Contact Form 7 5.5.4 is now available. Improvement for integration modules is ongoing. In this release, double opt-in has been introduced in the Sendinblue and Constant Contact integration modules.
Continue reading Contact Form 7 5.5.4All posts by Takayuki Miyoshi
Contact Form 7 5.5.3
Contact Form 7 5.5.3 is now available. We are in an incremental improvement process for the plugin’s integration modules. In this release, we have focused especially on the Constant Contact module, modernizing its coding and user interface. We have also improved the handling of contact form properties, which work as infrastructure for those modules.
Continue reading Contact Form 7 5.5.3Customizing Stripe payment parameters
Stripe‘s payment parameters, such as the currency or the amount of money, are decided by the [stripe] form-tag placed in the form template. You might want to customize the parameters by changing them dynamically based on the user’s selection or some sort of calculation.
You can do it by using the wpcf7_stripe_payment_intent_parameters filter hook like in the following coding example:
Contact Form 7 5.5
Contact Form 7 5.5 is now available. The main feature is the introduction of the Stripe integration module that brings a simple payment widget to forms. 5.5 also includes some important security enhancements. In addition, a lot of bug-fixes and improvements have been done. Upgrading immediately is recommended.
Continue reading Contact Form 7 5.5Contact Form 7 5.4.2
Contact Form 7 5.4.2 is now available. This is a maintenance release that includes several bug fixes.
Contact Form 7 5.4.2 has been tested with WordPress 5.8.
Continue reading Contact Form 7 5.4.2Avast security alert
In the past few hours a lot of Contact Form 7 users have reported that their security tools provided by Avast Software have given a security alert about Contact Form 7. In particular, the alert says it has found a Trojan Horse in one of the script files in the Contact Form 7 package.
I have confirmed no such malware exists in Contact Form 7, so I believe that it is probably a false alarm. So far we haven’t received any information from Avast about this case.
I’ll update this post when there is new information.
Contact Form 7 5.4.1
Contact Form 7 5.4.1 is now available. This is a maintenance release that includes several improvements and bug fixes.
Since the release of Contact Form 7 5.4 last February, a lot of problems have been reported and most of them have turned out to be caused by interference from other plugins or the theme used on the site.
Although fundamental solutions can be provided only by developers of the third-party plugins and themes, by updating to 5.4.1 you will be able to mitigate the problems.
Continue reading Contact Form 7 5.4.1Contact Form 7 5.4
Contact Form 7 5.4 is now available. The Sendinblue integration module has been newly introduced. JavaScript used on the front end of websites has also been drastically improved. In addition to these changes, a lot of improvements and bug fixes have been done in 5.4. Upgrading immediately is recommended.
Continue reading Contact Form 7 5.4Contact Form 7 5.4 Beta
The next major update, Contact Form 7 version 5.4, is scheduled to be released on February 24. Since 5.4 brings unusually large changes, I have decided to have a beta testing period of a few weeks before the live release.
You can download a copy of the beta version plugin package from the GitHub repository. If you find any bugs, please report back to us by creating an issue on GitHub.
If you find an add-on plugin you use doesn’t work correctly with Contact Form 7 5.4, then please report the issue to the developer of that plugin, not to us. We cannot take any responsibility with regards to 3rd-party products.
Continue reading Contact Form 7 5.4 BetaContact Form 7 5.3.2
Contact Form 7 5.3.2 has been released. This is an urgent security and maintenance release. We strongly encourage you to update to it immediately.
An unrestricted file upload vulnerability has been found in Contact Form 7 5.3.1 and older versions. Utilizing this vulnerability, a form submitter can bypass Contact Form 7’s filename sanitization, and upload a file which can be executed as a script file on the host server. This issue has been reported by Jinson Varghese Behanan from Astra Security.
Continue reading Contact Form 7 5.3.2