Happyforms – Form Builder for WordPress: Drag & Drop Contact Forms, Surveys, Payments & Multipurpose Forms

October 5, 2026
Version 1.26.17 changelog:

Fixed: Unauthenticated stored XSS vulnerability via spoofed Client-IP and X-Forwarded-For headers. Reported by Bao Le.

September 23, 2026
Version 1.26.16 changelog:

Update: Compatibility with WordPress 7.1.2

Fixed: Reflected XSS vulnerability in the “other” choice field.

July 14, 2026
Version 1.26.15 changelog:

Fixed: Unauthenticated HTML injection in email notifications via the referral link and IP address fields. Reported by minaruzzaman shovon and dyingman.

May 27, 2026
Version 1.26.14 changelog:

Update: Compatibility with WordPress 7.0

Fixed: Unauthenticated PHP Object Injection vulnerability in form submission values.

March 30, 2026
Version 1.26.13 changelog:

Update: Compatibility with WordPress 6.9.4.

Fixed: Translation loading notice triggered on WordPress 6+.

November 18, 2025
Version 1.26.12 changelog:

Update: Happyforms core functionality.

November 12, 2025
Version 1.26.11 changelog:

Update: Compatibility with WordPress 6.8.3

Fixed: Local File Inclusion vulnerability.

May 12, 2025
Version 1.26.10 changelog:

Update: Compatibility with WordPress 6.8.1

April 28, 2025
Version 1.26.9 changelog:

Update: Compatibility with WordPress 6.8

February 27, 2025
Version 1.26.8 changelog:

Fixed: XSS Vulnerability on Additional CSS class(es).

Fixed: XSS Vulnerability on Style Colors.

February 20, 2025
Version 1.26.7 changelog:

Update: Depenencies

February 18, 2025
Version 1.26.6 changelog:

Update: Compatibility w