Description
Ninja Forms is a free WordPress form builder plugin. Build contact forms, calculators, quizzes, surveys, applications, and registration forms with a drag and drop builder, or describe the form you want and let the built-in AI form builder draft it for you. Every submission is stored in your own WordPress database, with no limit on forms or submissions and nothing to pay to see them.
The form builder that grows with you
Ninja Forms has been part of WordPress since 2011. It started as a volunteer project for a local nonprofit and today it powers classrooms, clinics, nonprofits, online stores, farms, agencies, and government offices, from a single contact form to advanced business workflows.
The free plugin is the complete product for getting started, not a teaser. Calculations, signatures, star ratings, repeatable field groups, spam protection, submission management, and the AI form builder all ship in core. When you need more, premium features come as individual add-ons you can buy one at a time, and memberships bundle them for the moment when buying them one by one stops making sense. We only grow when the sites running Ninja Forms do.
We also respect your privacy and your time. No unsolicited emails, no aggressive marketing, no paywalling of basic features, and we never see or collect the data your forms collect. Our support team helps every user, free or paid.
Free in Ninja Forms, paid almost everywhere else
Several features that other form builders reserve for paid plans are part of the free Ninja Forms plugin:
- Calculations. Assign values to fields and options, combine them with formulas, and show running totals for quotes, order forms, quizzes, and every kind of calculator.
- Signatures. A typed or drawn signature field for agreements, waivers, and applications.
- Repeatable fieldsets. Let visitors add another guest, another line item, or another reference without you predicting how many they need.
- Star ratings. A clickable rating scale for feedback and survey forms.
- Your submissions, on your site. Every submission is saved to your WordPress database. View, search, filter, edit, resend notifications, and export to CSV, for every form, with no entry limit.
- AI form builder. Describe the form you want in plain language and the builder drafts it, then refine it in conversation. It runs on the WordPress AI Client with a provider you connect, so your prompts go where you choose.
31 form fields, all free
- Text and numbers: Single Line Text, Paragraph Text, Number, Date and Time, Confirm, Hidden
- Choices: Single Checkbox, Checkbox List, Radio List, Select, Multi-Select, Select Image, Star Rating
- Contact details: First Name, Last Name, Email, Phone, Address, City, US States, Country, Zip
- Signature and structure: Signature, Repeatable Fieldset, HTML, Divider, Submit
- Spam protection: Anti-Spam, reCAPTCHA, hCaptcha, Cloudflare Turnstile
Customize any field with default values, placeholders, input masks, required and unique-value rules, and custom CSS classes, then save it as a favorite to reuse on any other form.
Emails, confirmations, and actions
- Send any number of email notifications to any number of recipients on every submission, each with its own subject, message, reply-to, CC, and BCC, in HTML or plain text.
- Show a custom success message (links and download links included), or redirect to any page.
- Fire a Google Analytics 4 event on submission for conversion tracking.
- Use merge tags to drop field values, calculation results, and site data into emails, messages, and other fields.
- Call your own WordPress action hook on submission when you need custom code.
Spam protection on every form
A honeypot is active on every form automatically. Add an Anti-Spam question, Google reCAPTCHA v2 or v3, hCaptcha, or Cloudflare Turnstile when you want more, and run submissions through Akismet if the Akismet plugin is installed on your site.
Privacy tools built in
- All submission data stays on your server. Ninja Forms never transmits it and never sees it.
- Flag any field as personally identifiable information and choose not to store its value.
- Automated export and erase support for the WordPress privacy tools, plus front-end Export Data Request and Delete Data Request actions so visitors can serve themselves.
Control who can submit and where forms appear
- Restrict a form to logged-in visitors, reject duplicate values in any field (one submission per email address, for example), or cap the total number of submissions.
- Embed a form with the Ninja Forms block, a shortcode, a widget, or by appending it to any post or page.
- Share a form by public link with no page at all.
- Choose title display, heading level, label position, and what happens after a submission, per form.
