8 versions
Ninja Forms – File Uploads history.
Every release of Ninja Forms – File Uploads is archived here with its changelog, file size, and security scan result. Use the archive to roll back to a stable release or audit what changed between updates.
7 of 8 releases scanned clean
v3.3.31Latest
July 15, 20263.4 MBScanned
Fixed
- Fixes:*
- file upload button background staying white after file selection
- submit button not reliably blocked during active file upload
- "Delete" attachment button not translated in bundled translations
- files >5MB not appearing in File Uploads admin after S3 background upload
- file persisting on server when "Save to Server" disabled with Google Drive and file rename
- external service upload URL showing server path in submissions
- file extensions not in WordPress MIME registry failing upload when explicitly allowed
- date shortcodes using server timezone instead of WordPress site timezone
- PHP 8.4/8.5 deprecation notices in vendored libraries
Other
- Workflow:*
- Security Enhancements:*
- protect admin notices from reflected XSS via query parameters
- sanitize uploaded filenames to block stored XSS
- require administrator capability for external file URL access
May 28, 20263.6 MBScanned
Fixed
- Fixes:*
- strict comparison for PHP 7.4 file extension validation
- repeater file upload fields not saving all file sets
- save settings translation call timing
- filename merge tag not appearing on payment gateways
Other
- suppress undefined array key warnings for upload_types
- Security Enhancements:*
- protect against unauthenticated file uploads
- protect against XSS in AJAX response, admin submissions, and merge tags
v3.3.28Unavailable
April 10, 20263.6 MBScanned
Other
- Security Enhancements:*
Fixed
- injection and CSRF in uploads table
- reflected XSS in OAuth2 admin
v3.3.27Unavailable
March 19, 20263.6 MBScanned
Fixed
- Fixes:*
- cancel button clearing all form field data
Added
- aria-labelledby to file upload button for accessibility
Other
- Security Enhancements:*
- block destination filename whitelist bypass in file upload
v3.3.26Unavailable
February 12, 20263.2 MBScanned
Fixed
- Fixes:*
Other
- reconstruct file upload data for retriggered emails
- Security Enhancements:*
- block executable file variants with expanded extension blacklist
v3.3.25Unavailable
January 23, 20263.3 MBUnknown
v3.3.24Unavailable
January 21, 20263.3 MBScanned
Why archive
Sometimes the latest release isn't the one you need. The archive lets you pin Ninja Forms – File Uploads to a known-good version, or roll back while a bug is investigated. Every release stays scanned and reachable.