Ninja Forms · Version history
Ninja Forms changelog and version history
- Latest version
- 3.16.0
- Nov 2, 2026 (6 days ago)
- Releases
- 51
- since 2016
- In the last year
- 35
- about one every 10 days
- Tested up to
- WordPress 7.1.4
- PHP 7.4 or later
Releases each year
- 20162 releases
- 20226 releases
- 20231 release
- 20241 release
- 20259 releases
- 202632 releases
202632 releases
Ninja Forms 3.16.0Latest
- Bug Fixes:
- show translated text in places that stayed in English because of incorrect text domains or missing script translation folders
- show Ninja Forms in each user’s profile language when it differs from the site language
- stop WordPress 6.7 and later logging a “translation loading was triggered too early” notice for Ninja Forms
- export a Checkbox field value that was saved as a word in another language exactly as it was saved
- list Timor-Leste once in country lists, and sort countries with accented names in alphabetical order
- Enhancements:
- connect a PayPal account from the new Payments page and take payments on forms without an add-on
- bundle translations for 41 languages, using WordPress.org’s wording where it exists and the bundled translation where it doesn’t
- make every Ninja Forms string translatable on WordPress.org again, including those added since 3.6.9
- reword English strings so they translate accurately
Ninja Forms 3.15.7
- Security Enhancements:
- verify the license server’s certificate when checking and activating licenses
- apply the site’s unfiltered HTML restriction to the Not Logged-In and Limit Reached messages
- show option labels in form builder dropdown settings as plain text
- harden merge tag handling of submitted values, visitor IP address, referring page and post details
- enforce the “Require user to be logged in” setting when a form is submitted
- Bug Fixes:
- keep hand-coded tables intact in the Email action message editor
- load the Email action rich text editor correctly when a message contains older table markup
- keep Checkbox List calculations working when an option has a blank calc value
- count only typed characters toward the character limit on fields with an input mask
- show an error when a favorite field could not be deleted instead of appearing to remove it
- keep a form’s display name when it is imported
- fill in {submission:sequence} in emails re-sent from the Submissions page
- keep date values in the correct format when editing a submission
- keep calculated values in an HTML field when an unrelated field in it changes
- let Date fields created before date modes existed pass required validation
- register the first keystroke or paste in an empty rich text Paragraph Text field
- remove PHP warnings when a form contains a field from a deactivated add-on
- prevent a fatal error on submission when a Collect Payment action’s payment add-on is inactive
- keep spacing intact when Paragraph Text reaches its word limit
- remove PHP warnings when exporting submissions with an empty Repeatable Fieldset
- stop the form builder freezing when adding or moving fields in a large Repeatable Fieldset
- prevent a page error when a {querystring:} merge tag receives a list value
Ninja Forms 3.15.6
- Security Enhancements:
- protect HTML fields against script injection through query string merge tag values
- block shortcode execution through submitted field values in Success Message merge tags
- block shortcode execution through the {wp:user_display_name} merge tag
- protect stored submission data against cross-site scripting
- give each Email action CSV attachment its own private file
- always escape field values in Email and Success Message actions, regardless of how the action was saved
- Bug Fixes:
- restore the Quote Request form template
- make the resize handle work in the Email action HTML source editor
- return the correct URL from {wp:post_url} when a form is on the home page
- remove the “Undefined variable $errors” PHP warning from Confirm fields
- show Repeatable Fieldset values on the Submissions page after switching forms
- keep List field values from being copied into new entries when a form has more than one Repeatable Fieldset
- keep the page at the new entry after adding another Repeatable Fieldset entry
- keep field values containing special characters intact in emails and success messages
- leave out deleted Repeatable Fieldset fields when re-sending an email action
- handle merge tags in Email action To, CC and BCC fields as valid address lists
- make “Add New Terms” work on the front end for Terms List fields
- show term names instead of term IDs in Terms List submissions
- show field labels that contain HTML as readable text on the New Submissions page
- use one translatable message for required-field errors
- return a 404 for public link URLs with invalid keys
- keep forms loading when another script replaces the page’s Underscore library
- show Time Only and Date & Time values inside Repeatable Fieldsets correctly when editing a submission
- use Single Checkbox custom values in Email action CSV attachments and remove the related PHP warnings
- remove the legacy ninja_forms_load_deprecated option
- regularly clean up expired session data
- look up newsletter lists only in the form builder instead of on every page view
- improve reliability of opt-in usage data and limit how much is stored when reports are not acknowledged
Ninja Forms 3.15.5
- Security Enhancements:
- strengthen sanitization of Paragraph Text (Rich Text) field submissions against stored cross-site scripting
- Bug Fixes:
- save File Upload and other fields inside a Repeatable Fieldset correctly
- remove “Undefined array key fields-save-toggle” PHP warning when saving submissions
- remove foreach() PHP warnings when a repeatable fieldset is left blank
- display calculation values with the correct locale separator in form actions
- stop embedded-page forms from reflecting unsaved builder changes
- hide unknown fields from merge tag name search results
- stop the “Congratulations” popup from appearing after every builder action
- send opt-in telemetry only once
- fix the AM/PM indicator for long date/time formats
- prevent an unnecessary redirect with GET parameters on a second submission
- fix the broken Front End Posting documentation link
- support reCAPTCHA v3 when the same form is embedded multiple times on a page
- show copied fields in the merge tag list
- allow number fields to be pre-populated via query strings
- add the {other:formatted_date} merge tag to core
- rename the “Disable Browser Autocomplete” setting for clarity and note that browsers may still autofill