Start faster
- Nine templates built into the plugin (Contact Us, General Enquiry, Quote Request, Event Registration, Collect Feedback, Questionnaire, Job Application, Export Data Request, Delete Data Request), plus a library of 100 ready-to-import templates on ninjaforms.com, from reservation and food order forms to applications, surveys, and registrations. Download one, import it, and it is ready to edit. Every template page says which add-ons it uses, if any; a few tiles in the plugin’s own picker need a specific add-on and say so when you open them.
- Duplicate any form, and import or export forms and favorite fields between sites.
- A rich text editor for HTML fields and email messages.
Built for AI agents and developers
Ninja Forms supports the WordPress Abilities API, so an AI assistant connected to your site through the WordPress MCP Adapter can build, edit, and check forms, manage submissions, and change settings through 29 permission-checked abilities, the same operations the dashboard performs. Three destructive abilities stay off unless an administrator opts in. Developers get WP-CLI commands, a WordPress action hook on submission, an extensive filter and action ecosystem, and a full documentation library.
Accessibility
Accessible forms are a core value, not an add-on. Front-end forms are built to our internal standards based on WCAG 2, audited by external accessibility professionals, and regression tested on every update. It is ongoing work; you can read our full Accessibility Statement on ninjaforms.com.
Where add-ons come in
Some capabilities are add-ons rather than part of the free plugin: conditional logic, file uploads, multi-step forms, payments, save and resume, layout and styling controls, PDF submissions, user registration, front-end posting, and integrations with email marketing, CRM, and messaging services. Each is purchased on its own, or bundled in a membership.
- Form features: Conditional Logic, File Uploads, Multi Step Forms, Layout & Styles, Save Progress, Advanced Datepicker, User Analytics, User Management
- Submissions: PDF Form Submissions, Excel Export, Scheduled Submissions Export, Front End Posting
- Payments: PayPal Checkout (official partner), Stripe, Authorize.net, Elavon, Recurly
- Email marketing: Mailchimp, ActiveCampaign, Constant Contact, ConvertKit, AWeber, Campaign Monitor, CleverReach, EmailOctopus, Emma, MailPoet
- CRM: HubSpot (official partner), Salesforce, Zoho CRM, Capsule, CiviCRM, Insightly, OnePageCRM, PipelineDeals
- Notifications and automation: Zapier (official partner), Webhooks, Slack, Trello, Help Scout, Twilio SMS, ClickSend SMS
More than a plugin
Free technical support for every user, whether or not you have bought anything, from a team spanning four continents, Monday to Friday. A full documentation library. Regular updates. Translated into more than 24 languages by the WordPress Polyglots community, with WPML as a long-term partner for more. And an ecosystem-aware approach: we know it is not just you and Ninja Forms, so we work to play well with the rest of your site.
You will always have a direct line to us right here.
Additional Branding and Trademark Information
Ninja Forms® is a registered trademark of Saturday Drive INC. We are a WordPress forms builder, not to be confused with the independent WPForms brand for WordPress. All official Ninja Forms add-ons and memberships can be found on our official website, ninjaforms.com.
Screenshots
Installation
This section describes how to install the plugin and get it working.
- Upload the
ninja-formsplugin folder to your/wp-content/plugins/directory - Activate the plugin through the ‘Plugins’ menu in WordPress
- Visit the ‘Ninja Forms’ menu item in your admin sidebar
FAQ
-
Do I have to pay to see my form submissions?
-
No. Ninja Forms does not paywall submissions. View, search, edit, and export every submission from Ninja Forms > Submissions with the free plugin, with no limit on how many you collect.
-
Is Ninja Forms free?
-
Yes. The core plugin is free and open source, and it is the complete form builder: 31 field types, calculations, signatures, star ratings, repeatable fieldsets, unlimited forms and submissions, email notifications, spam protection, privacy tools, and the AI form builder. Premium features such as conditional logic, file uploads, multi-step forms, payments, and integrations are add-ons you can buy individually or as a membership. See “Which features are add-ons?” below.
