What’s new

We’re constantly making Convert Forms better. Here are some of the of notable new features and improvements that we’ve made to Convert Forms since it’s first launched.
Security
  • Security: Fixed a critical arbitrary file deletion vulnerability in the File Upload field.
Fixed
  • Fixed File Upload field incorrectly sending a delete request to the server when a form was submitted.
  • Fixed forms search in the backend accidentally re-triggering the form export task.
  • Fixed a deprecation warning shown by the AcyMailing integration.
  • Fixed a PHP error that could occur during form processing.
  • Fixed Calculated Fields returning incorrect results when source fields had input masks applied.
  • Fixed Signature field becoming distorted when the device orientation changed or the browser was resized.
Fixed
  • Fixed a form editor save error caused by an updated CodeMirror version incompatibility introduced in Joomla 6.1.
Fixed
  • Fixed a PHP error when viewing submissions on the front-end.
Added
  • Export Submissions now lets you choose the CSV delimiter (comma or semicolon) from Advanced options.
  • Export Submissions now includes an optional "Include Submission Notes" setting in Advanced options that adds a dedicated notes column in the export file.
Fixed
  • Fixed File Upload field rendering incorrect HTML in translated languages due to HTML in language strings.
  • Fixed TinyMCE editor converting absolute URLs to relative paths.
  • Fixed Rich Text Editor field presented "Editor - None" as a Joomla Editor option.
  • Fixed JSON API returning an error when the site's date format is not parseable by PHP.
  • Fixed File Upload field failing to upload files when Joomla SEF URLs are disabled.
Changed
  • Forms list now filters by published and unpublished states only, ignoring archived forms.
Fixed
  • Fixed timezone conversion for created/modified dates in JSON API and Export files.
  • Fixed dropdown field incorrectly showing field name as option in submission edit page.
  • Fixed AcyMailing PHP error in Campaigns (deprecated) when subscribing users to selected lists.
Changed
  • Updated Design > Fields > Field Background Color to support transparent/none values in form design settings.
Security
  • Fixed vulnerabilities in AJAX handling, including unauthenticated file access and SQL injection. High - CVE-2026-21627.
Added
  • Added support for copying associated Tasks when duplicating or exporting and importing a form.
  • Added {form.id} and {form.name} Smart Tags.
  • Added support for "webp, stp, step, igs, iges" file types in File Upload field.
Fixed
  • Improved submissions search results in the backend and frontend (Requires MySQL 5.7.8+)
  • Fixed AcyMailing error related to version 10.6.
  • Fixed Some HTML attributes stripped when editing content in TinyMCE editor.
  • Fixed incorrect PDF URLs on Windows localhost setups.
  • Fixed reCAPTCHA v2 Checkbox not working in certain Joomla 5 and 6 versions.
  • Fixed checkbox required validation resets after conditional fields processing.
  • Fixed Tasks list randomly fail to load in Firefox.
  • Fixed "Fieldset missing legend" accessibility warning when a field hides the label.
  • Fixed reCAPTCHA v3 PHP error "Attempt to read property "body" on array".
Changed
  • Updates File Upload field with built-in image previews.
  • Improved date formatting consistency across frontend and backend submission lists.
Added
  • Joomla 6 Native Support.
  • Added password visibility toggle to Password and Confirmation fields.
  • Added field-to-field comparisons using {field.NAME} syntax in Conditional Fields.
  • Added "onConvertFormsFieldSignatureStore" event to let developers change the signature file name.
Fixed
  • Fixed Rich Text Editor causing "Class JFactory not found" error when editing a submission.
  • Fixed Radio/Dropdown/Checkbox field choices values would appear broken in some cases.
  • Fixed broken Transifex link in the Translations panel on the Dashboard page.
  • Fixed Radio and Checkbox fields markup to pass accessibility standards.
  • Fixed emails shown as cf_email_2b6c0091a2a238e83d99602f when using Joomla cache.
  • Fixed ActiveCampaign Task custom field values not saved properly in new contacts.
  • Fixed Timezone Offset for {submission.date} Smart Tag in PDF Regeneration.
  • Fixed unpublished forms not appearing in export submissions form selector.
  • Fixed "Failed to parse time string" Error in Joomla 6 DateTime Field in Submissions Edit View.
  • Fixed formatting of submission dates (created/modified) in the submissions list.
  • Fixed an issue where the {user.name} Smart Tag returned usernames with inconsistent letter casing.
  • Fixed an issue where uk-* attributes for anchor and button elements would be ignored in TinyMCE editor.
  • Fixed Smart Tags not being saved when used inside HTML attributes in the TinyMCE editor.
Changed
  • Improved Article Text mapping UI in the Content App.
  • Updates translations.
  • Renamed Submission date Smart Tags to {submission.dateCreated} and {submission.dateModified} for consistency.
Fixed
  • Fixed Honeypot v2 CSS override by template; input and label now stay hidden.
Added
  • Added support for more file types in File Upload field.
  • Added preview button to File Upload field in submission edit.
  • Added --skipPrepareContentRender argument to {convertforms X} shortcode.
Fixed
  • Fixed Terms of Service field losing HTML formatting when email address present.
  • Fixed accessibility missing form label error for Honeypot and File Upload fields.
  • Fixed Phone Number field issue after disabling Country Code Selector.
  • Fixed Phone Number field XML parse PHP error.
  • Fixed PHP error when deleting last field in editor.
  • Fixed {convertforms X} shortcode replaced with HTML in DPCalendar event edit.
  • Fixed low contrast in default field colors (AAA compliance).
