=== Ninja Forms - The Contact Form Builder That Grows With You ===
Contributors: wpninjasllc, kstover, jameslaws, kbjohnson90, klhall1987, krmoorhouse, jmcelhaney, wpnzach, ericwindhamsd, mrpritchett, stuartsequeira, nahuelmahe
Tags: forms, form builder, contact form, lead form, registration form

Requires at least: 6.8
Tested up to: 7.0
Stable tag: 3.15.0
Requires PHP: 7.4

License: GPLv2 or later

The 100% beginner friendly WordPress form builder. Drag & drop form fields to build beautiful, professional contact forms in minutes.

== Description ==

= Forms that grow with your business =
As one of WordPress’ oldest form builders, we’re proud to serve users from around the world, from all walks of life, and from different stages of online growth. From the small businesses and local nonprofits that make up the core Ninja Forms user base to universities, hospitals, and even Fortune 500 companies, we’ll scale with you from startup to wherever you’re aiming for.

We’re committed to offering as many free, open source tools as we can get away with to back you up in the extremely price-conscious early days. As you grow, pick and choose only the premium features you need as you need them. We’ll grow with you from there for as far as you want to take us.

We’re also committed to respecting your privacy and time. No unsolicited emails or aggressive marketing. No paywalling basic features or scraping private data. We offer a fully staffed team of support experts and a comprehensive library of plugin documentation for all users, free and paid, to help keep you collecting the submissions that move your business forward.

We look forward to seeing where you’ll take us!

= All the basics without the paywalls =

When you’re starting out, even little expenses add up quickly. That’s why Ninja Forms core will always be free and open source. It’s why we try to offer as much in core as we can to cover your basic needs at no cost. Here’s a peek at some of what core has to offer.

**Form Building Features**
- 24+ FREE drag-and-drop form fields
- Customize fields with default values, specialty text, and much more
- Favorite and reuse any customized field
- Calculations: assign values to fields and calculate totals
- Merge tag system for pre-populating fields and passing field data between forms
- Configurable per-field submission storage for easy GDPR compliance
- Email notifications on submission (as many as you like, free!)
- Customizable success messages (supports links and downloads!)
- Redirect to new page after submission
- Customize callbacks to WP action hooks on submit
- Spam Protection: full integration with Google reCAPTCHA & Akismet
- Configurable form display settings
- Form restriction settings
- Unique field validation
- Unlimited forms & submissions
- Form Templates
- Form Import / Export
- Shareable forms (share the form via link without it being attached to a page)
- No aggressive marketing, pushy review asks, constant popups, or unsolicited emails
- Responsive and mobile friendly
- SEO friendly

**Submission Management Features**
- Unlimited FREE submissions
- Configurable submissions display
- Search and filter by field
- Search and filter by submitted value
- Search and filter by submission date
- Edit submitted values
- Refire any email notification from any submission
- Export to CSV
- Bulk submissions export
- Automated WordPress GDPR integration for export & delete data requests
- Mark fields as PII and selectively not store specific data
- All submissions stored locally on YOUR server only unless you specify otherwise
- We never see or collect your field or submission data

**Dozens of buildable form types**
- Contact form
- Email form
- Calculation form
- Lead form
- Quiz form
- Mortgage or Payment Calculator forms
- Quote and Cost Calculator forms
- Health and Fitness Calculator forms
- Polling form
- Survey form
- Lead Magnet Download form
- Event Registration form
- Sales form
- Appointment form
- Booking form
- Entry form
- Order form
- Lesson Plan form
- Job Application form
- RSVP form
- Request form
- Feedback form
- Support form
- GDPR Export or Delete Data Request forms
…and many more!

**You get more than just a plugin**
- Fully documented
- Regular updates
- FREE technical support
- Privacy and security minded
- Accessibility focused
- Translated into 24+ languages by the WordPress Polyglots team
- Long term partners of WPML for even more translations!
- Ecosystem aware: we know it’s not just you and Ninja Forms. We do our best to communicate and play nice with others.

= Pick and choose just what you need as you need it =

As you start to grow, so does what you need out of your forms. But there’s no need to dive into the deep end right away and spend more than is practical. All premium features are contained in add-ons to the core form builder and can be purchased independently. When you find yourself wanting just one or two things, you can grab just what you need without paying for extras.

When you’re ready for more, our [membership plans](https://ninjaforms.com/pricing/?utm_source=WordPress.org&utm_medium=Plugin+readme&utm_campaign=Feature+List&utm_content=Pricing) bundle popular features together in budget friendly packages.