-
What form fields are included in the free plugin?
-
All 31 of them:
- Single Line Text
- Paragraph Text
- Number
- Date and Time
- Confirm
- Hidden
- Single Checkbox
- Checkbox List
- Radio List
- Select
- Multi-Select
- Select Image
- Star Rating
- First Name
- Last Name
- Phone
- Address
- City
- US States
- Country
- Zip
- Signature
- Repeatable Fieldset
- HTML
- Divider
- Submit
- Anti-Spam
- reCAPTCHA
- hCaptcha
- Cloudflare Turnstile
-
Does the free plugin include calculations, signatures, and star ratings?
-
Yes, all three. Calculations combine field values with formulas for quotes, orders, and quizzes. The Signature field accepts a typed or drawn signature. Star Rating gives you a clickable rating scale. None of them require an add-on.
-
Can an AI build my forms?
-
Two ways. Inside the plugin, the AI form builder drafts a form from a plain-language description and lets you refine it in conversation; it uses the WordPress AI Client with an AI provider you connect, and it can be switched off entirely in Settings. Outside the plugin, an AI assistant connected to your site through the WordPress MCP Adapter can build, edit, and manage forms through Ninja Forms’ Abilities API, with 29 abilities available by default and every operation subject to the same permission checks as the dashboard.
-
Which features are add-ons?
-
Conditional logic, file uploads, multi-step forms, payments (PayPal Checkout, Stripe, Authorize.net, Elavon, Recurly), save and resume, layout and styling controls, PDF submissions, Excel and scheduled exports, user registration and login, front-end posting, and integrations with email marketing, CRM, messaging, and automation services. Each is sold on its own or in a membership.
-
Is Ninja Forms GDPR compliant?
-
Yes. All user submitted data is stored locally on your server only, unless you expressly configure the plugin to send it elsewhere, for example via an email action. We never see or collect any user submitted data, and we do not act as a Data Controller or Data Processor per GDPR Article 4 for any data submitted through the forms you create. Your forms can flag and choose not to store personally identifiable information per field, and you can automate export or delete data requests.
-
Is Ninja Forms HIPAA compliant?
-
Ninja Forms can be and is used on sites that require HIPAA compliance, but overall compliance depends on factors outside the control of any WordPress form builder.
-
Can I send email with Ninja Forms?
-
Yes. Any number of emails can be sent to any number of recipients every time a form is submitted. Each email is customized in the form builder, including how the submission data is presented. Emails can include file attachments (with the File Uploads add-on), be sent conditionally, and carry a PDF copy of the submission.
-
Can I connect Ninja Forms to my CRM or email marketing service?
-
Yes, through add-ons for Mailchimp, Constant Contact, ActiveCampaign, HubSpot, Salesforce, Insightly, Zoho, and more, plus more than 1,000 other services through the Zapier add-on.
-
Are there form templates?
-
Yes. Nine templates are built into the plugin, and the template library on ninjaforms.com has 100 more, each downloadable as a file you import from Ninja Forms > Import / Export and edit like any form. Each template page lists the add-ons it uses, if any.
-
Can I import and export forms?
-
Yes. Forms and favorite fields can be exported and imported between sites from Ninja Forms > Import / Export.
-
Are Ninja Forms forms accessible?
-
Front-end forms are built to our internal standards based on WCAG 2, audited by external accessibility professionals, and regression tested on every update. It is ongoing work; you can read our full Accessibility Statement on ninjaforms.com.
Reviews
Contributors & Developers
“Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder” is open source software. The following people have contributed to this plugin.
Contributors
“Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder” has been translated into 30 locales. Thank you to the translators for their contributions.
Interested in development?
Browse the code, check out the SVN repository, or subscribe to the development log by RSS.
