| @@ -3,9 +3,9 @@ | ||
| 3 | 3 | Tags: blocks, forms, form builder, contact form, gutenberg, gutenberg forms, multi step form. |
| 4 | 4 | Requires at least: 6.1 |
| 5 | 5 | Tested up to: 7.0 |
| 6 | 6 | Requires PHP: 7.0 |
| 7 | -Stable tag: 3.6.2 | |
| 7 | +Stable tag: 3.6.6 | |
| 8 | 8 | License: GPLv2 or later |
| 9 | 9 | License URI: http://www.gnu.org/licenses/gpl-2.0.html |
| 10 | 10 | |
| 11 | 11 | Advanced form builder plugin for Gutenberg. Create forms from the ground up, customize the existing ones, and style them up – all in one editor. |
| @@ -122,13 +122,13 @@ | ||
| 122 | 122 | - **Editable post-submit messages.** Use the default message texts or input those you see fit. |
| 123 | 123 | - **Spam filtering & protection.** Add a Google reCAPTCHA to your form easily. |
| 124 | 124 | - **File uploads.** Decide which users you would authorize to attach files to your website forms: registered, not-registered, or all users. |
| 125 | 125 | - **Form submit type.** Choose between the page reload and AJAX options. |
| 126 | -- **Drag-and-drop editor.** Grab the form block and place it where you want in a matter of seconds. | |
| 126 | +- **Drag-and-drop editor.** Grab the form block and place it where you want in a matter of seconds. | |
| 127 | 127 | - **Input mask.** Three mask types are available – numeric, alphabetical, and alphanumeric. Just copy and paste the needed one to make it work. |
| 128 | 128 | - **Numbers range generator.** Dynamically generate a range of numbers to be used in Checkbox, Select & Radio Fields. |
| 129 | 129 | - **Inline fields editing.** Edit the field labels and descriptions in-place. |
| 130 | -- **Form validation.** Check if the entered user data is correct and whether to let them proceed with the form submission or not. | |
| 130 | +- **Form validation.** Check if the entered user data is correct and whether to let them proceed with the form submission or not. | |
| 131 | 131 | - **Form patterns.** Save time while creating a form layout? It’s possible! JetFormBuilder grants access to Form Patterns, which you can use to build contact, login & register, application, profile, booking, and subscription forms. |
| 132 | 132 | |
| 133 | 133 | <a href="https://jetformbuilder.com/?utm_source=wp_org&utm_medium=referral&utm_campaign=jetformbuilder" target="_blank">Read more about all JetFormBuilder features here</a> |
| 134 | 134 | |
| @@ -219,9 +219,9 @@ | ||
| 219 | 219 | = Is it possible to create a form that allows adding/editing posts on the frontend? = |
| 220 | 220 | Yes. You can use the **Insert/Update Post** post-submit Action to add and edit posts of any type from the frontend. Besides that, you’re able to assign and modify any metadata of the given post. |
| 221 | 221 | |
| 222 | 222 | = Can I create a user registration form? = |
| 223 | -Absolutely. You can use the **Register User** post-submit Action to create a custom registration form. This post-submit action allows you to set user metadata, as well. | |
| 223 | +Absolutely. You can use the **Register User** post-submit Action to create a custom registration form. This post-submit action allows you to set user metadata, as well. | |
| 224 | 224 | |
| 225 | 225 | = Can the form be integrated with Zapier, Integromat, or similar third-party services? = |
| 226 | 226 | Sure. You can create a script that runs on a webhook in either Zapier or Integromat and then use the **Call Webhook** post-submit Action to launch it when the form is being submitted. |
| 227 | 227 | |
| @@ -274,8 +274,99 @@ | ||
| 274 | 274 | You can report security bugs through the Patchstack Vulnerability Disclosure Program. The Patchstack team help validate, triage and handle any security vulnerabilities. [Report a security vulnerability.](https://patchstack.com/database/vdp/jetformbuilder) |
| 275 | 275 | |
| 276 | 276 | == Changelog == |
| 277 | 277 | |
| 278 | +**3.6.6** | |
| 279 | +- FIX: Limit AI form generation prompt length to prevent 403 | |
| 280 | +- FIX: Preserve JetEngine listing styles after dynamic option updates | |
| 281 | +- FIX: Support BOOKING_UNITS macro in calculated fields | |
| 282 | +- ADD: Additional Style Settings for Media Field in New Style Manager | |
| 283 | +- FIX: Phone field block rejects all landline (fixed-line) numbers as invalid | |
| 284 | +- FIX: Form style is not applied in the dynamic popup | |
| 285 | +- ADD: Add notice to Media field | |
| 286 | +- ADD: Form Preset using source that is JetformBuilder Record | |
| 287 | +- FIX: Checkbox custom options with zero or one predefined option | |
| 288 | +- FIX: Apply Twig listing styles to checkbox and radio templates | |
| 289 | +- FIX: Clear stale Calculated Field watchers on recalculation | |
| 290 | +- FIX: Restore Range field rendering in Chrome | |
| 291 | +- FIX: Unauthenticated arbitrary Media Library attachment deletion | |
| 292 | +- FIX: Prevent XSS in Select field | |
| 293 | + | |
| 294 | +**3.6.5.4** | |
| 295 | +- FIX: Prevent XSS in Calculated Field formulas | |
| 296 | + | |
| 297 | +**3.6.5.3** | |
| 298 | +- FIX: Secure SSR callbacks with admin-managed registry | |
