https://www.gpldownloads.com/downloads/jetformbuilder-pro-core-plugin/changelog/
Auto Updates
Latest Updates
Log inGet Started
Back to JetFormBuilder (Free Base Plugin)

JetFormBuilder (Free Base Plugin) changelog

Release notes for every version we have on record, newest first.

Latest 3.6.8 40 versions
3.6.8 Latest 2 new13 fixed4 security
New
  • Ability to use ID and title of the term created by Insert/Update Term in macros of the following actions
  • Ability to check whether a field is hidden by a Conditional Block
Fixed
  • Bricks AJAX popup not opening when form field uses custom template
  • Number field shows a stale min error and a min value with extra digits when min/max is set by a formula
  • Password visibility toggle does not work with Input Mask
  • Cursor gets stuck after entering a leading zero in a masked field
  • Select field padding is not applied correctly in Elementor with Blocksy and OceanWP themes
  • Locale-dependent PHP warning during database migrations
  • Restrict validation rules to supported field types
  • Actions do not work correctly in RTL languages
  • Calculated field displays a date one day earlier than the selected date in certain time zones
  • Phone field dial code displays incorrectly in RTL layouts
  • Checkbox labels containing links wrap incorrectly on tablet and mobile devices
  • Actions disappear after restoring a revision
  • Prevent Repeater data loss when updating posts
Security
  • Prevent privilege escalation through manual verification of held submissions
  • Allow render states to trigger only their own actions
  • Prevent shortcode execution through submitted field macros
  • Prevent arbitrary file deletion through media fields
3.6.7.1 1 fixed
Fixed
  • Prevent stored XSS through preset values evaluated as macros
3.6.7 3 new7 fixed
New
  • Manual Verification Capability setting for Form Records
  • HTML email preview in the Send Email action
  • Custom placeholder support for the Phone field
Fixed
  • JFB_FIELD macro parsing in field placeholders
  • Dynamic default values in the Advanced Choices field
  • Handle empty product images in WooCommerce integration
  • Payment gateways use the same Price Field value despite having separate settings
  • UI elements overlap after a WordPress update
  • Input Mask does not work with Advanced Validation
  • Default field values override user-entered values
3.6.6.1 2 fixed
Fixed
  • Unauthenticated update/trash of anonymous posts and Media field access check
  • Prevent reflected DOM XSS through HTML macros
3.6.6 3 new11 fixed
New
  • Additional Style Settings for Media Field in New Style Manager
  • Add notice to Media field
  • Form Preset using source that is JetformBuilder Record
Fixed
  • Limit AI form generation prompt length to prevent 403
  • Preserve JetEngine listing styles after dynamic option updates
  • Support BOOKING_UNITS macro in calculated fields
  • Phone field block rejects all landline (fixed-line) numbers as invalid
  • Form style is not applied in the dynamic popup
  • Checkbox custom options with zero or one predefined option
  • Apply Twig listing styles to checkbox and radio templates
  • Clear stale Calculated Field watchers on recalculation
  • Restore Range field rendering in Chrome
  • Unauthenticated arbitrary Media Library attachment deletion
  • Prevent XSS in Select field
3.6.5.4 1 fixed
Fixed
  • Prevent XSS in Calculated Field formulas
3.6.5.3 1 fixed
Fixed
  • Secure SSR callbacks with admin-managed registry
3.6.5.2 8 fixed
Fixed
  • Advanced Choices compatibility with WordPress 7.1
  • Harden preset access checks
  • Shortcode injection in form status messages
  • Secure Advanced Validation Server-Side Callbacks with per-form allowlists
  • Escape Media field previews to prevent XSS
  • Prevented unauthenticated email header injection in the Send Email action
  • Prevented unauthenticated HTML injection into notification emails through the WYSIWYG field