Changelog
3.15.4 (21 September 2026)
Security Enhancements:
- strengthen output escaping in admin submission edit screen; responsibly reported by Venkateswara Reddy Challa
- protect CSV export against object injection in stored submission data
- enforce server-side option validation for list fields
Bug Fixes:
- add CSS class setting to Hidden fields
- make Select Image field mobile responsive
- use relative paths for image URLs in Select Image field
- fix JavaScript error when deleting forms in dashboard
- resolve PHP warning for undefined reCAPTCHA settings key
- display form title correctly when heading level is unset
- return proper error when submission abilities reference nonexistent submission
- prevent fatal memory error on Get Help page with large debug logs
- silence PHP 8 warning from add-on update checker when store returns no record
3.15.3 (07 September 2026)
Security Enhancements:
- strengthen input validation for unserialize() operations
Bug Fixes:
- preserve newsletter action list selection when provider connection is temporarily unavailable
- encode special characters correctly in CSV submission exports
- allow optional and hidden Date/Time fields to pass validation
- keep rich text editor scrollbar visible and functional in all views
3.15.2 (31 August 2026)
Security Enhancements:
- enforce granular two-tier permission model in Abilities API, responsibly reported by ChinhNguyen
- neutralize shortcode brackets in IP address and referer URL merge tags, responsibly reported by Jakub Herman
- validate repeater child field entries against server-side definitions
- apply context-correct output escaping in legacy submissions admin
- ensure shortcode neutralization callback is accessible for array inputs
Bug Fixes:
- fix fatal error when Date/Time field is included in a CSV email attachment
- show correct Developer Mode status notice in form builder settings drawer
3.15.1 (24 August 2026)
Security Enhancements:
- strengthen input validation for list field option imports
Bug Fixes:
- allow non-Latin characters and special symbols in list field option values
- preserve HTML formatting in checkbox and radio list option labels after editing
- capture time values correctly when Date/Time field is inside a Repeater
- preserve user-authored HTML in rich text editor without restructuring on toggle
- preserve HTML comments in Email Message field through Source/Visual toggles
- keep heading-formatted text inside table cells in rich text editor
- preserve nested div elements in HTML field editor
- prevent editor from marking field as changed on initial load
- display rich text editor toolbar icons for logged-out users
- prevent fatal error when marketing feed data is corrupted
- delay Date/Time required validation until user finishes entering time
- make Date/Time field Hour and Minute placeholder text translatable
- resolve critical error on non-English sites running PHP 8+
- fix TypeError when Custom Input Mask contains only numbers
- show correct AI provider status when Ollama connector is configured
3.15.0 (12 August 2026)
Enhancements:
- add AI Form Builder: generate forms from natural language prompts via the Abilities API
Bug Fixes:
- fix typed signatures with periods appearing incomplete after switching fields
- prevent form from rendering multiple times when using “Append a Ninja Form” with other plugins
- allow terms list field to be set as required
3.14.12 (10 August 2026)
Bug Fixes:
- tables inserted via toolbar now have visible borders and padding
- preserve hand-coded table HTML in Email Message field
- resolve TypeError when nf-behavioral.js file is missing
- validation error on Time Only field now clears correctly
- required field asterisk displays correctly on multi-form pages
- form builder loads correctly when marketing filter is disabled
- repeatable fieldset data now displays in email summaries
Security Enhancements:
- strengthen SQL query parameter handling
3.14.11 (23 July 2026)
Bug Fixes:
- fix CSV export column alignment for fields placed after repeatable fieldsets
- preserve
,
, and
<
pre> tags in HTML field editor
– clear validation error on Time Only field when user corrects input
