4 versions
Advanced Forms Pro for ACF history.
Every release of Advanced Forms Pro for ACF is archived here with its changelog, file size, and security scan result. Use the archive to roll back to a stable release or audit what changed between updates.
2 of 4 releases scanned clean
v1.9.3.8Latest
May 11, 2026766.8 KBScanned
Other
- Security: Fixed a missing authorization check on the form import handler. An unauthenticated request to `admin-post.php` could overwrite an existing form (identified by its publicly visible form key) and inject stored cross-site scripting via the form description — potentially leading to site takeover. The import handler now requires the `edit_pages` capability and a valid nonce, and rejects malformed uploads. Thanks to Jakub Herman / Patchstack for the responsible disclosure.
- Security: Form titles and descriptions are now sanitised on output (`esc_html()` for the title, `wp_kses_post()` for the description).
Fixed
- a PHP warning ("Trying to access array offset on value of type null") when saving a form.
v1.9.3.4Unavailable
May 13, 2024765.0 KB
Added
- the `af/form/submission/value` filter to allow modification of submission values before they are processed.
Why archive
Sometimes the latest release isn't the one you need. The archive lets you pin Advanced Forms Pro for ACF to a known-good version, or roll back while a bug is investigated. Every release stays scanned and reachable.