JetFormBuilder — Dynamic Blocks Form Builder

3.6.4.1

– FIX: Broken Access Control vulnerability

3.6.4

– ADD: Add Text Field variations for Email, Password, URL, First Name, Last Name

– ADD: Show field names in the List View

– FIX: Hide Honeypot protection fields in the editor after updating to 3.6.2

– ADD: Add customizable autocomplete attribute for Text Fields

– FIX: JetFormBuilder forms in JetPopup AJAX popups not initializing correctly

– FIX: Respect Form Records access capability in REST endpoints

3.6.3.1

– FIX: get_from_db, get_from_users options generators. Make sure the generator options is correctly santized to prevent context injecting.

3.6.3

– FIX: Restore repeater macro filter compatibility without breaking formatted output

– FIX: Calculated Field now correctly processes empty Multi Select values

– FIX: Require User Access selection in Media Field settings

– ADD: Support option labels in Fields Preview macros

– ADD: Auto-focus search in the “New Action” modal and fix Undo (Cmd/Ctrl+Z) behavior inside action popups

– ADD: Delete removed Media Field attachments from the Media Library on form submission

– FIX: Prevent broken widget rendering for non-form form IDs

– FIX: Normalize media field files after repeater re-observe

– FIX: Duplicate HTML macro processing

– FIX: Escape line breaks only inside calculated string values

– FIX: Recalculate multistep page break state after binding page

3.6.2.2

– FIX: SSR validation privilege escalation hardening

3.6.2.1

– FIX: Prevent unauthorized JetE