– fix ninja_forms_render_options filter breaking form validation
3.14.10 (20 July 2026)
Bug Fixes:
- fix anchor tag URLs breaking when merge tags are used as querystrings in HTML fields
- fix date field required validation not triggering for Date & Time mode
- fix {other:date} merge tag reporting dates in UTC instead of local timezone
Enhancements:
- add banner-led partner cards to Partner Apps & Services tab
Security Enhancements:
- protect against SQL injection in import settings key
- block unauthenticated shortcode execution; responsibly reported by Meher Sudhakar Abbireddi
3.14.9 (09 July 2026)
Bug Fixes:
- restore visibility of “Almost there…” heading in new-form drawer
- add descender allowance for typed signature fonts in PDF
Security Enhancements:
- protect against unauthorized multisite data deletion
- protect against stored XSS in Repeatable Fieldset
- protect against field metadata override
- protect against calc value injection in list fields
- protect against unauthorized access to submissions via block insertion
3.14.8 (230 June 2026)
Bug Fixes:
- fix merge tag picker falsely triggering for calculation tags with slash in name
- fix phone field truncating last digit when browser autofill includes country code
- fix PHP warning for array offset on null in Model.php
- fix opinionated styles CSS not loading for logged-out users
- fix Gutenberg block editor iframe not loading (add API version 3)
- fix personal data export failing with PHP fatal error in UserDataRequests.php
- fix invisible reCAPTCHA v2 not working due to block scope bug
- fix form builder sidebar not closing when screen width expands
- fix {fields_table} incorrectly including unchecked checkbox fields
3.14.7 (18 June 2026)
Bug Fixes:
- fix date field “default to current date” displaying wrong date with conditional logic
- fix date/date-time field value corruption when editing via submissions backend
- fix checkbox fields not being redacted from record submissions
- fix time display on single submission page for date/time fields
- fix decimal precision loss in calculations
Enhancements:
- increase default visible columns in legacy submissions from 5 to 10
- remove survey promo from admin
Security Enhancements:
- protect against PHP object injection in form import
3.14.6 (10 June 2026)
Bug Fixes:
- fix PHP warnings when retriggering emails from submissions page
- fix bulk export returning no results when selecting a single day
3.14.5 (19 May 2026)
Bug Fixes:
- fix Rich Text Editor content displaying as raw HTML in submissions modal
- fix HTML entity decoding in Rich Text Editor fields
- fix Quill Rich Text Editor inline text alignment not being preserved
- fix unordered list content being stripped in Quill Rich Text Editor
- fix ordered list items getting unwanted markup injected in Quill Rich Text Editor
- limit telemetry to admin only
3.14.4 (11 May 2026)
Bug Fixes:
- fix repeater field data showing as “Array” in email CSV attachments
- fix mixed content blocking CSV downloads
- fix CSV export with multiple repeater fields
- fix repeater fieldset data misalignment in CSV exports
- fix phone numbers with plus sign getting apostrophe prefix in CSV
- fix decimal precision loss in number fields
- fix form title showing blank for accessibility compliance
- fix Quill Rich Text Editor placeholder initialization
- fix merge tags with spaces in names not being recognized
- fix PHP 8.4 nullable type deprecation warnings
3.14.3 (29 April 2026)
Bug Fixes:
- fix Quill.js Rich Text Editor table functionality not working properly
- fix HTML being sanitized/stripped when saving Quill.js RTE content
- fix Quill.js CSS conflicts with certain add-ons
- fix ESC key removing HTML content from success messages with calculations
- fix PHP warning for undefined array key “payment_total_type”
- fix radio and checkbox field alignment for RTL languages
Enhancements:
- improve color contrast for form names on dashboard to meet WCAG 2.2 AA standards
- improve color contrast for “Add New” button on dashboard to meet WCAG AA standards
- add ARIA attributes, keyboard navigation, and focus styles to Quill.js RTE
3.14.2 (04 March 2026)
