What’s new

We’re constantly making Convert Forms better. Here are some of the of notable new features and improvements that we’ve made to Convert Forms since it’s first launched.
Security
  • Security: Fixed a critical arbitrary file deletion vulnerability in the File Upload field.
Fixed
  • Fixed File Upload field incorrectly sending a delete request to the server when a form was submitted.
  • Fixed forms search in the backend accidentally re-triggering the form export task.
  • Fixed a deprecation warning shown by the AcyMailing integration.
  • Fixed a PHP error that could occur during form processing.
  • Fixed Calculated Fields returning incorrect results when source fields had input masks applied.
  • Fixed Signature field becoming distorted when the device orientation changed or the browser was resized.
Fixed
  • Fixed a form editor save error caused by an updated CodeMirror version incompatibility introduced in Joomla 6.1.
Fixed
  • Fixed a PHP error when viewing submissions on the front-end.
Added
  • Export Submissions now lets you choose the CSV delimiter (comma or semicolon) from Advanced options.
  • Export Submissions now includes an optional "Include Submission Notes" setting in Advanced options that adds a dedicated notes column in the export file.
Fixed
  • Fixed File Upload field rendering incorrect HTML in translated languages due to HTML in language strings.
  • Fixed TinyMCE editor converting absolute URLs to relative paths.
  • Fixed Rich Text Editor field presented "Editor - None" as a Joomla Editor option.
  • Fixed JSON API returning an error when the site's date format is not parseable by PHP.
  • Fixed File Upload field failing to upload files when Joomla SEF URLs are disabled.
Changed
  • Forms list now filters by published and unpublished states only, ignoring archived forms.
Fixed
  • Fixed timezone conversion for created/modified dates in JSON API and Export files.
  • Fixed dropdown field incorrectly showing field name as option in submission edit page.
  • Fixed AcyMailing PHP error in Campaigns (deprecated) when subscribing users to selected lists.
Changed
  • Updated Design > Fields > Field Background Color to support transparent/none values in form design settings.
Security
  • Fixed vulnerabilities in AJAX handling, including unauthenticated file access and SQL injection. High - CVE-2026-21627.
Added
  • Added support for copying associated Tasks when duplicating or exporting and importing a form.
  • Added {form.id} and {form.name} Smart Tags.
  • Added support for "webp, stp, step, igs, iges" file types in File Upload field.
Fixed
  • Improved submissions search results in the backend and frontend (Requires MySQL 5.7.8+)
  • Fixed AcyMailing error related to version 10.6.
  • Fixed Some HTML attributes stripped when editing content in TinyMCE editor.
  • Fixed incorrect PDF URLs on Windows localhost setups.
  • Fixed reCAPTCHA v2 Checkbox not working in certain Joomla 5 and 6 versions.
  • Fixed checkbox required validation resets after conditional fields processing.
  • Fixed Tasks list randomly fail to load in Firefox.
  • Fixed "Fieldset missing legend" accessibility warning when a field hides the label.
  • Fixed reCAPTCHA v3 PHP error "Attempt to read property "body" on array".
Changed
  • Updates File Upload field with built-in image previews.
  • Improved date formatting consistency across frontend and backend submission lists.
Added
  • Joomla 6 Native Support.
  • Added password visibility toggle to Password and Confirmation fields.
  • Added field-to-field comparisons using {field.NAME} syntax in Conditional Fields.
  • Added "onConvertFormsFieldSignatureStore" event to let developers change the signature file name.
Fixed
  • Fixed Rich Text Editor causing "Class JFactory not found" error when editing a submission.
  • Fixed Radio/Dropdown/Checkbox field choices values would appear broken in some cases.
  • Fixed broken Transifex link in the Translations panel on the Dashboard page.
  • Fixed Radio and Checkbox fields markup to pass accessibility standards.
  • Fixed emails shown as cf_email_2b6c0091a2a238e83d99602f when using Joomla cache.
  • Fixed ActiveCampaign Task custom field values not saved properly in new contacts.
  • Fixed Timezone Offset for {submission.date} Smart Tag in PDF Regeneration.
  • Fixed unpublished forms not appearing in export submissions form selector.
  • Fixed "Failed to parse time string" Error in Joomla 6 DateTime Field in Submissions Edit View.
  • Fixed formatting of submission dates (created/modified) in the submissions list.
  • Fixed an issue where the {user.name} Smart Tag returned usernames with inconsistent letter casing.
  • Fixed an issue where uk-* attributes for anchor and button elements would be ignored in TinyMCE editor.
  • Fixed Smart Tags not being saved when used inside HTML attributes in the TinyMCE editor.
Changed
  • Improved Article Text mapping UI in the Content App.
  • Updates translations.
  • Renamed Submission date Smart Tags to {submission.dateCreated} and {submission.dateModified} for consistency.
Fixed
  • Fixed Honeypot v2 CSS override by template; input and label now stay hidden.
Added
  • Added support for more file types in File Upload field.
  • Added preview button to File Upload field in submission edit.
  • Added --skipPrepareContentRender argument to {convertforms X} shortcode.
Fixed
  • Fixed Terms of Service field losing HTML formatting when email address present.
  • Fixed accessibility missing form label error for Honeypot and File Upload fields.
  • Fixed Phone Number field issue after disabling Country Code Selector.
  • Fixed Phone Number field XML parse PHP error.
  • Fixed PHP error when deleting last field in editor.
  • Fixed {convertforms X} shortcode replaced with HTML in DPCalendar event edit.
  • Fixed low contrast in default field colors (AAA compliance).