  • Prevented unauthenticated blind SQL injection when retrieving forms by payment token
3.6.5.1 1 new1 fixed
New
  • Allow extending macro groups in Send Email fields
Fixed
  • Support Hierarchical Select in protected price calculations
3.6.5 3 new13 fixed
New
  • Parent/child support for Post Submit Actions
  • Support field macros in Action messages
  • Allow customization of the Image Upload directory via filter
Fixed
  • Default Reset Password email is now sent correctly when using Reset Password actions
  • Prevent validation bypasses in core and SSR flows
  • Harden request lifecycle, CSRF, and CAPTCHA validation
  • Prevent Login Form submission when CAPTCHA validation fails
  • Restore form submission after correcting CAPTCHA validation errors
  • Prevent JavaScript console error when adding fields in the editor
  • Correct WYSIWYG behavior when removing Repeater items out of order
  • Restore the first Repeater image in Fields Preview
  • Prevent 404 error when Form Records filters match no records
  • Late-registered form messages displayed status codes
  • Prevent Insert/Update Post from clearing JetEngine meta for removed fields
  • Correct Advanced Validation inheritance for form fields
  • Prevent premature browser validation notices
3.6.4.2 2 fixed
Fixed
  • Secure payment amount toggle behavior
  • Safely enable payment amount protection for eligible existing forms
3.6.4.1 1 fixed
Fixed
  • Broken Access Control vulnerability
3.6.4 3 new3 fixed
New
  • Add Text Field variations for Email, Password, URL, First Name, Last Name
  • Show field names in the List View
  • Add customizable autocomplete attribute for Text Fields
Fixed
  • Hide Honeypot protection fields in the editor after updating to 3.6.2
  • JetFormBuilder forms in JetPopup AJAX popups not initializing correctly
  • Respect Form Records access capability in REST endpoints
3.6.3.1 1 fixed
Fixed
  • Get_from_db, get_from_users options generators. Make sure the generator options is correctly santized to prevent context injecting.
3.6.3 3 new8 fixed
New
  • Support option labels in Fields Preview macros
  • Auto-focus search in the “New Action” modal and fix Undo (Cmd/Ctrl+Z) behavior inside action popups
  • Delete removed Media Field attachments from the Media Library on form submission
Fixed
  • Restore repeater macro filter compatibility without breaking formatted output
  • Calculated Field now correctly processes empty Multi Select values
  • Require User Access selection in Media Field settings
  • Prevent broken widget rendering for non-form form IDs
  • Normalize media field files after repeater re-observe
  • Duplicate HTML macro processing
  • Escape line breaks only inside calculated string values
  • Recalculate multistep page break state after binding page
3.6.2.2 1 fixed
Fixed
  • SSR validation privilege escalation hardening
3.6.2.1 1 fixed
Fixed
  • Prevent unauthorized JetEngine Update Options writes
3.6.2 1 improved10 fixed
Improved
  • UPD: Improved Honeypot field markup to make the anti-spam protection less detectable and more accessibility-friendly.
Fixed
  • Resolved validation errors when using dynamic values for the Media Field “Maximum Files” setting.
  • Prevented duplicate _wpnonce field IDs when multiple forms with form safety enabled are rendered on the same page.
  • Corrected calculated field updates when changing selected options.
  • Fixed WYSIWYG field link handling in popups and repeaters, including issues with adding and preserving links.
  • Fixed calculated fields not displaying a value until a multiple-select field option is selected.
  • Prevented duplicate WYSIWYG editor IDs when multiple WYSIWYG fields are rendered.
  • Prevented false Undefined view errors after email verification.
  • Restored StyleManager opt-out handling for form blocks.
  • Skipped Phone Field validation when changing the selected country.
  • Prevented a fatal error in the Update User action when the User Role setting is empty.