Select from 40+ add-ons across multiple categories:

**Advanced Form Features**
- [Advanced Datepicker](https://ninjaforms.com/extensions/advanced-datepicker/?utm_source=WordPress.org&utm_medium=Plugin+readme&utm_campaign=Feature+List&utm_content=Advanced+Datepicker)
- [Conditional Logic](https://ninjaforms.com/extensions/conditional-logic/?utm_source=WordPress.org&utm_medium=Plugin+readme&utm_campaign=Feature+List&utm_content=Conditional+Logic)
- [File Uploads](https://ninjaforms.com/extensions/file-uploads/?utm_source=WordPress.org&utm_medium=Plugin+readme&utm_campaign=Feature+List&utm_content=File+Uploads)
- [Layout & Styles](https://ninjaforms.com/extensions/layout-styles/?utm_source=WordPress.org&utm_medium=Plugin+readme&utm_campaign=Feature+List&utm_content=Layout+and+Styles)
- [Multi Step Forms](https://ninjaforms.com/extensions/multi-step-forms/?utm_source=WordPress.org&utm_medium=Plugin+readme&utm_campaign=Feature+List&utm_content=Multi+Step+Forms)
- [Save Progress](https://ninjaforms.com/extensions/save-progress/?utm_source=WordPress.org&utm_medium=Plugin+readme&utm_campaign=Feature+List&utm_content=Save+Progress)
- [User Analytics](https://ninjaforms.com/extensions/user-analytics/?utm_source=WordPress.org&utm_medium=Plugin+readme&utm_campaign=Feature+List&utm_content=User+Analytics)
- [User Management](https://ninjaforms.com/extensions/user-management/?utm_source=WordPress.org&utm_medium=Plugin+readme&utm_campaign=Feature+List&utm_content=User+Management)

**Submissions Extended**
- [Excel Export](https://ninjaforms.com/extensions/excel-export/?utm_source=WordPress.org&utm_medium=Plugin+readme&utm_campaign=Feature+List&utm_content=Excel+Export)
- [Front End Posting](https://ninjaforms.com/extensions/front-end-posting/?utm_source=WordPress.org&utm_medium=Plugin+readme&utm_campaign=Feature+List&utm_content=Front+End+Posting)
- [PDF Form Submissions](https://ninjaforms.com/extensions/pdf-form-submission/?utm_source=WordPress.org&utm_medium=Plugin+readme&utm_campaign=Feature+List&utm_content=PDF+Form+Submission)
- [Scheduled Submissions Export](https://ninjaforms.com/extensions/scheduled-submissions-export/?utm_source=WordPress.org&utm_medium=Plugin+readme&utm_campaign=Feature+List&utm_content=Scheduled+Submission+Export)

**Accept Payments**
- [Authorize.net](https://ninjaforms.com/extensions/authorize-net/?utm_source=WordPress.org&utm_medium=Plugin+readme&utm_campaign=Feature+List&utm_content=Authorize)
- [Elavon](https://ninjaforms.com/extensions/elavon/?utm_source=WordPress.org&utm_medium=Plugin+readme&utm_campaign=Feature+List&utm_content=Elavon)
- [PayPal official partner](https://ninjaforms.com/extensions/paypal-checkout/?utm_source=WordPress.org&utm_medium=Plugin+readme&utm_campaign=Feature+List&utm_content=PayPal)
- [Recurly](https://ninjaforms.com/extensions/recurly/?utm_source=WordPress.org&utm_medium=Plugin+readme&utm_campaign=Feature+List&utm_content=Recurly)
- [Stripe](https://ninjaforms.com/extensions/stripe/?utm_source=WordPress.org&utm_medium=Plugin+readme&utm_campaign=Feature+List&utm_content=Stripe)

**Email Marketing**
- [Active Campaign](https://ninjaforms.com/extensions/active-campaign/?utm_source=WordPress.org&utm_medium=Plugin+readme&utm_campaign=Feature+List&utm_content=Active+Campaign)
- [AWeber](https://ninjaforms.com/extensions/aweber/?utm_source=WordPress.org&utm_medium=Plugin+readme&utm_campaign=Feature+List&utm_content=AWeber)
- [Campaign Monitor](https://ninjaforms.com/extensions/campaign-monitor/?utm_source=WordPress.org&utm_medium=Plugin+readme&utm_campaign=Feature+List&utm_content=Campaign+Monitor)
- [CleverReach](https://ninjaforms.com/extensions/cleverreach/?utm_source=WordPress.org&utm_medium=Plugin+readme&utm_campaign=Feature+List&utm_content=CleverReach)
- [Constant Contact](https://ninjaforms.com/extensions/constant-contact/?utm_source=WordPress.org&utm_medium=Plugin+readme&utm_campaign=Feature+List&utm_content=Constant+Contact)
- [ConvertKit](https://ninjaforms.com/extensions/convertkit/?utm_source=WordPress.org&utm_medium=Plugin+readme&utm_campaign=Feature+List&utm_content=ConvertKit)
- [EmailOctopus](https://ninjaforms.com/extensions/emailoctopus/?utm_source=WordPress.org&utm_medium=Plugin+readme&utm_campaign=Feature+List&utm_content=EmailOctopus)
- [Emma](https://ninjaforms.com/extensions/emma/?utm_source=WordPress.org&utm_medium=Plugin+readme&utm_campaign=Feature+List&utm_content=Emma)
- [Mailchimp](https://ninjaforms.com/extensions/mailchimp/?utm_source=WordPress.org&utm_medium=Plugin+readme&utm_campaign=Feature+List&utm_content=Mailchimp)
- [MailPoet](https://ninjaforms.com/extensions/mailpoet/?utm_source=WordPress.org&utm_medium=Plugin+readme&utm_campaign=Feature+List&utm_content=MailPoet)