Bug Fixes:
- fix missing payment data and blank CSV issues in submission exports
- prevent premature deletion of submissions less than 24 hours old
- checkbox merge tags now display custom values instead of 1/0
- fix merge tag population when retriggering emails from Submissions page
- decode HTML entities for Rich Text Editor fields in CSV exports
- fix invalid date display in Dashboard for imported/duplicated forms
- fix calculation merge tags with extra text in hidden fields
Security Enhancements:
- protect block token/refresh endpoint against unauthorized access
- add capability check to render_callback for blocks
3.14.1 (2 February 2026)
Bug Fixes:
- fix drawer close button not working after merge tag insertion
- fix token visibility issue in submissions table block
- remove tabindex from radio lists for accessibility compliance
Enhancements:
- replace Summernote with Quill.js for Rich Text Editor
- improve star rating field accessibility sizing
Security Enhancements:
- protect against XSS in Success Message action
- block merge tag injection in repeater field processing
- harden blocks code against unauthorized access
3.14.0 (January 26, 2026)
- Features:*
- Add support for Abilities API
Bug Fixes:
– Prevent loading CDN font per GDPR rules
3.13.4 (January 14, 2026)
Bug Fixes:
– Check visibility to prevent post spoofing
3.13.3 (December 8, 2025)
Bug Fixes:
– Limit submission token generation
3.13.2 (November 25, 2025)
Bug Fixes:
– Prevent unserialization of user submitted values
3.13.1 (November 17, 2025)
Bug Fixes:
– Ensure submission block token valid only for given page
3.13.0 (October 27, 2025)
Features:
– NEW Signature field
Bug Fixes:
– Ensure opt-in popup can be dismissed
– Allow only ExtraDataHandlers into Submission metabox
– Require form id as integer
– Fix an accessibility issue with labels for HTML and Divider fields.
3.12.2.1 (December 15, 2025)
Bug Fixes:
– Limit submission token generation
3.12.2 (October 6, 2025)
Bug Fixes:
– fix undefined $outgoing
– accessibility fix to set autocomplete
– fix checkbox field calculation, was showing 0 when checked
3.12.1 (September 22, 2025)
Bug Fixes:
– Ensure nonce use in download and telemetry
3.12.0 (September 8, 2025)
Features:
– Add hCaptcha field
Bug Fixes:
– Ensure File Upload link in submissions table is clickable
3.11.1.1 (December 15, 2025)
Bug Fixes:
– Limit submission token generation
3.11.1 (August 20, 2025)
Bug Fixes:
– Prevent object wakeup from unserialization
3.11.0 (July 28 2025)
Features:
– Adds Cloudflare Turnstile CAPTCHA as a modern, privacy-friendly alternative to traditional CAPTCHAs.
– Adds configurable theme (light/dark/auto) and size options for Turnstile field.
– Improves accessibility with screen reader support for CAPTCHA challenges.
Bug Fixes:
– Fixes submission expiration failing on forms with 50+ fields processed in chunks.
– Fixes Summernote editor dropdown menus not displaying properly in certain themes.
– Fixes JavaScript errors in merge tags functionality with improved function binding.
– Fixes forced marketing email sending for late-reported opt-ins.
– Prevents Turnstile field from being used within repeatable fieldsets.
Performance:
– Replaces full Summernote library with lightweight Summernote Lite version.
– Removes unnecessary Bootstrap dependencies reducing CSS by 4,616 lines.
– Reduces total codebase by ~12,000 lines for improved page load times.
Other:
– Updates build system to Node.js 20 for better compatibility.
– Improves CSS build process with proper source map generation.
– Adds comprehensive E2E tests for RTE settings and Turnstile integration.
– Updates test folder structure for better organization.
3.10.4.1 (December 15, 2025)
Bug Fixes:
– Limit submission token generation
3.10.4 (July 7 2025)
Bug Fixes:
– Fixes value issue with time_only date field.
– Fixes issue with common value for date/time field in repeatable field sets.
– Fixes incorrect value for single checkbox merge tags.
3.10.3 (June 30 2025)
Bug Fixes:
– Fixes rounding error for number fields.
– Resolves a hang on save in certain circumstances.
– Removes an unused uinstall hook method.
Misc:
– Updates several npm dependencies.