3.6.1.1 1 fixed
Fixed
  • Vulnerability allowing Privilege Escalation
3.6.1 2 new18 fixed
New
  • Ability to rename form actions Crocoblock/suggestions#7857
  • Hooks for adding custom controls to Elementor and Bricks form widgets
Fixed
  • Dynamic Value not working for the Advanced Choices field
  • Multiline text values are not displayed in calculated fields
  • Save checkbox field doesn't saved data (Register User Action)
  • Cloudflare Turnstile Issue - Invalid input for optional parameter "action"
  • Fatal error Uncaught Jet_Form_BuilderAdminExceptionsNot_Found_Page_Exception
  • Input styles after update WP 7.0
  • Friendly Captcha fatal error during token verification
  • Advanced Choice block background color handling
  • Editor package translation references
  • Advanced Choice fixed width style output
  • Switcher field styles
  • ToDateTime default timezone handling
  • Option fields apply dynamic and multi-value defaults
  • Radio field auto page switch stays scoped to enabled fields
  • Phone Field translations follow current WordPress page locale
  • Repeater required validation after row removal Crocoblock/jetformbuilder#564
  • Litespeed Cache plugin compatibility Crocoblock/jetformbuilder#603
  • XSS vulnerability
3.6.0.1 1 fixed
Fixed
  • Prevent PHP errors appears in some cases and related to the Style Manager module.
3.6.0 5 new4 fixed3 changed
New
  • Use several payment gateways at once in form
  • Conditional logic to payment gateway
  • Phone field
  • New Style Manager
  • Jet-form-builder/form-record/export/get-blocks-by-post filter
Fixed
  • Space in the markup of Map Field
  • Migrate blocks registration to apiVersion 3
  • Incorrect display of large numbers in Form Records
  • Fixed an issue where message meta returned labels instead of actual values.
Changed
  • UPD: Form macros logic
  • UPD: Rewrite Generators UI
  • UPD: Modules loader
3.5.6.3 2 new1 fixed
New
  • Support preview for AVIF files in Media Field
  • Jet-form-builder/form-record/general-values-columns filter for Form Record General Values Columns
Fixed
  • LFI vulnerability
3.5.6.2 1 fixed
Fixed
  • RCE vulnerability
3.5.6.1 1 fixed
Fixed
  • Compatibility with jetBooking 4.0.0
3.5.6 2 new5 fixed
New
  • Bricks builder ajax popup compatibility
  • Added aria-label to hidden input in advanced choices block for better accessibility
Fixed
  • CSV export now correctly includes fields with capital letters in their names
  • Corrected ifEmpty filter behavior - now returns the default value only for empty fields and includes an isNaN check
  • Missing render states after form import
  • Insert/Update Term action no longer updates the term slug when only the name is changed
  • Update User action correctly extract user_id and add helper text in user-compare-password property
3.5.5 8 fixed
Fixed
  • Register User action password validation for GATEWAY.SUCCESS,GATEWAY.FAILED events
  • User login after registration in the Register User action
  • Checkboxes preview
  • Checkbox field not saving data to the post meta field
  • Form records export compatibility with WPML
  • Checkbox value with comma breaks selection
  • Saving repeater values before row deletion
  • PHP warnings
3.5.4 1 new10 fixed
New
  • Timezone argument support for toDate, toDateTime, and toTime filters
Fixed
  • Line breaks not displayed in the WYSIWYG field
  • Calculated field not working with Advanced Choice
  • Nested conditional blocks not working when parent had Remove hidden elements from page HTML option enabled
  • Conditional block fields recalculation logic
  • Disable field validation on form init for Advanced Validation type
  • Turnstile captcha throws an error if the form has more than one Action Button
  • Incorrect date format output in the Calculated field
  • Auto-closing dropdown issue in select fields within the preset settings
  • Broken Access Control vulnerability
  • Added column existence check to prevent duplicate column name error for on_event when migration runs on form submission
3.5.3 1 new8 fixed
New
  • Delete button for unsupported actions
Fixed
  • Calculated field not updating after repeater row deletion
  • Default value issue in the Repeater field
  • SQL syntax error in form records admin on fresh installations
  • Form submission fails when Request Key is numeric only Crocoblock/jetformbuilder#560
  • Switcher field styles overridden by JetForm styles
  • Media field upload file count
