Todas las versiones registradas, de la más nueva a la más antigua, con lo que cambió en cada una.
Última 1.6.015 versiones
Sin fecha · 15 versiones
1.6.0
Última
1 nuevo1 mejora1 de seguridad21 cambios
Nuevo
New forms store submissions by default
Mejora
Improved
Seguridad
Security
Cambios
Hardened public form endpoints, hid the saved SMTP password, tightened permission checks and randomised upload file names
Per-field columns in the submissions CSV export
Styled confirm dialogs and notices in the admin
`sigmaforms_abandoned_session_limit` filter
`sigmaforms_email_from_address` filter
Option to remove the saved SMTP password
"Global default" form theme for new forms, and an "Apply to all existing forms" option in Form Styling
`sigmaforms_manage_forms_capability` now covers admin menus and AJAX
Webhooks are sent after the response; emails use the site's From address and reply to the submitter
Form scripts and the abandonment tracker load only where needed; about 30 fewer scripts on admin screens
Submission indexes on status and date, added right after updating
Form editor: choice options as condition values, duplicates placed after the original, form IDs in filters
Wrong file types are reported when the file is picked
Expired nonces broke submissions, and a double-click could submit twice
Multi-step forms: blocking alert, skipped required radios and invalid emails, hidden required fields blocking Next, and a page break at the end hiding the form
Required fields hidden by conditional logic blocked the submission; "User Data" conditions never matched on the front end
CSV rows broke on quotes; SMTP passwords with special characters or "0" were not saved as typed
Abandoned tracking failed on cached pages and returned 500 for invalid requests
Admin: `admin.js` loaded twice, vague session-expired error, raw AI debug output, untranslatable messages and `'` in translations
Block editor preview was unstyled and the legacy block loaded a broken script
Choosing a theme in Settings had no effect on existing forms, and forms on the global Custom theme kept their old colours
1.5.0
1 mejora13 cambios
Mejora
Improved
Cambios
Shared admin header with a "More" menu, and screen switching without a page reload
SVG icons throughout the admin, replacing Dashicons
All admin screens and the Dashboard widget redesigned
Expired links now show a "Back" link instead of an empty page
Failed settings saves showed as successful
Dashboard widget links opened a "Link expired" page, and its title ignored the white label brand
Analytics listed all 24 hours for forms with no submissions
Expired Analytics filter links ended on an empty page
The form editor showed "Add New" when editing a form
The form editor's save message vanished after one second
Tables broke on small screens and split dates mid-word
Icon-only buttons had no accessible labels
`wpdb::prepare` was called without placeholders
1.4.12
1 corrección1 de seguridad2 cambios
Corregido
Fixed an arbitrary file deletion vulnerability in the submission delete handlers (CVE-2026-78657)
Seguridad
Security
Cambios
File upload fields now ignore values that did not arrive as a real upload
Stored upload URLs are deleted only when they resolve to a file inside the uploads directory
1.4.11
2 nuevos1 corrección1 de seguridad7 cambios
Nuevo
Added a capability check to the conditional suggestions AJAX handler
Added a payload size limit and a per client rate limit to the public mobile signature endpoints
Corregido
Fixed a stored cross site scripting issue where signature values submitted to the public abandoned form endpoint were rendered unescaped in the admin submission and abandoned form screens
Seguridad
Security
Cambios
Signature data URIs are now validated in full, instead of by prefix only, everywhere they are accepted or displayed
Field values received by the public abandoned form tracking endpoint are sanitised on the way in
Form, submission, abandoned form and AI generation REST routes now require the same capability as the admin screens, so submission data is no longer readable by lower roles. Sites that delegate form management can adjust this with the `sigmaforms_manage_forms_capability` filter
The temporary upload capability used for anonymous form submissions is now granted only for the duration of the upload itself, after the nonce check, instead of for the whole request
Exported CSV cells beginning with a formula character are escaped, so submission exports cannot execute in spreadsheet software
Plugin Check compliance: replaced `date`, `strip_tags` and `parse_url` with `gmdate`, `wp_strip_all_tags` and `wp_parse_url`, and documented the remaining sanitisation and template variable notices
Declared compatibility with WordPress 7.1
1.4.10
2 cambios
Cambios
Promotion notice feature and all of its assets, AJAX handler, and dismissal logic