**CRMs**
- [Capsule](https://ninjaforms.com/extensions/capsule-crm/?utm_source=WordPress.org&utm_medium=Plugin+readme&utm_campaign=Feature+List&utm_content=Capsule)
- [CiviCRM](https://ninjaforms.com/extensions/civicrm/?utm_source=WordPress.org&utm_medium=Plugin+readme&utm_campaign=Feature+List&utm_content=CiviCRM)
- [HubSpot *official partners](https://ninjaforms.com/extensions/hubspot-crm/?utm_source=WordPress.org&utm_medium=Plugin+readme&utm_campaign=Feature+List&utm_content=HubSpot)
- [Insightly](https://ninjaforms.com/extensions/insightly-crm/?utm_source=WordPress.org&utm_medium=Plugin+readme&utm_campaign=Feature+List&utm_content=Insightly)
- [OnePageCRM](https://ninjaforms.com/extensions/onepage-crm/?utm_source=WordPress.org&utm_medium=Plugin+readme&utm_campaign=Feature+List&utm_content=OnePageCRM)
- [PipelineDeals](https://ninjaforms.com/extensions/pipelinedeals-crm/?utm_source=WordPress.org&utm_medium=Plugin+readme&utm_campaign=Feature+List&utm_content=Pipeline)
- [Salesforce](https://ninjaforms.com/extensions/salesforce-crm/?utm_source=WordPress.org&utm_medium=Plugin+readme&utm_campaign=Feature+List&utm_content=Salesforce)
- [Zoho CRM](https://ninjaforms.com/extensions/zoho-crm/?utm_source=WordPress.org&utm_medium=Plugin+readme&utm_campaign=Feature+List&utm_content=Zoho+CRM)

**Notifications & Workflow**
- [ClickSend SMS](https://ninjaforms.com/extensions/clicksend-sms/?utm_source=WordPress.org&utm_medium=Plugin+readme&utm_campaign=Feature+List&utm_content=ClickSend)
- [Help Scout](https://ninjaforms.com/extensions/help-scout/?utm_source=WordPress.org&utm_medium=Plugin+readme&utm_campaign=Feature+List&utm_content=Help+Scout)
- [Slack](https://ninjaforms.com/extensions/slack/?utm_source=WordPress.org&utm_medium=Plugin+readme&utm_campaign=Feature+List&utm_content=Slack)
- [Trello](https://ninjaforms.com/extensions/trello/?utm_source=WordPress.org&utm_medium=Plugin+readme&utm_campaign=Feature+List&utm_content=Trello)
- [Twilio SMS](https://ninjaforms.com/extensions/twilio-sms/?utm_source=WordPress.org&utm_medium=Plugin+readme&utm_campaign=Feature+List&utm_content=Twilio)

**Automation**
- [Webhooks](https://ninjaforms.com/extensions/webhooks/?utm_source=WordPress.org&utm_medium=Plugin+readme&utm_campaign=Feature+List&utm_content=Webhooks)
- [Zapier official partners](https://ninjaforms.com/extensions/zapier/?utm_source=WordPress.org&utm_medium=Plugin+readme&utm_campaign=Feature+List&utm_content=Zapier)


The sky’s the limit on what you can build with add-on features, but here are some of the most popular forms we see in the wild:

- Payment forms
- Donation forms
- Signup forms
- User Registration form
- Newsletter forms
- CRM forms
- User Registration form
- Login forms
- Upload forms
- Google Sheets forms
- Post Creation forms


== Notes ==

We've been standing by our product and our users for over a decade, working to make your experience the best it can be. We're one of the only form builders around that offers support for all users, whether you've made a purchase or not.

If you have any questions or suggestions, we’re always happy to hear from you. We have a dedicated support team with team members that span four continents standing by to help with technical questions every Monday to Friday. General feedback is always welcome too. It’s a big part of how we figure out what to do next, so chime in any time!

