries queued for deletion

### Improved

- View log cleanup runs in small batches inside a time budget, so clearing a large backlog never holds a long database lock or exceeds the PHP time limit

## 1.4.7 [13th July 2026]

### Added

- CC and BCC email fields for form submission notifications in global settings and per-form email overrides
- Support for multiple email addresses (comma-separated) in To, CC, and BCC fields

## 1.4.6 [6th July 2026]

### Fixed

- Fixed critical security vulnerability that allowed unauthenticated arbitrary file upload and remote code execution via public form file fields

SigmaForms Pro - AI Form Builder For WordPress v1.4.5 Nulled
No changelogs

SigmaForms Pro - AI Form Builder For WordPress v1.4.4 Nulled
No changelogs