  • Form step not advancing when reselecting the same radio option Crocoblock/jetformbuilder#565
  • Insert/Update Post action post thumbnail not set when attachment added via WP Library in the Drag and Drop File Upload field
3.5.2.1 1 new3 fixed
New
  • Support for multiple input formats for post thumbnail in Insert/Update Post action
Fixed
  • Resetting input values in the Repeater field when deleting a row
  • Controls descriptions
  • Compatibility with the JetFormBuilder Drag and Drop File Upload addon
3.5.2 2 new9 fixed
New
  • Create terms if missing when a post is inserted/updated via 'Insert/Update Post' action Crocoblock/suggestions#3654
  • 'Insert/Update Term' action
Fixed
  • Media field better compatibility with ACF Crocoblock/jetformbuilder#487
  • Fixed the issue with triggering the Send Email action after verification by the admin Crocoblock/suggestions#7946
  • Repeater items triplicate inside Elementor Tabs
  • Editor styles compatibility with BuddyBoss theme
  • Login & registration texts and UX enhancements
  • Resetting input values in the Repeater field when deleting a row
  • Moved 'Enable custom option' from block settings menu to toolbar
  • Deprecations and minor issues
  • PHP Object Injection vulnerability
3.5.1.2 1 fixed
Fixed
  • Meta fields update in Insert/Update Post action
3.5.1.1 1 fixed
Fixed
  • Fatal error if the user role is empty after plugin update/user role is not chosen after update
3.5.1 2 new5 fixed
New
  • Multiple Assignable Roles with Register/Update User actions Crocoblock/suggestions#7942
  • Jet-form-builder/ajax/processing-error JS trigger
Fixed
  • Ensure post-meta insertion and updates work with the Insert/Update Post action when using meta repeaters saved as separate fields Crocoblock/suggestions#7876
  • Save repeater data after removing items Crocoblock/jetformbuilder#528
  • Copilhost.fr breaks POST request in form
  • Honeypot protection not preventing submission if honeypot field not empty
  • Accessibility Improvements
3.5.0 8 new1 fixed1 changed
New
  • Calculated Field usage info with references and examples.
  • User Journey functionality.
  • Implemented visibility controls for Form Records, restricting access for unprivileged users.
  • Added date/time calculation support to Calculated Field, including new date/time filters.
  • Input validation against the current user’s password.
  • New admin UI
  • Server side validation method option
  • Import from HTML feature
Fixed
  • Accessibility Improvements
Changed
  • UPD: synchronize manual and bulk editors
3.4.7.1 1 fixed
Fixed
  • Compatibility with WordPress 6.8 (resolves visual issue with block validation type)
3.4.7 2 new11 fixed
New
  • Style controls notices
  • Jet-form-builder/ajax/on-fail JS trigger
Fixed
  • Editor styles compatibility with BuddyBoss theme
  • Reset input values in the Repeater field when adding a new row
  • Init of the Check Mark block
  • Check mark widget icon for checkbox
  • Issue with Conditional Block duplication
  • Input mask DateTime documentation link
  • Crocoblock/jetformbuilder#521
  • Crocoblock/suggestions#7878
  • Generate with AI limit error on local sites
  • Errors on the Payments admin page when the Enable Gateways option is disabled
  • Disabled "Next page" button when select field is empty
3.4.6 2 new10 fixed
New
  • Added the Is field value unique callback for the Advanced Validation option with the Server-Side Callback type
  • Added the Open in New Tab option to the Redirect to Page action
Fixed
  • Resolved an issue with search autocomplete in the Map field
  • Fixed case sensitivity for the use autocomplete option in Select Field when loading via AJAX
  • Crocoblock/jetformbuilder#497
  • Improved compatibility with the JetFormBuilder Hubspot Action addon
  • Improved compatibility with the JetFormBuilder Woocommerce Cart & Checkout Action addon
  • Fixed incorrect calculation in the Calculated Field when using Dynamic Value
  • Resolved a critical error in hCaptcha when no keys are inserted
  • Fixed an issue where the input mask prevented the form from being submitted
  • Fixed an issue with Enable form pages progress and Clear data on success submit options on Elementor pages
  • Minor fixes in the editor
3.4.5.2 2 fixed
Fixed
  • Calculated field issues after 3.4.5 update
  • Issue with the Date field when the default value is set as macros
3.4.5.1 1 fixed
Fixed
  • Calculated field issues after 3.4.5 update