DTX · Version history
DTX changelog and version history
- Latest version
- 5.0.7
- Aug 4, 2026 (3 months ago)
- Releases
- 52
- since 2010
- In the last year
- 4
- about one every 72 days
- Tested up to
- WordPress 7.0.8
- PHP 7.4 or later
Releases each year
- 20103 releases
- 20113 releases
- 20132 releases
- 20142 releases
- 20151 release
- 20161 release
- 20171 release
- 20191 release
- 20201 release
- 202318 releases
- 202414 releases
- 20251 release
- 20264 releases
20264 releases
DTX 5.0.7Latest
- Release Date: 08/03/2026
- Update: the name of this plugin was changed from “Contact Form 7 – Dynamic Text Extension” to “DTX – Dynamic Text Extension for Contact Form 7” to comply with the plugin guideline #17 set by WordPress and to respect the trademarks and copyrights of the plugin Contact Form 7 by Takayuki Miyoshi and…
- Update: the menu item for the settings page was changed from “Dynamic Text Extension” to simply “DTX”.
- Security: Disallowed direct file access for files that had it missing.
- Security: Added escaping to more dynamic strings.
- Optimization: Added a setting callback to sanitize the array object
- Internationalization: addressed incidences where the text domain was not set or incorrect.
- Update: Added a “None found” message in the form scan when no results were found.
- Update: Gave the scan button on the settings page a secondary button style.
DTX 5.0.6
- Release Date: 06/05/2026
- Special thanks to Shane Hollis (@webkiwinz) for these security fixes!
- Security: Fixed stored XSS in admin scan results page; form titles and shortcode key names were echoed without HTML escaping. This addresses security vulnerability CVE-2026-5116 responsibly reported by Satyarth Prakash to Wordfence.
- Security: Fixed CSRF vulnerability on notice dismissal; dismiss-access-keys-notice action now requires a valid nonce.
- Security: Fixed unsanitised $_GET['offset'] parameter; now it’s always cast to a non-negative integer before use.
- Security: Fixed potential regex injection in JavaScript get_cookie(); cookie key is now escaped before use in a regex pattern.
- Fix: Fixed switch fall-through logic bug in wpcf7dtx_get_current_var(); missing break statements caused user/term/archive context data to be overwritten by post context data.
- Note from Tessa: the AJAX nonce validation that checks !== 1 was intentional to only target the first 12-hour window to be more strict. That AJAX call was intended to run once on page load, so allowing the validation to persist beyond 12 hours is unnecessary.
DTX 5.0.5
- Release Date: 02/17/2026
- Fix: Fixed a type-o in nonce verification where it compared the value against 0 instead of 1, see support thread.
DTX 5.0.4
- Release Date: 01/01/2026
- Security: Addressed security vulnerability CVE-2025-13146 responsibly reported by NosleeP++ to Wordfence. Thank you NosleeP++! The JavaScript Fetch/AJAX request now includes nonce verification.
20251 release
DTX 5.0.3
- Fix: Moved settings translations to load as needed instead of immediately hoping to address the Function _load_textdomain_just_in_time was called incorrectly notice added in WordPress core version 6.7, see support thread.
- Please see our additional changelog.txt file
202414 releases
DTX 5.0.2
DTX 5.0.1
DTX 5.0.0
DTX 4.5.1
DTX 4.5.0
DTX 4.4.2
DTX 4.4.1
DTX 4.4.0
DTX 4.3.1
DTX 4.3.0
DTX 4.2.3
DTX 4.2.2
DTX 4.2.1
DTX 4.2.0
202318 releases
DTX 4.1.0
DTX 4.0.3
DTX 4.0.2
DTX 4.0.1
DTX 4.0.0
DTX 3.5.4
DTX 3.5.3
DTX 3.5.2
DTX 3.5.1
DTX 3.5.0
DTX 3.4.0
DTX 3.3.0
DTX 3.2
DTX 3.1.3
DTX 3.1.2
DTX 3.1.1
DTX 3.1.0
DTX 3.0.0
20201 release
DTX 2.0.3
20191 release
DTX 2.0.2.1
20171 release
DTX 2.0.2
20161 release
DTX 2.0.1
20151 release
DTX 2.0
20142 releases
DTX 1.2
DTX 1.1.0.2
20132 releases
DTX 1.1.0.1
DTX 1.1
20113 releases
DTX 1.0.4.2
DTX 1.0.4.1
DTX 1.0.4
20103 releases
DTX 1.0.3
DTX 1.0.2
DTX 1.0.1
Questions about DTX’s releases
What is the latest version of DTX?
5.0.7, released on Aug 4, 2026 (3 months ago). It’s tested up to WordPress 7.0.8 and needs PHP 7.4 or later.
How often is DTX updated?
4 releases in the last year, about one every 72 days. Its first release on WordPress.org dates from October 2010.
Know when your rivals ship
Track your plugin and its rivals: TrackWP sees each new release in the nightly snapshot and alerts you, with what it did to their rank.
Start freeRelease dates come from the day each version’s folder was made in DTX’s WordPress.org SVN repository; the notes from its readme’s changelog, as its authors wrote it.