[You’ll always have a direct line to us right here!](https://ninjaforms.com/contact/?utm_source=WordPress.org&utm_medium=Plugin+readme&utm_campaign=Support)

== Additional Branding and Trademark Information ==

Ninja Forms&reg; is a registered trademark of Saturday Drive INC. We are a WordPress forms or WP forms builder, not to be confused with the independent WPForms brand for WordPress. All official Ninja Forms [add-ons](https://ninjaforms.com/add-ons/?utm_source=WordPress&utm_medium=readme) and [memberships](https://ninjaforms.com/pricing/?utm_source=WordPress&utm_medium=readme) can be found on our official website, ninjaforms.com.

== Frequently Asked Questions ==

= Do I have to pay to see my form submissions? =
No, Ninja Forms does not paywall submissions. You can view, edit, export, and more from Ninja Forms > Submissions with the core, free plugin. No purchase necessary.

= What free form fields are included in the form builder? =
- Date/Time
- Single Checkbox
- Checkbox List
- Radio List
- Select List
- Multi-Select List
- Select Image List
- Single Line Text
- Paragraph Text
- Submit
- First Name
- Last Name
- Email Address
- Phone Number
- Address
- City
- US States
- Country
- Zip Code
- HTML
- Divider
- Repeatable Fieldset
- Confirm
- Hidden
- Number
- reCAPTCHA
- Anti Spam
- Star Rating


= Is Ninja Forms GDPR compliant? =

Yes. All user submitted data is stored locally on your server only, unless you expressly configure the plugin to send it elsewhere, for example via an email action. We never see or collect any user submitted data, nor do we act as Data Controllers or Data Processors per GDPR Article 4 for any data submitted by users of the forms you create. Your forms can be configured to flag and/or not record Personally Identifiable Information (PII) on a per form basis. If you do collect PII using Ninja Forms, you can [automate export or delete data requests](https://ninjaforms.com/docs/gdpr-compliance-ninja-forms/?utm_source=WordPress.org&utm_medium=Plugin+readme&utm_campaign=FAQ&utm_content=GDPR).

= Is Ninja Forms HIPAA compliant? =

Ninja Forms can be and is used on sites that require HIPAA compliance, but overall compliance depends on factors outside of the control of any WordPress form builder.

= Can I send email with Ninja Forms? =

Yes! Any number of emails can be sent to any number of recipients anytime a contact form is submitted. Every email triggered by a contact form submission can be customized in the form builder, including the presentation of the form submission data. Attachments are supported (and can include [file uploads](https://ninjaforms.com/extensions/file-uploads/?utm_source=WordPress.org&utm_medium=Plugin+readme&utm_campaign=FAQ&utm_content=File+Uploads) from the form). These form emails can also be [sent conditionally](https://ninjaforms.com/extensions/conditional-logic/?utm_source=WordPress.org&utm_medium=Plugin+readme&utm_campaign=FAQ&utm_content=Conditional+Logic) based on specific triggers, and can be set up to include a [PDF copy](https://ninjaforms.com/extensions/pdf-form-submission/?utm_source=WordPress.org&utm_medium=Plugin+readme&utm_campaign=FAQ&utm_content=PDF+Form+Submission) of the form.

= What types of forms can I build with Ninja Forms? =

- Contact form
- Email form
- Calculation form
- Lead form
- Quiz form
- Mortgage or Payment Calculator forms
- Quote and Cost Calculator forms
- Health and Fitness Calculator forms
- Polling form
- Survey form
- Lead Magnet Download form
- Event Registration form
- Sales form
- Appointment form
- Booking form
- Entry form
- Order form
- Lesson Plan form
- Job Application form
- RSVP form
- Request form
- Feedback form
- Support form
- Export or Delete Data Request forms
- Payment forms
- Donation forms
- Signup form
- User Registration form
- Newsletter forms
- CRM forms
- Conditional lead form
- Scorable lead form
- User Registration form
- Paid registration form
- Login forms
- Upload forms
- Google Sheets forms
- Post Creation forms
…and many more!

= Can I connect Ninja Forms to my CRM or Email Marketing service? =

Almost certainly. The contact form builder integrates directly with over a dozen email marketing and CRM services including MailChimp, Constant Contact, ActiveCampaign, HubSpot, Salesforce, Insightly, Zoho, and many more.

Ninja Forms also integrates with 1,000+ other popular services through our Zapier integration.

= Can I import / export forms and fields with Ninja Forms? =

Yes, both forms and custom fields (any field you customize and designate as a favorite field) can be exported and imported between sites.