Dashboard feed widget and its remote feed requests, transients, and styles
1.4.9
1 nuevo1 mejora9 cambios
Nuevo
New "Transition" form theme - a card driven quiz/funnel style with selectable image cards, animated states and a multi-step progress bar
Mejora
Improved
Cambios
Field label images on every field type, with the image positioned above, below, left or right of the label text
Label image sizing by percentage of the field (stays proportional on any screen) or by fixed pixels, plus an optional height and a Full Width option
Drag to resize label images directly in the form preview - edge handles for width and height, corner handle for both, hold Shift to keep the aspect ratio
Built in image cropper for label and option images, using the WordPress media cropper. Crops always start from the original upload and are saved as a new attachment, so the source file is never modified
Per option images for Radio, Checkbox and Dropdown fields, with a shared position and size per field. Dropdowns with images render an image capable listbox while keeping the native select for validation and conditional logic
"Show Country Flag Icons" toggle for Country and International Phone fields, to show or hide flag icons on the frontend
Separate "Show Field Label Text" and "Show Field Label Image" toggles, so the text and the image can be hidden independently
Automatic retention policy for form view logs - set how many days of view history to keep (default 60) from Settings > Advanced > Data Cleanup, with a live count of entries queued for deletion
View log cleanup runs in small batches inside a time budget, so clearing a large backlog never holds a long database lock or exceeds the PHP time limit
1.4.8
1 cambio
Cambios
System improved
1.4.7
2 cambios
Cambios
CC and BCC email fields for form submission notifications in global settings and per-form email overrides
Support for multiple email addresses (comma-separated) in To, CC, and BCC fields
1.4.6
1 corrección
Corregido
Fixed critical security vulnerability that allowed unauthenticated arbitrary file upload and remote code execution via public form file fields
1.4.5
1 cambio
Cambios
= Fixed =
1.4.4
4 cambios
Cambios
= Updated =
Made compatible with WordPress version 7.0
= Improved =
Button icon alignment across admin screens
1.4.3
1 cambio
Cambios
= Added =
1.4.2
1 corrección
Corregido
Admin notice styling and handling
1.4.1
7 cambios
Cambios
= Added =
Export/Import Settings feature in Advanced Settings tab
Export all SigmaForms settings to JSON file with timestamp
Import settings from previously exported JSON file with automatic saving
Settings validation and sanitization on import for security
= Fixed =
Plugins list "Settings" link now opens SigmaForms Settings (`sigmaforms-settings`) instead of the Forms list
1.4.0
24 cambios
Cambios
= Added =
Google reCAPTCHA v3 support with invisible spam protection
Toggle switch to enable reCAPTCHA v3 (invisible) or v2 (checkbox) modes
Configurable score threshold for v3 (0.0 - 1.0) with recommended default of 0.5
Real-time score-based spam detection without user interaction
Automatic token generation and validation for v3 submissions
Backward compatibility with existing reCAPTCHA v2 implementations
mTCaptcha support as an additional CAPTCHA provider
mTCaptcha global settings (enable toggle, site key, and private key)
mTCaptcha availability in Form Editor Security tab when configured
Frontend mTCaptcha widget rendering and server-side token verification
Customizable Page Break settings for multi-step forms
Custom "Next Button Text" for page breaks — supports any language for translation
Custom "Previous Button Text" for page breaks — supports any language for translation
Custom "Step Indicator Format" with {current} and {total} placeholders for multilingual support
Color customization for multi-step navigation — background and text colors for Next/Previous buttons, text color for step indicator
Customizable validation message for page breaks — define the alert shown when required fields are not filled before advancing to the next step, with full multilingual support
Textarea field height option — define a custom pixel height for any Textarea field that is applied on frontend render
Maximum file count option for File Upload fields — set a numeric limit on how many files can be uploaded when "Allow Multiple Files" is enabled
"Add more files" button on the frontend — after uploading files, users can incrementally add more until the maximum limit is reached
Remaining file count indicator shown alongside the "Add more files" button
Maximum file limit hint displayed inside the upload area before any files are selected
= Fixed =
CAPTCHA now properly appears only on the last step of multi-step forms before the submit button
Changelog publicado por el desarrollador, en su idioma original.
