MW WP Form

5.1.4

Security Tighten output escaping on inquiry data detail screen

5.1.3

Security Tighten access control on post property reference handling

Added Cookie SameSite=Lax attribute to CSRF / session cookies

Added Admin notice for [mwform_file] / [mwform_image] shortcodes, which are scheduled for removal in 5.2

Fixed PHP 8.3 Deprecated warning on get_class() without arguments

Fixed Undefined variable warning in maxfilesize (image size) validation rule

5.1.2

Security Fix insufficient file path validation in upload file handling

5.1.1

Security Fix insufficient file path validation in upload file handling

5.1.0

Security Use wp_kses_post to form content/complete message

5.0.6

Fixed Fixed an error during uninstallation. ( later 5.0.0 )

Temporarily Removed PHP requirements

5.0.5

Changed requirements to PHP 8.0, WordPress 6.0

5.0.4

Fixed Delete only attachments.

5.0.3

Remove plugin asset files.

5.0.2

Fixed file upload security.

Fixed Unification of cookie key names.

5.0.1

Main maintainer has been handed over from @inc2734 to @websoudan.

5.0.0

Requires PHP 7.4.

Fixed a form access control vulnerability.

Enhanced file upload security.

Changed uploaded file name from “random number” to “{name attribute value}-{original file name}”.

Update CSRF check.

Remove method: MW_WP_Form::get_temp_dir()

Remove method: MW_WP_Form::create_temp_dir()

Remove method: MW_WP_Form::do_empty_temp_dir()

Remove method: MW_WP_Form::remove_temp_dir()

Remove method: MWF_Functi