== Installation ==
This section describes how to install the plugin and get it working.
1. Upload the `ninja-forms` plugin folder to your `/wp-content/plugins/` directory
2. Activate the plugin through the 'Plugins' menu in WordPress
3. Visit the 'Ninja Forms' menu item in your admin sidebar

[Further Installation Documentation](https://ninjaforms.com/docs/installation/?utm_source=WordPress&utm_medium=readme)

== Screenshots ==
1. The most intuitive and beautiful form building experience
2. Field Options
3. Emails and Actions
4. Advanced Settings
5. Beautiful Forms Every Time!

== Upgrade Notice ==
= 3.15.0 (12 August 2026) =

*Enhancements:*

- add AI Form Builder: generate forms from natural language prompts via the Abilities API

*Bug Fixes:*

- fix typed signatures with periods appearing incomplete after switching fields
- prevent form from rendering multiple times when using "Append a Ninja Form" with other plugins
- allow terms list field to be set as required

== Changelog ==
= 3.15.0 (12 August 2026) =

*Enhancements:*

- add AI Form Builder: generate forms from natural language prompts via the Abilities API

*Bug Fixes:*

- fix typed signatures with periods appearing incomplete after switching fields
- prevent form from rendering multiple times when using "Append a Ninja Form" with other plugins
- allow terms list field to be set as required

= 3.14.12 (10 August 2026) =

*Bug Fixes:*

- tables inserted via toolbar now have visible borders and padding
- preserve hand-coded table HTML in Email Message field
- resolve TypeError when nf-behavioral.js file is missing
- validation error on Time Only field now clears correctly
- required field asterisk displays correctly on multi-form pages
- form builder loads correctly when marketing filter is disabled
- repeatable fieldset data now displays in email summaries

*Security Enhancements:*

- strengthen SQL query parameter handling

= 3.14.11 (23 July 2026) =

*Bug Fixes:*

- fix CSV export column alignment for fields placed after repeatable fieldsets
- preserve <br>, <hr>, and <pre> tags in HTML field editor
- clear validation error on Time Only field when user corrects input
- fix ninja_forms_render_options filter breaking form validation

= 3.14.10 (20 July 2026) =

*Bug Fixes:*

- fix anchor tag URLs breaking when merge tags are used as querystrings in HTML fields
- fix date field required validation not triggering for Date & Time mode
- fix {other:date} merge tag reporting dates in UTC instead of local timezone

*Enhancements:*

- add banner-led partner cards to Partner Apps & Services tab

*Security Enhancements:*

- protect against SQL injection in import settings key
- block unauthenticated shortcode execution; responsibly reported by Meher Sudhakar Abbireddi

= 3.14.9 (09 July 2026) =

*Bug Fixes:*

- restore visibility of "Almost there..." heading in new-form drawer
- add descender allowance for typed signature fonts in PDF

*Security Enhancements:*

- protect against unauthorized multisite data deletion
- protect against stored XSS in Repeatable Fieldset
- protect against field metadata override
- protect against calc value injection in list fields
- protect against unauthorized access to submissions via block insertion

= 3.14.8 (230 June 2026) =

*Bug Fixes:*

- fix merge tag picker falsely triggering for calculation tags with slash in name
- fix phone field truncating last digit when browser autofill includes country code
- fix PHP warning for array offset on null in Model.php
- fix opinionated styles CSS not loading for logged-out users
- fix Gutenberg block editor iframe not loading (add API version 3)
- fix personal data export failing with PHP fatal error in UserDataRequests.php
- fix invisible reCAPTCHA v2 not working due to block scope bug
- fix form builder sidebar not closing when screen width expands
- fix {fields_table} incorrectly including unchecked checkbox fields

= 3.14.7 (18 June 2026) =

*Bug Fixes:*

- fix date field "default to current date" displaying wrong date with conditional logic
- fix date/date-time field value corruption when editing via submissions backend
- fix checkbox fields not being redacted from record submissions
- fix time display on single submission page for date/time fields
- fix decimal precision loss in calculations

*Enhancements:*

- increase default visible columns in legacy submissions from 5 to 10
- remove survey promo from admin

*Security Enhancements:*

- protect against PHP object injection in form import

= 3.14.6 (10 June 2026) =

*Bug Fixes:*

- fix PHP warnings when retriggering emails from submissions page
- fix bulk export returning no results when selecting a single day

= 3.14.5 (19 May 2026) =

*Bug Fixes:*

- fix Rich Text Editor content displaying as raw HTML in submissions modal
- fix HTML entity decoding in Rich Text Editor fields
- fix Quill Rich Text Editor inline text alignment not being preserved
- fix unordered list content being stripped in Quill Rich Text Editor
- fix ordered list items getting unwanted markup injected in Quill Rich Text Editor
- limit telemetry to admin only

