| @@ -3,9 +3,9 @@ | ||
| 3 | 3 | Tags: blocks, forms, form builder, contact form, gutenberg, gutenberg forms, multi step form. |
| 4 | 4 | Requires at least: 6.1 |
| 5 | 5 | Tested up to: 7.0 |
| 6 | 6 | Requires PHP: 7.0 |
| 7 | -Stable tag: 3.6.5 | |
| 7 | +Stable tag: 3.6.6 | |
| 8 | 8 | License: GPLv2 or later |
| 9 | 9 | License URI: http://www.gnu.org/licenses/gpl-2.0.html |
| 10 | 10 | |
| 11 | 11 | Advanced form builder plugin for Gutenberg. Create forms from the ground up, customize the existing ones, and style them up – all in one editor. |
| @@ -273,8 +273,44 @@ | ||
| 273 | 273 | = How can I report security bugs? = |
| 274 | 274 | You can report security bugs through the Patchstack Vulnerability Disclosure Program. The Patchstack team help validate, triage and handle any security vulnerabilities. [Report a security vulnerability.](https://patchstack.com/database/vdp/jetformbuilder) |
| 275 | 275 | |
| 276 | 276 | == Changelog == |
| 277 | + | |
| 278 | +**3.6.6** | |
| 279 | +- FIX: Limit AI form generation prompt length to prevent 403 | |
| 280 | +- FIX: Preserve JetEngine listing styles after dynamic option updates | |
| 281 | +- FIX: Support BOOKING_UNITS macro in calculated fields | |
| 282 | +- ADD: Additional Style Settings for Media Field in New Style Manager | |
| 283 | +- FIX: Phone field block rejects all landline (fixed-line) numbers as invalid | |
| 284 | +- FIX: Form style is not applied in the dynamic popup | |
| 285 | +- ADD: Add notice to Media field | |
| 286 | +- ADD: Form Preset using source that is JetformBuilder Record | |
| 287 | +- FIX: Checkbox custom options with zero or one predefined option | |
| 288 | +- FIX: Apply Twig listing styles to checkbox and radio templates | |
| 289 | +- FIX: Clear stale Calculated Field watchers on recalculation | |
| 290 | +- FIX: Restore Range field rendering in Chrome | |
| 291 | +- FIX: Unauthenticated arbitrary Media Library attachment deletion | |
| 292 | +- FIX: Prevent XSS in Select field | |
| 293 | + | |
| 294 | +**3.6.5.4** | |
| 295 | +- FIX: Prevent XSS in Calculated Field formulas | |
| 296 | + | |
| 297 | +**3.6.5.3** | |
| 298 | +- FIX: Secure SSR callbacks with admin-managed registry | |
| 299 | + | |
| 300 | +**3.6.5.2** | |
| 301 | +- FIX: Advanced Choices compatibility with WordPress 7.1 | |
| 302 | +- FIX: Harden preset access checks | |
| 303 | +- FIX: Shortcode injection in form status messages | |
| 304 | +- FIX: Secure Advanced Validation Server-Side Callbacks with per-form allowlists | |
| 305 | +- FIX: Escape Media field previews to prevent XSS | |
| 306 | +- FIX: Prevented unauthenticated email header injection in the Send Email action | |
| 307 | +- FIX: Prevented unauthenticated HTML injection into notification emails through the WYSIWYG field | |
| 308 | +- FIX: Prevented unauthenticated blind SQL injection when retrieving forms by payment token | |
| 309 | + | |
| 310 | +**3.6.5.1** | |
| 311 | +- ADD: Allow extending macro groups in Send Email fields | |
| 312 | +- FIX: Support Hierarchical Select in protected price calculations | |
| 277 | 313 | |
| 278 | 314 | **3.6.5** |
| 279 | 315 | - ADD: Parent/child support for Post Submit Actions |
| 280 | 316 | - FIX: Default Reset Password email is now sent correctly when using Reset Password actions |
