15 versions
WPForms Pro (templates included) history.
Every release of WPForms Pro (templates included) is archived here with its changelog, file size, and security scan result. Use the archive to roll back to a stable release or audit what changed between updates.
15 of 15 releases scanned clean
v2.0.1.1Latest
September 4, 202613.4 MBScanned
Fixed
- Undoing the removal of a secure Custom Value in an addon's Field Mapping settings restored it unlocked, so the value was no longer saved securely.
August 26, 202613.3 MBScanned
Added
- QR Code setting generates a downloadable code for a chosen page or URL.
- Add Media button in the Confirmation Message editor allows inserting images from the Media Library.
- A Smart Tags picker in the Page Break field Progress Text setting makes it easy to insert the current page and last page values.
- Marketing provider custom fields can now be mapped to individual Address field subfields — Address Line 1, Address Line 2, City, State, ZIP/Postal Code, and Country — instead of only the whole Address field.
- The Layout field is now found in the Form Builder Add Fields panel when searching for "side by side", "grid", "arrange", and other multi-column terms.
- The File Upload field is now found in the Form Builder Add Fields panel when searching for "attach", "document", "resume", and other file attachment terms.
- A scheduled task now periodically clears stale temporary files from the file upload tmp directory, independent of whether an upload session ever completes.
- Form templates are now found in the Form Builder when searching for related terms, not only by their exact names.
- Buttons in the Form Builder and on WPForms admin pages now show a visible focus indicator during keyboard navigation, and it no longer appears on mouse click.
- Product education banners in the Form Builder recommending the Form Abandonment and Save and Resume addons for forms with many fields.
Improved
- Stripe Radar-blocked payments now appear in the payment log with a distinct label instead of the generic decline message.
- DOMPurify library to 3.4.13.
Fixed
- The Smart Tags widget in the Form Builder did not highlight required fields with a red border when validation failed.
- PayPal Commerce checkout failed with a fatal error when the Shipping Email setting pointed to an Email field with Confirm Email enabled.
- The WPForms block showed a Get Started button that led users without form-creation permission to an access-denied error; the block now explains the missing permission instead.
- Additional Information columns were empty when a background entry export task ran outside WP-Cron (e.g., via the Action Scheduler async runner or WP-CLI).
- Two fields appeared active after duplicating a field inside a Layout or Repeater field.
- A PHP notice was logged on the front-end when a payment field (Multiple Items, Checkbox Items, or Dropdown Items) contained a choice saved without a label.
- Form templates in the Form Builder Setup panel were not filtered by the form's selected category, showing all templates instead.
- The show/hide icon on the Password field appeared oversized in the Divi Editor form preview when Classic markup was enabled.
- A Lite Connect entry restore could not be retried after automatic attempts failed, leaving the progress notice stuck with no way to try again.
- Google Calendar connection settings, including Title, Description, and Location, were not restored when using Undo/Redo in the Form Builder.
- AI Generate Formula feature incorrectly used Payment Checkbox label text instead of configured prices when generating calculation formulas.
- Some button icons were misaligned on WordPress 7.0.
- Incorrect spacing between the icon and text in the Form Builder top bar buttons.
- A broken image appeared instead of the addon icon on the WordPress Updates page in some cases; the WPForms logo is now shown.
- Clicking Previous on the last page of a multi-page form did nothing when the form's closing Page Break field had been removed.
- The Previous button on the last page of a multi-page form appeared even when Display Previous was turned off, and on single-page forms where it had nowhere to navigate, if the form's closing Page Break field had been removed.
- A multi-page form whose opening Page Break field had been removed rendered with a broken layout and no Submit button.
- Handling of passwords and other sensitive values in debug output and logs was improved for better security.
- Choice checkboxes and radio buttons in the Form Builder had no visible border and appeared stretched into ovals in Safari.
- The Advanced, AI MCP, and other collapsible settings section titles in the Form Builder lacked a tooltip explaining their expand/collapse action.
- The notification email sent when an entry was marked as Not Spam showed only the first row of Repeater fields.
- Collapsible settings sections in the Form Builder, such as AI MCP, did not stay closed after the page was reloaded.
- The Analytics page still showed AI promotions when AI features were hidden.
- Reordering choices in a Checkbox field in the Form Builder caused a browser console error and stopped the field preview from updating.
- Square payments failed on every retry after a submission with an invalid credit card expiration date, even once the card details were corrected.
- The Payments page showed too much space between elements when no payments had been collected yet.
- PayPal Commerce subscription checkout failed with a fatal error when the account was disconnected while the form was loaded.
- Temporary file handling in the Entries
August 12, 202613.4 MBScanned
Added
- supported currencies.