= 3.14.4 (11 May 2026) =

*Bug Fixes:*

- fix repeater field data showing as "Array" in email CSV attachments
- fix mixed content blocking CSV downloads
- fix CSV export with multiple repeater fields
- fix repeater fieldset data misalignment in CSV exports
- fix phone numbers with plus sign getting apostrophe prefix in CSV
- fix decimal precision loss in number fields
- fix form title showing blank for accessibility compliance
- fix Quill Rich Text Editor placeholder initialization
- fix merge tags with spaces in names not being recognized
- fix PHP 8.4 nullable type deprecation warnings

= 3.14.3 (29 April 2026) =

*Bug Fixes:*

- fix Quill.js Rich Text Editor table functionality not working properly
- fix HTML being sanitized/stripped when saving Quill.js RTE content
- fix Quill.js CSS conflicts with certain add-ons
- fix ESC key removing HTML content from success messages with calculations
- fix PHP warning for undefined array key "payment_total_type"
- fix radio and checkbox field alignment for RTL languages

*Enhancements:*

- improve color contrast for form names on dashboard to meet WCAG 2.2 AA standards
- improve color contrast for "Add New" button on dashboard to meet WCAG AA standards
- add ARIA attributes, keyboard navigation, and focus styles to Quill.js RTE

= 3.14.2 (04 March 2026) =

*Bug Fixes:*

- fix missing payment data and blank CSV issues in submission exports
- prevent premature deletion of submissions less than 24 hours old
- checkbox merge tags now display custom values instead of 1/0
- fix merge tag population when retriggering emails from Submissions page
- decode HTML entities for Rich Text Editor fields in CSV exports
- fix invalid date display in Dashboard for imported/duplicated forms
- fix calculation merge tags with extra text in hidden fields

*Security Enhancements:*

- protect block token/refresh endpoint against unauthorized access
- add capability check to render_callback for blocks

= 3.14.1 (2 February 2026) =

*Bug Fixes:*

- fix drawer close button not working after merge tag insertion
- fix token visibility issue in submissions table block
- remove tabindex from radio lists for accessibility compliance

*Enhancements:*

- replace Summernote with Quill.js for Rich Text Editor
- improve star rating field accessibility sizing

*Security Enhancements:*

- protect against XSS in Success Message action
- block merge tag injection in repeater field processing
- harden blocks code against unauthorized access

= 3.14.0 (January 26, 2026) =
* Features:*
- Add support for Abilities API

*Bug Fixes:*
- Prevent loading CDN font per GDPR rules

= 3.13.4 (January 14, 2026) =
*Bug Fixes:*
- Check visibility to prevent post spoofing

= 3.13.3 (December 8, 2025) =
*Bug Fixes:*
- Limit submission token generation

= 3.13.2 (November 25, 2025) =
*Bug Fixes:*
- Prevent unserialization of user submitted values

= 3.13.1 (November 17, 2025) =
*Bug Fixes:*
- Ensure submission block token valid only for given page

= 3.13.0 (October 27, 2025) =
*Features:*
- NEW Signature field

*Bug Fixes:*
- Ensure opt-in popup can be dismissed
- Allow only ExtraDataHandlers into Submission metabox
- Require form id as integer
- Fix an accessibility issue with labels for HTML and Divider fields.

= 3.12.2.1 (December 15, 2025) =
*Bug Fixes:*
- Limit submission token generation

= 3.12.2 (October 6, 2025) =
*Bug Fixes:*
- fix undefined $outgoing
- accessibility fix to set autocomplete
- fix checkbox field calculation, was showing 0 when checked

= 3.12.1 (September 22, 2025) =
*Bug Fixes:*
- Ensure nonce use in download and telemetry

= 3.12.0 (September 8, 2025) =
*Features:*
- Add hCaptcha field

*Bug Fixes:*
- Ensure File Upload link in submissions table is clickable

= 3.11.1.1 (December 15, 2025) =
*Bug Fixes:*
- Limit submission token generation

= 3.11.1 (August 20, 2025) =
*Bug Fixes:*
- Prevent object wakeup from unserialization

= 3.11.0 (July 28 2025) =
*Features:*
- Adds Cloudflare Turnstile CAPTCHA as a modern, privacy-friendly alternative to traditional CAPTCHAs.
- Adds configurable theme (light/dark/auto) and size options for Turnstile field.
- Improves accessibility with screen reader support for CAPTCHA challenges.

*Bug Fixes:*
- Fixes submission expiration failing on forms with 50+ fields processed in chunks.
- Fixes Summernote editor dropdown menus not displaying properly in certain themes.
- Fixes JavaScript errors in merge tags functionality with improved function binding.
- Fixes forced marketing email sending for late-reported opt-ins.
- Prevents Turnstile field from being used within repeatable fieldsets.

