14 versions
Sigma Forms history.
Every release of Sigma Forms is archived here with its changelog, file size, and security scan result. Use the archive to roll back to a stable release or audit what changed between updates.
14 of 14 releases scanned clean
v1.6.0Latest
October 20, 2026634.5 KBScanned
Other
- ### Security
- Hardened public form endpoints, hid the saved SMTP password, tightened permission checks and randomised upload file names
Added
- Per-field columns in the submissions CSV export
- Styled confirm dialogs and notices in the admin
- `sigmaforms_abandoned_session_limit` filter
- `sigmaforms_email_from_address` filter
- Option to remove the saved SMTP password
- "Global default" form theme for new forms, and an "Apply to all existing forms" option in Form Styling
- forms store submissions by default
Improved
- `sigmaforms_manage_forms_capability` now covers admin menus and AJAX
- Webhooks are sent after the response; emails use the site's From address and reply to the submitter
- Form scripts and the abandonment tracker load only where needed; about 30 fewer scripts on admin screens
- Submission indexes on status and date, added right after updating
- Form editor: choice options as condition values, duplicates placed after the original, form IDs in filters
- Wrong file types are reported when the file is picked
Fixed
- Expired nonces broke submissions, and a double-click could submit twice
- Multi-step forms: blocking alert, skipped required radios and invalid emails, hidden required fields blocking Next, and a page break at the end hiding the form
- Required fields hidden by conditional logic blocked the submission; "User Data" conditions never matched on the front end
- CSV rows broke on quotes; SMTP passwords with special characters or "0" were not saved as typed
- Abandoned tracking failed on cached pages and returned 500 for invalid requests
- Admin: `admin.js` loaded twice, vague session-expired error, raw AI debug output, untranslatable messages and `'` in translations
- Block editor preview was unstyled and the legacy block loaded a broken script
- Choosing a theme in Settings had no effect on existing forms, and forms on the global Custom theme kept their old colours
- REST submissions ignored the form's success message, unrated Ratings saved as 0, missed radios showed no error, and uninstall left license transients
September 28, 2026617.5 KBScanned
Added
- Shared admin header with a "More" menu, and screen switching without a page reload
- SVG icons throughout the admin, replacing Dashicons
Improved
- All admin screens and the Dashboard widget redesigned
- License screen protected from other plugins' CSS
- Expired links now show a "Back" link instead of an empty page
Fixed
- Failed settings saves showed as successful
- Dashboard widget links opened a "Link expired" page, and its title ignored the white label brand
- Analytics listed all 24 hours for forms with no submissions
- Expired Analytics filter links ended on an empty page
- The form editor showed "Add New" when editing a form
- The form editor's save message vanished after one second
- Tables broke on small screens and split dates mid-word
- Icon-only buttons had no accessible labels
- `wpdb::prepare()` was called without placeholders
August 26, 2026576.2 KBScanned
Other
- ### Security
- File upload fields now ignore values that did not arrive as a real upload
- Stored upload URLs are deleted only when they resolve to a file inside the uploads directory
Fixed
- an arbitrary file deletion vulnerability in the submission delete handlers (CVE-2026-78657)
v1.4.10Unavailable
August 11, 2026567.7 KBScanned
Removed
- Promotion notice feature and all of its assets, AJAX handler, and dismissal logic
- Dashboard feed widget and its remote feed requests, transients, and styles
v1.4.9Unavailable
August 9, 2026584.7 KBScanned
Added
- "Transition" form theme - a card driven quiz/funnel style with selectable image cards, animated states and a multi-step progress bar
- Field label images on every field type, with the image positioned above, below, left or right of the label text
- Label image sizing by percentage of the field (stays proportional on any screen) or by fixed pixels, plus an optional height and a Full Width option
- Drag to resize label images directly in the form preview - edge handles for width and height, corner handle for both, hold Shift to keep the aspect ratio
- Built in image cropper for label and option images, using the WordPress media cropper. Crops always start from the original upload and are saved as a new attachment, so the source file is never modified
- Per option images for Radio, Checkbox and Dropdown fields, with a shared position and size per field. Dropdowns with images render an image capable listbox while keeping the native select for validation and conditional logic
- "Show Country Flag Icons" toggle for Country and International Phone fields, to show or hide flag icons on the frontend
- Separate "Show Field Label Text" and "Show Field Label Image" toggles, so the text and the image can be hidden independently
- Automatic retention policy for form view logs - set how many days of view history to keep (default 60) from Settings > Advanced > Data Cleanup, with a live count of entries queued for deletion
Improved
- View log cleanup runs in small batches inside a time budget, so clearing a large backlog never holds a long database lock or exceeds the PHP time limit
v1.4.7Unavailable
July 15, 2026552.5 KBScanned
= Added =
* CC and BCC email fields for form submission notifications in global settings and per-form email overrides
* Support for multiple email addresses (comma-separated) in To, CC, and BCC fields
v1.4.6Unavailable
July 7, 2026551.4 KBScanned
Fixed
- critical security vulnerability that allowed unauthenticated arbitrary file upload and remote code execution via public form file fields
v1.4.4Unavailable
May 25, 2026550.5 KBScanned
= Updated =
* Made compatible with WordPress version 7.0
= Improved =
* Button icon alignment across admin screens
Why archive
Sometimes the latest release isn't the one you need. The archive lets you pin Sigma Forms to a known-good version, or roll back while a bug is investigated. Every release stays scanned and reachable.