- License Validation modal prompting users to activate or renew an inactive license.
Fixed
- Handling of marketing provider connections in the Form Builder was improved.
- Permission handling in the Export Forms tool was improved.
- Form data handling in the Block Editor was improved.
- Some characters in a marketing provider connection's name were not escaped properly, which could affect the Form Builder when opening a form.
- Rich Text field handling was improved.
- Entry print preview handling was improved.
- Entry value display on the Print page, Edit screen, entries list, and in email notifications was improved.
- Repeater field clone handling was improved.
- Rich Text field attachment cleanup during entry purge was improved.
- Users who were allowed to see only their own forms' entries could export entries from forms owned by other users.
- Uploaded file handling in the Entry Preview field was improved.
- a PHP warning (undefined array key) that occurred when scheduled Entry Automation export tasks ran with Dropbox Links or other addon-provided columns enabled.
- Field value display on the Entry View and Print pages, the Edit screen, the entries list, and the single payment page was improved.
- Users without permission to view forms could see every form on the site, including other authors' forms, through the Elementor and Divi form selectors.
v2.0.0.2Unavailable
July 20, 202613.1 MBScanned
Fixed
- Form submissions could still be blocked by stricter web application firewall configurations that flagged the JSON structure of the Form Analytics data; the data attached to each submission is now base64-encoded.
- A cross-site scripting vulnerability when a page combined a WPForms captcha with a specially crafted OptinMonster campaign.
June 26, 202612.8 MBScanned
Added
- AI MCP settings section in the Form Builder with the MCP write-access toggle.
Fixed
- Forms scrolled back to the first text input when adjusting a Number Slider in Chrome on Android.
- Conditional logic added through the AI Smart Form Editor could be left empty the first time it was enabled on a field.
- Email notification header sanitization was improved for better security.
v1.10.2Unavailable
June 17, 202612.7 MBScanned
Added
- The Abilities API now supports creating new forms, editing existing form fields, and editing form settings.
Improved
- Stripe subscriptions that finish all configured billing cycles are now marked as Completed.
Fixed
- Password field with Strength option turned on generated PHP Deprecated notices when submitting the form on PHP 8.0+.
- "RECOMMENDED" badge on the Addons page wrapping onto two lines at narrow viewport widths.
- The "Pro" upgrade badge was incorrectly displayed on the Geolocation settings page for Elite license holders when the addon was not installed.
- Custom CSS configured in the Form Builder was not applied when the form was embedded via the Gutenberg block.
- An AbortError: Transition was skipped console error appeared in the Form Builder on WordPress 7.0.
- Fatal error when opening the Edit Entry page for a Map field placed inside a Repeater field.
- PayPal Credit payment status was not being synchronized in WPForms > Payments.
- The Query String Variable smart tag key was unexpectedly reset when the Email field default value was cleared and re-configured in the Form Builder.
- Default notification is now correctly skipped when its Status is set to Inactive.
- Extra row appeared below the WPForms plugin in the Plugins list when an update or activation notice was shown on WordPress 7.0.
- Stripe block-editor CSS and JS assets no longer load unconditionally on every Block Editor screen. They now load only when the `wpforms/form-selector` block is present.
- The Phone field ignored the Field Size option (Small, Medium, Large) and always displayed at full width.
- Pro addon "requires WPForms X or above" notice was shown to Lite users.
- The Next button on multi-page forms could fail to advance when remote field validation was used on sites with a slow database.
- The `wpforms_emails_send_email_data` filter silently discarded any changes to the headers key before sending the email.
- PHP fatal error when submitting a form with the {page_url} smart tag if the page_url POST field was sent as an array.
- SVG files uploaded via Image Choices and the Content field were not properly sanitized before rendering.
- Active addons not covered by the current license were incorrectly shown as incompatible on the Addons page.
- Orphaned rows could accumulate in the Entry Meta table when spam submissions occurred on forms with entry storage disabled.
- An invalid notice about Fastlane and alternative payment methods appeared in Stripe and Square subscription payment settings in the Form Builder.
Removed
- icon overlapped form name in the Bulk Edit Tags field during bulk edits.
June 4, 202612.7 MBScanned
Added
- Inline Connect buttons in the Form Builder Payments panel, allowing users to connect their payment accounts without leaving the form editor.
Improved
- The Payments page has a refreshed design when no payments have been received yet.
Fixed
- Fatal error on form submission when the PayPal Commerce account was disconnected while the form still had the PayPal Commerce payment enabled.
Why archive
Sometimes the latest release isn't the one you need. The archive lets you pin WPForms Pro (templates included) to a known-good version, or roll back while a bug is investigated. Every release stays scanned and reachable.