*Performance:*
- Replaces full Summernote library with lightweight Summernote Lite version.
- Removes unnecessary Bootstrap dependencies reducing CSS by 4,616 lines.
- Reduces total codebase by ~12,000 lines for improved page load times.

*Other:*
- Updates build system to Node.js 20 for better compatibility.
- Improves CSS build process with proper source map generation.
- Adds comprehensive E2E tests for RTE settings and Turnstile integration.
- Updates test folder structure for better organization.

= 3.10.4.1 (December 15, 2025) =
*Bug Fixes:*
- Limit submission token generation

= 3.10.4 (July 7 2025) =
*Bug Fixes:*
- Fixes value issue with time_only date field.
- Fixes issue with common value for date/time field in repeatable field sets.
- Fixes incorrect value for single checkbox merge tags.

= 3.10.3 (June 30 2025) =
*Bug Fixes:*
- Fixes rounding error for number fields.
- Resolves a hang on save in certain circumstances.
- Removes an unused uinstall hook method.

*Misc:*
- Updates several npm dependencies.

= 3.10.2.2 (June 24 2025) =
*Security Fixes:*
- Prevent script tag injection into templates via block prefixes. Thanks to Asaf Mozes for responsibly reporting this security issue.

*Misc:*
- Concatenates the readme changelog to prevent going over the WP.org word limit.

= 3.10.2.1 (June 19 2025) =
*Bug Fixes:*
- Fixes an issue with HelpText causing a collision on save with Conditional Logic add-on.
- Fixes an issue with HelpText causing a collision on save with Stripe add-on.
- Fixes an incorrect icon.

= 3.10.2 (June 18 2025) =
*Bug Fixes:*
- Fixes an issue with the help text for repeater fields.
- Fixes an issue with form processing being slow on forms with many fields.
- Fixes an issue with translations on the date picker field.
- Fixes an issue with saving repeater fields on duplicated forms.
- Fixes an issue with date/time field in repeatable fieldsets.
- Fixes an issue with repeatable field help text.

*Features:*
- Improved drawer styles with a refreshed look.

= 3.10.1 (14 April 2025) =
*Bug Fixes:*
- Prevent stored XSS in various fields

= 3.10.0 (26 March 2025) =
*Features*
- Add a Google Analytics 4 Action.

*Bug Fixes:*
- Fix an error related to using calculations in payment gateway actions.
- Fix an error related to File Uploads merge tags.
- Required errors should no longer trigger on removed repeater sets.

= 3.9.2.1 (December 15, 2025) =
*Bug Fixes:*
- Limit submission token generation

= 3.9.2 (12 March 2025) =
*Bug Fixes:*
- List fields can now be used for determining the payment total in payment collection actions.
- Fixed PHP warnings when using PHP 8.
- Fixed an issue with the Password confirm field.
- Ensure that time field IDs are unique.
- Fixed an issue with the opt-in email.

= 3.9.1 (24 February 2025) =
*Features:*
- Allows repeatable fieldsets to be editable in the Submissions page.

*Bug Fixes:*
- Numbers over 10 billion no longer cause validation errors.

*Other:*
- Add add-on communication status logs to the System Status page.
- Add additional data points for telemetry.
- Build file updates.

= 3.9.0 (10 February 2025) =
*Features:*
- New user onboarding
- Add delete forms WP-CLI command

*Other:*
- JS library updates

= 3.8.25.1 (December 15, 2025) =
*Bug Fixes:*
- Limit submission token generation

= 3.8.25 (27 January 2025) =
*Bug Fixes:*
- ensure form id value is numeric in shortcodes; responsibly reported by Peter Thaleikis via Wordfence

= 3.8.24 (21 January 2025) =
*Bug Fixes:*
- Fixed an accessibility issue related to text contrast when using opinionated styles.
- Fixed accessibility errors related to missing field descriptions.

= 3.8.23 (16 December 2024) =
*Bug Fixes:*
- Ensure only permitted form previews are available to a given user

= 3.8.22 (10 December 2024) =
*Bug Fixes:*
- Update timing for widget loading on page builders

= 3.8.21 (09 December 2024) =
*Bug Fixes:*
- Update timing to load translations after init

= 3.8.20 (26 November 2024) =
*Bug Fixes:*
- Sanitize calculations input

= 3.8.19 (18 November 2024) =
*Bug Fixes:*
- Remove legacy duplicate field cleanup from render loop
- Convert HTML encoded characters on submissions page
- Verify we are on an nf_sub post type before loading terms list

*Other:*
- Add behavioural telemetry data
- Add diagnost information to system status
- Update end-to-end test

= 3.8.18 (23 October 2024) =
*Bug Fixes:*
- Prevent script in Favorite Fields
- Prevent script in calculation name
- Update field HTML for improved accessibility