3.10.2.2 (June 24 2025)
Security Fixes:
– Prevent script tag injection into templates via block prefixes. Thanks to Asaf Mozes for responsibly reporting this security issue.
Misc:
– Concatenates the readme changelog to prevent going over the WP.org word limit.
3.10.2.1 (June 19 2025)
Bug Fixes:
– Fixes an issue with HelpText causing a collision on save with Conditional Logic add-on.
– Fixes an issue with HelpText causing a collision on save with Stripe add-on.
– Fixes an incorrect icon.
3.10.2 (June 18 2025)
Bug Fixes:
– Fixes an issue with the help text for repeater fields.
– Fixes an issue with form processing being slow on forms with many fields.
– Fixes an issue with translations on the date picker field.
– Fixes an issue with saving repeater fields on duplicated forms.
– Fixes an issue with date/time field in repeatable fieldsets.
– Fixes an issue with repeatable field help text.
Features:
– Improved drawer styles with a refreshed look.
3.10.1 (14 April 2025)
Bug Fixes:
– Prevent stored XSS in various fields
3.10.0 (26 March 2025)
Features
– Add a Google Analytics 4 Action.
Bug Fixes:
– Fix an error related to using calculations in payment gateway actions.
– Fix an error related to File Uploads merge tags.
– Required errors should no longer trigger on removed repeater sets.
3.9.2.1 (December 15, 2025)
Bug Fixes:
– Limit submission token generation
3.9.2 (12 March 2025)
Bug Fixes:
– List fields can now be used for determining the payment total in payment collection actions.
– Fixed PHP warnings when using PHP 8.
– Fixed an issue with the Password confirm field.
– Ensure that time field IDs are unique.
– Fixed an issue with the opt-in email.
3.9.1 (24 February 2025)
Features:
– Allows repeatable fieldsets to be editable in the Submissions page.
Bug Fixes:
– Numbers over 10 billion no longer cause validation errors.
Other:
– Add add-on communication status logs to the System Status page.
– Add additional data points for telemetry.
– Build file updates.
3.9.0 (10 February 2025)
Features:
– New user onboarding
– Add delete forms WP-CLI command
Other:
– JS library updates
3.8.25.1 (December 15, 2025)
Bug Fixes:
– Limit submission token generation
3.8.25 (27 January 2025)
Bug Fixes:
– ensure form id value is numeric in shortcodes; responsibly reported by Peter Thaleikis via Wordfence
3.8.24 (21 January 2025)
Bug Fixes:
– Fixed an accessibility issue related to text contrast when using opinionated styles.
– Fixed accessibility errors related to missing field descriptions.
3.8.23 (16 December 2024)
Bug Fixes:
– Ensure only permitted form previews are available to a given user
3.8.22 (10 December 2024)
Bug Fixes:
– Update timing for widget loading on page builders
3.8.21 (09 December 2024)
Bug Fixes:
– Update timing to load translations after init
3.8.20 (26 November 2024)
Bug Fixes:
– Sanitize calculations input
3.8.19 (18 November 2024)
Bug Fixes:
– Remove legacy duplicate field cleanup from render loop
– Convert HTML encoded characters on submissions page
– Verify we are on an nf_sub post type before loading terms list
Other:
– Add behavioural telemetry data
– Add diagnost information to system status
– Update end-to-end test
3.8.18 (23 October 2024)
Bug Fixes:
– Prevent script in Favorite Fields
– Prevent script in calculation name
– Update field HTML for improved accessibility
3.8.17 (01 October 2024)
Bug Fixes:
– Ensure help text is mobile responsive for single checkbox, single line text, paragraph text
– Prevent non-required blank email field failing validation
– Replace hard-coded strings for translation
3.8.16 (17 September 2024)
Bug Fixes:
– Ensure sanitation of email address for merge tag
– Prevent maintenance mode interception
3.8.15 (10 September 2024)
Bug Fixes:
– Ensure “From Address” email warning shows
– Prevent JS error on datepicker inside fieldset repeater
Other:
– Add PHP compatibility tests
– Add usage telemetry data