| 299 | + | |
| 300 | +**3.6.5.2** | |
| 301 | +- FIX: Advanced Choices compatibility with WordPress 7.1 | |
| 302 | +- FIX: Harden preset access checks | |
| 303 | +- FIX: Shortcode injection in form status messages | |
| 304 | +- FIX: Secure Advanced Validation Server-Side Callbacks with per-form allowlists | |
| 305 | +- FIX: Escape Media field previews to prevent XSS | |
| 306 | +- FIX: Prevented unauthenticated email header injection in the Send Email action | |
| 307 | +- FIX: Prevented unauthenticated HTML injection into notification emails through the WYSIWYG field | |
| 308 | +- FIX: Prevented unauthenticated blind SQL injection when retrieving forms by payment token | |
| 309 | + | |
| 310 | +**3.6.5.1** | |
| 311 | +- ADD: Allow extending macro groups in Send Email fields | |
| 312 | +- FIX: Support Hierarchical Select in protected price calculations | |
| 313 | + | |
| 314 | +**3.6.5** | |
| 315 | +- ADD: Parent/child support for Post Submit Actions | |
| 316 | +- FIX: Default Reset Password email is now sent correctly when using Reset Password actions | |
| 317 | +- FIX: Prevent validation bypasses in core and SSR flows | |
| 318 | +- FIX: Harden request lifecycle, CSRF, and CAPTCHA validation | |
| 319 | +- FIX: Prevent Login Form submission when CAPTCHA validation fails | |
| 320 | +- FIX: Restore form submission after correcting CAPTCHA validation errors | |
| 321 | +- ADD: Support field macros in Action messages | |
| 322 | +- FIX: Prevent JavaScript console error when adding fields in the editor | |
| 323 | +- FIX: Correct WYSIWYG behavior when removing Repeater items out of order | |
| 324 | +- FIX: Restore the first Repeater image in Fields Preview | |
| 325 | +- ADD: Allow customization of the Image Upload directory via filter | |
| 326 | +- FIX: Prevent 404 error when Form Records filters match no records | |
| 327 | +- FIX: Late-registered form messages displayed status codes | |
| 328 | +- FIX: Prevent Insert/Update Post from clearing JetEngine meta for removed fields | |
| 329 | +- FIX: Correct Advanced Validation inheritance for form fields | |
| 330 | +- FIX: Prevent premature browser validation notices | |
| 331 | + | |
| 332 | +**3.6.4.2** | |
| 333 | +- FIX: Secure payment amount toggle behavior | |
| 334 | +- FIX: Safely enable payment amount protection for eligible existing forms | |
| 335 | + | |
| 336 | +**3.6.4.1** | |
| 337 | +- FIX: Broken Access Control vulnerability | |
| 338 | + | |
| 339 | +**3.6.4** | |
| 340 | +- ADD: Add Text Field variations for Email, Password, URL, First Name, Last Name | |
| 341 | +- ADD: Show field names in the List View | |
| 342 | +- FIX: Hide Honeypot protection fields in the editor after updating to 3.6.2 | |
| 343 | +- ADD: Add customizable autocomplete attribute for Text Fields | |
| 344 | +- FIX: JetFormBuilder forms in JetPopup AJAX popups not initializing correctly | |
| 345 | +- FIX: Respect Form Records access capability in REST endpoints | |
| 346 | + | |
| 347 | +**3.6.3.1** | |
| 348 | +- FIX: get_from_db, get_from_users options generators. Make sure the generator options is correctly santized to prevent context injecting. | |
| 349 | + | |
| 350 | +**3.6.3** | |
| 351 | +- FIX: Restore repeater macro filter compatibility without breaking formatted output | |
| 352 | +- FIX: Calculated Field now correctly processes empty Multi Select values | |
| 353 | +- FIX: Require User Access selection in Media Field settings | |
| 354 | +- ADD: Support option labels in Fields Preview macros | |
| 355 | +- ADD: Auto-focus search in the “New Action” modal and fix Undo (Cmd/Ctrl+Z) behavior inside action popups | |
| 356 | +- ADD: Delete removed Media Field attachments from the Media Library on form submission | |
| 357 | +- FIX: Prevent broken widget rendering for non-form form IDs | |
| 358 | +- FIX: Normalize media field files after repeater re-observe | |
| 359 | +- FIX: Duplicate HTML macro processing | |
| 360 | +- FIX: Escape line breaks only inside calculated string values | |
| 361 | +- FIX: Recalculate multistep page break state after binding page | |
| 362 | + | |
| 363 | +**3.6.2.2** | |
| 364 | +- FIX: SSR validation privilege escalation hardening | |
| 365 | + | |
| 366 | +**3.6.2.1** | |
| 367 | +- FIX: Prevent unauthorized JetEngine Update Options writes | |
| 368 | + | |
| 278 | 369 | **3.6.2** |
| 279 | 370 | - FIX: Resolved validation errors when using dynamic values for the Media Field “Maximum Files” setting. |
| 280 | 371 | - FIX: Prevented duplicate _wpnonce field IDs when multiple forms with form safety enabled are rendered on the same page. |
| 281 | 372 | - FIX: Corrected calculated field updates when changing selected options. |
| @@ -1245,7 +1336,7 @@ | ||
| 1245 | 1336 | - Enhancement: added **`jet_fb_form`** shortcode. Example: `[jet_fb_form form_id="4338" submit_type="ajax" required_mark="***" fields_layout="row"]` |
| 1246 | 1337 | |
| 1247 | 1338 | **1.0.1** |
| 1248 | 1339 | - FiX: render wysiwyg on front-end |
| 1249 | - | |
| 1340 | + | |
| 1250 | 1341 | **1.0.0** |
| 1251 | 1342 | - Initial release |