= 3.8.17 (01 October 2024) =
*Bug Fixes:*
- Ensure help text is mobile responsive for single checkbox, single line text, paragraph text
- Prevent non-required blank email field failing validation
- Replace hard-coded strings for translation

= 3.8.16 (17 September 2024) =
*Bug Fixes:*
- Ensure sanitation of email address for merge tag
- Prevent maintenance mode interception

= 3.8.15 (10 September 2024) =
*Bug Fixes:*
- Ensure "From Address" email warning shows
- Prevent JS error on datepicker inside fieldset repeater

*Other:*
- Add PHP compatibility tests
- Add usage telemetry data

= 3.8.14 (03 September 2024) =
*Bug Fixes:*
- Ensure submissions page form filter finds form titles
- Provide PHP 7.4 support for jsonSerialize method call
- Ensure hCaptcha field functions when safe-listed

*Other:*
- JS library updates

= 3.8.13 (26 August 2024) =
*Bug Fixes:*
- Prevent mouse scroll wheel from updating currency masked fields - Issues
- Resolved an error where required field validation was not always firing properly on masked fields
- Correct list value tooltip styling error for Safari and Firefox
- A repeatable fieldset that has triggered a required error maintains the error when the repeatable fieldset is deleted
- First Repeated Fieldset's data is not captured when deleting one of the sets
- Ensure form displays in WP Bakery without needing to refresh page

*Other:*
- Correct deprecation warnings in SCSS files
- Library updates: The updates affect the structure of the components - mounting and data flow - and the blocks and styling
- Set security resolution for Axios as a dependency of our dependencies
- Reorganize cypress tests
- Add unit tests
- Add initial usage data to telemetry
- High impact accessibility factor corrections

= 3.8.12 (13 August 2024) =
*Bug Fixes:*
- Validate label settings on change event

= 3.8.11 (07 August 2024) =
*Bug Fixes:*
- Prevent unused key values on Survey Promo link

= 3.8.10 (05 August 2024) =
*Bug Fixes:*
- Submissions Table block not displayed on published page on some themes
- Phone field not disabled when expected
- calc value option of list fields not set with help text
- Submission page tooltip icon not displayed on environment not using conventional plugins folder path

*Other:*
- @wordpress dependencies updates

= 3.8.9 (29 July 2024) =
*Bug Fixes:*
- Submissions Block not showing all submissions data.
- Fix deleted repeater field missing required data halting submission
- Add "Administration" section for all fields
- Add missing check_admin_referrer parameter
- Sort by Shortcode on forms page as numerical
- Accessibility: update field description and screen readers
- Enable hidden fields in the unique field
- Fix display Form iFrame in Elementor editor

*Other:*
- Refactor telemetry dispatch to add unit tests

= 3.8.8 (22 July 2024) =
*Bug Fixes:*
- Ensure submissions page and Append Ninja Form block are visible on WP 6.6

*Other:*
- Update readme 'tested up to' and 'requires at least'

= 3.8.7 (15 July 2024) =
*Bug Fixes:*
- prevent licensing CSRF

= 3.8.6 (8 July 2024) =
*Bug Fixes:*
- prevent deprecated false to array notice in preview
- prevent undefined array key 'plugin' warning in class extension updater
- prevent invalid date error when setting default date format to "j F Y" on non-English languages

*Other:*
- automated test for version number
- update wordpress library packages
- add documentation links to settings in the form builder

= 3.8.5 (13 June 2024) =
*Bug Fixes:*
- Protect preview query parameters

= 3.8.4 (28 May 2024) =
*Bug Fixes:*
- Ensure first name field populates only first, not full, name
- Enable personally identifiable setting outside of dev mode
- Add merge tags 'other' for random, year, month, day

*Other:*
- Set version resolutions for certain packages
- Improve discoverability of available actions
- Update marketing feed

= 3.8.3 (1 May 2024) =
*Bug Fixes:*
- Ensure fieldset repeaters function on index values ending in 0 (10, 20, etc)

*Other:*
- Update tests to run on 6.5.2

= 3.8.2 (29 March 2024) =
*Bug Fixes:*
- Allow default span tags in form labels

= 3.8.1 (27 March 2024) =
*Bug Fixes:*
- Ensure submission exports can't be called from any unintended pages
- Prevent injected scripts into submit button and advanced labels
- Prevent XSS on image lists

*Other:*
- Update add-on images

= 3.8.0 (20 February 2024) =
*Features:*
- Add 'referer URL' merge tag

*Bug Fixes:*
- Prevent display error when date format is not set
- Ensure current date stored when default is not modified
- Ensure translation of date strings

*Other:*
- Add user help text and images
- Add automated tests