3.8.14 (03 September 2024)
Bug Fixes:
– Ensure submissions page form filter finds form titles
– Provide PHP 7.4 support for jsonSerialize method call
– Ensure hCaptcha field functions when safe-listed
Other:
– JS library updates
3.8.13 (26 August 2024)
Bug Fixes:
– Prevent mouse scroll wheel from updating currency masked fields – Issues
– Resolved an error where required field validation was not always firing properly on masked fields
– Correct list value tooltip styling error for Safari and Firefox
– A repeatable fieldset that has triggered a required error maintains the error when the repeatable fieldset is deleted
– First Repeated Fieldset’s data is not captured when deleting one of the sets
– Ensure form displays in WP Bakery without needing to refresh page
Other:
– Correct deprecation warnings in SCSS files
– Library updates: The updates affect the structure of the components – mounting and data flow – and the blocks and styling
– Set security resolution for Axios as a dependency of our dependencies
– Reorganize cypress tests
– Add unit tests
– Add initial usage data to telemetry
– High impact accessibility factor corrections
3.8.12 (13 August 2024)
Bug Fixes:
– Validate label settings on change event
3.8.11 (07 August 2024)
Bug Fixes:
– Prevent unused key values on Survey Promo link
3.8.10 (05 August 2024)
Bug Fixes:
– Submissions Table block not displayed on published page on some themes
– Phone field not disabled when expected
– calc value option of list fields not set with help text
– Submission page tooltip icon not displayed on environment not using conventional plugins folder path
Other:
– @wordpress dependencies updates
3.8.9 (29 July 2024)
Bug Fixes:
– Submissions Block not showing all submissions data.
– Fix deleted repeater field missing required data halting submission
– Add “Administration” section for all fields
– Add missing check_admin_referrer parameter
– Sort by Shortcode on forms page as numerical
– Accessibility: update field description and screen readers
– Enable hidden fields in the unique field
– Fix display Form iFrame in Elementor editor
Other:
– Refactor telemetry dispatch to add unit tests
3.8.8 (22 July 2024)
Bug Fixes:
– Ensure submissions page and Append Ninja Form block are visible on WP 6.6
Other:
– Update readme ‘tested up to’ and ‘requires at least’
3.8.7 (15 July 2024)
Bug Fixes:
– prevent licensing CSRF
3.8.6 (8 July 2024)
Bug Fixes:
– prevent deprecated false to array notice in preview
– prevent undefined array key ‘plugin’ warning in class extension updater
– prevent invalid date error when setting default date format to “j F Y” on non-English languages
Other:
– automated test for version number
– update wordpress library packages
– add documentation links to settings in the form builder
3.8.5 (13 June 2024)
Bug Fixes:
– Protect preview query parameters
3.8.4 (28 May 2024)
Bug Fixes:
– Ensure first name field populates only first, not full, name
– Enable personally identifiable setting outside of dev mode
– Add merge tags ‘other’ for random, year, month, day
Other:
– Set version resolutions for certain packages
– Improve discoverability of available actions
– Update marketing feed
3.8.3 (1 May 2024)
Bug Fixes:
– Ensure fieldset repeaters function on index values ending in 0 (10, 20, etc)
Other:
– Update tests to run on 6.5.2
3.8.2 (29 March 2024)
Bug Fixes:
– Allow default span tags in form labels
3.8.1 (27 March 2024)
Bug Fixes:
– Ensure submission exports can’t be called from any unintended pages
– Prevent injected scripts into submit button and advanced labels
– Prevent XSS on image lists
Other:
– Update add-on images
3.8.0 (20 February 2024)
Features:
– Add ‘referer URL’ merge tag
Bug Fixes:
– Prevent display error when date format is not set
– Ensure current date stored when default is not modified
– Ensure translation of date strings
Other:
– Add user help text and images
– Add automated tests