  • Fixed incorrect renewal discount in Expired/Expiring notices.
  • Fixed HubSpot error with Multiple Checkboxes properties.
  • Fixed missing toolbar buttons in WYSIWYG editors (Joomla 5).
  • Fixed "Wrapper /plugins/system/nrframework/helpers/wrappers/NAME.php" not found PHP error.
Changed
  • Heading field now uses CSS variables.
  • Updated Campaigns deprecation messages in Email Notifications.
  • ^ Smart Tags modifiers without value default to 'true'.
Added
  • Added new option to add your own CSS rules to emails in Email Task.
  • Added support for blocks in Email Task body option.
  • Added automatic conversion of Email Task styles to inline styles for better email client support.
Fixed
  • Fixed Email Task plain text version issues for better compatibility.
  • Fixed passwords shown in plain text in submissions list; they are now masked.
  • Fixed trigger column issue in #__convertforms_tasks table.
  • Fixed Smart Tag returning empty when value is 0.
Changed
Added
  • Added the "Require Password Reset" setting for the User Account Task.
Fixed
  • Fixed "Session ID not found" issue with Honeypot v2.
  • Fixed GetResponse custom fields not saved properly to new contacts under certain circumstances.
  • Fixed missing active menu item color in editor's left side bar.
  • Fixed DateTime field's mindate/maxdate handling allowing selection of all times in the time picker.
  • Fixed {user.field.FIELDNAME} Smart Tag ignoring --preparecustomfields option.
Security
  • Fixed various minor XSS and SQL vulnerabilities in the backend.
Added
Fixed
  • Fixed TinyMCE editor may not appear due to deprecated warnings.
  • Fixed Email Cloak plugin breaks form fields with email addresses.
  • Fixed multiple Rating fields not resetting with Reset Form enabled.
  • Fixed AcyMailing Task resetting Name and Language settings in non-English forms.
Changed
  • Updated the User Account addon to block assigning users to Administrator or Super User groups for security.
  • Sets minimum required Joomla! version to 4.0.
  • Sets minimum required PHP version to 7.4.
Added
  • Added email automation to Submissions Exporter addon for scheduled submission exports.
  • Added ActiveCampaign Integration (Pro Only).
  • Added Kit (formerly ConvertKit) Integration (Pro Only).
Fixed
  • Possible fix for honeypot to fight recent bot spam submissions.
  • Fixed HTML stripping in field values when editing submissions on the backend.
  • Fixed File Upload Field multiplication issue after saving a submission on the backend on Joomla 5.
  • Fixed AcyMailing 10 compatibility issues.
Changed
  • Allowed File Types in the File Upload Field are now validated during form save in the backend.
Security
  • Fixed a rare XSS vulnerability that could allow script injection into forms.
Fixed
  • Fixed editor height in Design > Advanced and PHP Scripts in Joomla 5.
  • Fixed unneeded double quote from submit button.
  • Fixed right text alignment when Input Mask > Numeric is used.
Security
  • Fixed missing escaping in Default Value to prevent XSS during field population.
Added
  • Added support for test mode in Salesforce campaign.
  • Added --filter modifier to filter Smart Tags output using predefined filters and regex.
  • Added support for Krita (.kra and .krz) files in File Upload Field.
  • Added onConvertFormsPDFFileName plugin event to allow developers to modify the PDF filename.
Fixed
  • Improved Honeypot field to prevent browser autofill and accidental navigation using the Tab key.
  • Fixed missing submisisons from the Submissions List and export files due to invalid timezone.
  • Fixed missing Media Library "Select" button in the "Background Image" setting.
Changed
  • Improves performance of TinyMCE editor in Tasks.
Security
  • Fixed a rare XSS vulnerability that could allow script injection into forms.
Added
Fixed
Changed
  • Improved accessibility by adding role=“presentation” to form submission spinner.
  • ReCAPTCHA v3 policy links now open in a new tab.
  • PDF Filename is now generated using a random string to avoid privacy concerns.
Fixed
  • Fixed "Save" and "Save & Close" buttons wouldn't save the Addons settings modals in Joomla 4 and 5.
  • Fixed PDF Filename Prefix to handle non-Latin characters.
Added
  • Added support for Cloudflare Turnstile CAPTCHA.
  • Added missing Archive button in submissions toolbar for Joomla 4+.
  • Added missing aria-label attribute to various form fields.
Fixed
Changed
  • Replaced Textarea with Rich Text Editor in Content App (Text option) and Email App (Body option).
  • Removed obsolete Execute on Output and Format Override options.
Added
  • Added “Resize Images” option to File Upload field.
  • Added missing icon to “Report an issue” link in the top-right editor dropdown.
Added
  • Added download feature to Submissions Exporter addon.
  • HTML and Heading fields now support the {field.ID} Smart Tag.
Fixed
  • Fixed {submission.status} Smart Tag to display the correct label.
  • Fixed PHP error with reCAPTCHA field.
  • Fixed display disruption caused by 3rd-party modules like Phoca Top Menu.
  • Fixed issue with optional Signature field generating signatures without a value.
Changed
  • Improved code editing in Custom CSS/JavaScript and PHP Scripts sections with Codemirror.
  • Improved GDPR compliance by loading all 3rd-party assets locally.
  • Improved Phone Number field styling.
  • Removed Style option from Button field; all buttons now default to Flat (previous option).
Get More Done in Less Time With Better Joomla Forms
Create contact forms, payment forms, registration forms, calculator forms with the most user-friendly Joomla contact form builder extension.
5-star rating on the Joomla Extensions Directory