13 versions
Ninja Forms – File Uploads history.
Every release of Ninja Forms – File Uploads is archived here with its changelog, file size, and security scan result. Use the archive to roll back to a stable release or audit what changed between updates.
12 of 13 releases scanned clean
v3.3.36Latest
October 14, 20263.7 MBScanned
Fixed
- Fixes:*
- "maximum file size" error message always appearing in English on translated sites
- fatal error when a large Amazon S3 upload fails in the background; the upload is now retried, then marked as failed
- only the first file uploading when several files are dropped onto a File Upload field
- Submit becoming available before every selected file has finished uploading
- an upload in progress being shown as an error
September 28, 20263.7 MBScanned
Fixed
- Fixes:*
- uploaded files being deleted when their external storage service is disconnected and "Save to Server" is off
- files not reaching Google Drive when a Custom Directory is set
- fatal error when a Google Drive upload fails; the file is now kept on the server and marked as failed in the admin
- Google Drive connection being dropped on temporary network or proxy errors
- bulk delete on the File Uploads screen failing with "The link you followed has expired"
- maximum file count showing an error and blocking submission when the allowed number of files is selected
- "Attach File Uploads" email option not appearing until the form is saved and reloaded
- PHP warnings logged when a File Upload field in a repeatable fieldset is left empty
- early translation loading notice on WordPress 6.7+ when Amazon S3 is connected
Other
- Enhancements:*
- allow File Upload fields inside repeatable fieldsets to be sent to external storage
- show an admin warning when an external storage service is disconnected automatically
- show the Google Drive folder each uploaded file was saved to
September 23, 20263.4 MBScanned
Other
- Security Enhancements:*
- strengthen server-side validation of uploaded file types to block disallowed files
Fixed
- Fixes:*
- chunked uploads being overwritten by a single chunk when a chunk request is repeated
- HEIC/HEIF photo uploads failing on iPhone Safari due to a content/extension mismatch
- uploaded files in repeatable fieldsets not reaching the email or submission when more than one fieldset is added
- file size validation not enforcing PHP upload limits, allowing truncated files through
- email action with attachments disabled inheriting another action's attachment settings when both send to the same recipient
v3.3.33Unavailable
August 31, 20263.6 MBScanned
Fixed
- Fixes:*
- File Upload merge tag suffix variants not populating during PDF export or retriggered emails
- fatal error when uploading files to Amazon S3
v3.3.32Unavailable
July 21, 20263.6 MBScanned
Fixed
- Fixes:*
- download links in notification emails returning blank screen for server-stored files
v3.3.31Unavailable
July 15, 20263.4 MBScanned
Fixed
- Fixes:*
- file upload button background staying white after file selection
- submit button not reliably blocked during active file upload
- "Delete" attachment button not translated in bundled translations
- files >5MB not appearing in File Uploads admin after S3 background upload
- file persisting on server when "Save to Server" disabled with Google Drive and file rename
- external service upload URL showing server path in submissions
- file extensions not in WordPress MIME registry failing upload when explicitly allowed
- date shortcodes using server timezone instead of WordPress site timezone
- PHP 8.4/8.5 deprecation notices in vendored libraries
Other
- Workflow:*
- Security Enhancements:*
- protect admin notices from reflected XSS via query parameters
- sanitize uploaded filenames to block stored XSS
- require administrator capability for external file URL access
v3.3.30Unavailable
June 29, 20263.6 MBScanned
Fixed
- Fixes:*
- "temp file does not exist" error on form re-submission after validation error
Other
- Security Enhancements:*
- protect debug log REST endpoints from unauthenticated access
- block arbitrary file read via email attachment path traversal
v3.3.29Unavailable
May 28, 20263.6 MBScanned
Fixed
- Fixes:*
- strict comparison for PHP 7.4 file extension validation
- repeater file upload fields not saving all file sets
- save settings translation call timing
- filename merge tag not appearing on payment gateways
Other
- suppress undefined array key warnings for upload_types
- Security Enhancements:*
- protect against unauthenticated file uploads
- protect against XSS in AJAX response, admin submissions, and merge tags
v3.3.28Unavailable
April 10, 20263.6 MBScanned
Other
- Security Enhancements:*
Fixed
- injection and CSRF in uploads table
- reflected XSS in OAuth2 admin
v3.3.27Unavailable
March 19, 20263.6 MBScanned
Fixed
- Fixes:*
- cancel button clearing all form field data
Added
- aria-labelledby to file upload button for accessibility
Other
- Security Enhancements:*
- block destination filename whitelist bypass in file upload
Why archive
Sometimes the latest release isn't the one you need. The archive lets you pin Ninja Forms – File Uploads to a known-good version, or roll back while a bug is investigated. Every release stays scanned and reachable.