  • Fixed incorrect renewal discount in Expired/Expiring notices.
  • Fixed HubSpot error with Multiple Checkboxes properties.
  • Fixed missing toolbar buttons in WYSIWYG editors (Joomla 5).
  • Fixed "Wrapper /plugins/system/nrframework/helpers/wrappers/NAME.php" not found PHP error.
Changed
  • Heading field now uses CSS variables.
  • Updated Campaigns deprecation messages in Email Notifications.
  • ^ Smart Tags modifiers without value default to 'true'.
Added
  • Added new option to add your own CSS rules to emails in Email Task.
  • Added support for blocks in Email Task body option.
  • Added automatic conversion of Email Task styles to inline styles for better email client support.
Fixed
  • Fixed Email Task plain text version issues for better compatibility.
  • Fixed passwords shown in plain text in submissions list; they are now masked.
  • Fixed trigger column issue in #__convertforms_tasks table.
  • Fixed Smart Tag returning empty when value is 0.
Changed
Added
  • Added the "Require Password Reset" setting for the User Account Task.
Fixed
  • Fixed "Session ID not found" issue with Honeypot v2.
  • Fixed GetResponse custom fields not saved properly to new contacts under certain circumstances.
  • Fixed missing active menu item color in editor's left side bar.
  • Fixed DateTime field's mindate/maxdate handling allowing selection of all times in the time picker.
  • Fixed {user.field.FIELDNAME} Smart Tag ignoring --preparecustomfields option.
Security
  • Fixed various minor XSS and SQL vulnerabilities in the backend.
Added
Fixed
  • Fixed TinyMCE editor may not appear due to deprecated warnings.
  • Fixed Email Cloak plugin breaks form fields with email addresses.
  • Fixed multiple Rating fields not resetting with Reset Form enabled.
  • Fixed AcyMailing Task resetting Name and Language settings in non-English forms.
Changed
  • Updated the User Account addon to block assigning users to Administrator or Super User groups for security.
  • Sets minimum required Joomla! version to 4.0.
  • Sets minimum required PHP version to 7.4.
Added
  • Added email automation to Submissions Exporter addon for scheduled submission exports.
  • Added ActiveCampaign Integration (Pro Only).
  • Added Kit (formerly ConvertKit) Integration (Pro Only).
Fixed
  • Possible fix for honeypot to fight recent bot spam submissions.
  • Fixed HTML stripping in field values when editing submissions on the backend.
  • Fixed File Upload Field multiplication issue after saving a submission on the backend on Joomla 5.
  • Fixed AcyMailing 10 compatibility issues.
Changed
  • Allowed File Types in the File Upload Field are now validated during form save in the backend.
Security
  • Fixed a rare XSS vulnerability that could allow script injection into forms.
Fixed
  • Fixed editor height in Design > Advanced and PHP Scripts in Joomla 5.
  • Fixed unneeded double quote from submit button.
  • Fixed right text alignment when Input Mask > Numeric is used.
Security
  • Fixed missing escaping in Default Value to prevent XSS during field population.
Added
  • Added support for test mode in Salesforce campaign.
  • Added --filter modifier to filter Smart Tags output using predefined filters and regex.
  • Added support for Krita (.kra and .krz) files in File Upload Field.
  • Added onConvertFormsPDFFileName plugin event to allow developers to modify the PDF filename.
Fixed
  • Improved Honeypot field to prevent browser autofill and accidental navigation using the Tab key.
  • Fixed missing submisisons from the Submissions List and export files due to invalid timezone.
  • Fixed missing Media Library "Select" button in the "Background Image" setting.
Changed
  • Improves performance of TinyMCE editor in Tasks.
Security
  • Fixed a rare XSS vulnerability that could allow script injection into forms.
Added
Fixed
Changed
  • Improved accessibility by adding role=“presentation” to form submission spinner.
  • ReCAPTCHA v3 policy links now open in a new tab.
  • PDF Filename is now generated using a random string to avoid privacy concerns.
Fixed
  • Fixed "Save" and "Save & Close" buttons wouldn't save the Addons settings modals in Joomla 4 and 5.
  • Fixed PDF Filename Prefix to handle non-Latin characters.
Added
  • Added support for Cloudflare Turnstile CAPTCHA.
  • Added missing Archive button in submissions toolbar for Joomla 4+.
  • Added missing aria-label attribute to various form fields.
Fixed
Changed
  • Replaced Textarea with Rich Text Editor in Content App (Text option) and Email App (Body option).
  • Removed obsolete Execute on Output and Format Override options.
Added
  • Added “Resize Images” option to File Upload field.
  • Added missing icon to “Report an issue” link in the top-right editor dropdown.
Added
  • Added download feature to Submissions Exporter addon.
  • HTML and Heading fields now support the {field.ID} Smart Tag.
Fixed
  • Fixed {submission.status} Smart Tag to display the correct label.
  • Fixed PHP error with reCAPTCHA field.
  • Fixed display disruption caused by 3rd-party modules like Phoca Top Menu.
  • Fixed issue with optional Signature field generating signatures without a value.
Changed
  • Improved code editing in Custom CSS/JavaScript and PHP Scripts sections with Codemirror.
  • Improved GDPR compliance by loading all 3rd-party assets locally.
  • Improved Phone Number field styling.
  • Removed Style option from Button field; all buttons now default to Flat (previous option).
Join Thousands who Build Smarter Forms with Convert Forms
Create contact forms, payment forms, registration forms, calculator forms with the most user-friendly Joomla contact form builder extension.
5-star rating on the Joomla Extensions Directory