- reject list fields created without options through the abilities API
Ninja Forms 3.15.4
- Security Enhancements:
- strengthen output escaping in admin submission edit screen; responsibly reported by Venkateswara Reddy Challa
- protect CSV export against object injection in stored submission data
- enforce server-side option validation for list fields
- Bug Fixes:
- add CSS class setting to Hidden fields
- make Select Image field mobile responsive
- use relative paths for image URLs in Select Image field
- fix JavaScript error when deleting forms in dashboard
- resolve PHP warning for undefined reCAPTCHA settings key
- display form title correctly when heading level is unset
- return proper error when submission abilities reference nonexistent submission
- prevent fatal memory error on Get Help page with large debug logs
- silence PHP 8 warning from add-on update checker when store returns no record
Ninja Forms 3.15.3
- Security Enhancements:
- strengthen input validation for unserialize() operations
- Bug Fixes:
- preserve newsletter action list selection when provider connection is temporarily unavailable
- encode special characters correctly in CSV submission exports
- allow optional and hidden Date/Time fields to pass validation
- keep rich text editor scrollbar visible and functional in all views
Ninja Forms 3.15.2
- Security Enhancements:
- enforce granular two-tier permission model in Abilities API, responsibly reported by ChinhNguyen
- neutralize shortcode brackets in IP address and referer URL merge tags, responsibly reported by Jakub Herman
- validate repeater child field entries against server-side definitions
- apply context-correct output escaping in legacy submissions admin
- ensure shortcode neutralization callback is accessible for array inputs
- Bug Fixes:
- fix fatal error when Date/Time field is included in a CSV email attachment
- show correct Developer Mode status notice in form builder settings drawer
Ninja Forms 3.15.1
- Security Enhancements:
- strengthen input validation for list field option imports
- Bug Fixes:
- allow non-Latin characters and special symbols in list field option values
- preserve HTML formatting in checkbox and radio list option labels after editing
- capture time values correctly when Date/Time field is inside a Repeater
- preserve user-authored HTML in rich text editor without restructuring on toggle
- preserve HTML comments in Email Message field through Source/Visual toggles
- keep heading-formatted text inside table cells in rich text editor
- preserve nested div elements in HTML field editor
- prevent editor from marking field as changed on initial load
- display rich text editor toolbar icons for logged-out users
- prevent fatal error when marketing feed data is corrupted
- delay Date/Time required validation until user finishes entering time
- make Date/Time field Hour and Minute placeholder text translatable
- resolve critical error on non-English sites running PHP 8+
- fix TypeError when Custom Input Mask contains only numbers
- show correct AI provider status when Ollama connector is configured
Ninja Forms 3.15.0
- Enhancements:
- add AI Form Builder: generate forms from natural language prompts via the Abilities API
- Bug Fixes:
- fix typed signatures with periods appearing incomplete after switching fields
- prevent form from rendering multiple times when using “Append a Ninja Form” with other plugins
- allow terms list field to be set as required
Ninja Forms 3.14.12
- Bug Fixes:
- tables inserted via toolbar now have visible borders and padding
- preserve hand-coded table HTML in Email Message field
- resolve TypeError when nf-behavioral.js file is missing
- validation error on Time Only field now clears correctly
- required field asterisk displays correctly on multi-form pages
- form builder loads correctly when marketing filter is disabled
- repeatable fieldset data now displays in email summaries
- Security Enhancements:
- strengthen SQL query parameter handling
Ninja Forms 3.14.11
- Bug Fixes:
- fix CSV export column alignment for fields placed after repeatable fieldsets
- preserve ,
- , and
- <
- pre> tags in HTML field editor – clear validation error on Time Only field when user corrects input – fix ninja_forms_render_options filter breaking form validation
Ninja Forms 3.14.10
- Bug Fixes:
- fix anchor tag URLs breaking when merge tags are used as querystrings in HTML fields
- fix date field required validation not triggering for Date & Time mode
- fix {other:date} merge tag reporting dates in UTC instead of local timezone
- Enhancements:
- add banner-led partner cards to Partner Apps & Services tab
- Security Enhancements:
- protect against SQL injection in import settings key
- block unauthenticated shortcode execution; responsibly reported by Meher Sudhakar Abbireddi
Ninja Forms 3.14.9
- Bug Fixes:
- restore visibility of “Almost there…” heading in new-form drawer
- add descender allowance for typed signature fonts in PDF
- Security Enhancements:
- protect against unauthorized multisite data deletion
- protect against stored XSS in Repeatable Fieldset
- protect against field metadata override
- protect against calc value injection in list fields
- protect against unauthorized access to submissions via block insertion
Ninja Forms 3.14.8
- Bug Fixes:
- fix merge tag picker falsely triggering for calculation tags with slash in name
- fix phone field truncating last digit when browser autofill includes country code
- fix PHP warning for array offset on null in Model.php
- fix opinionated styles CSS not loading for logged-out users
- fix Gutenberg block editor iframe not loading (add API version 3)
- fix personal data export failing with PHP fatal error in UserDataRequests.php
- fix invisible reCAPTCHA v2 not working due to block scope bug
- fix form builder sidebar not closing when screen width expands
- fix {fields_table} incorrectly including unchecked checkbox fields
Ninja Forms 3.14.7
- Bug Fixes:
- fix date field “default to current date” displaying wrong date with conditional logic
- fix date/date-time field value corruption when editing via submissions backend
- fix checkbox fields not being redacted from record submissions
- fix time display on single submission page for date/time fields
- fix decimal precision loss in calculations
- Enhancements:
- increase default visible columns in legacy submissions from 5 to 10
- remove survey promo from admin
- Security Enhancements:
- protect against PHP object injection in form import
Ninja Forms 3.14.6
- Bug Fixes:
- fix PHP warnings when retriggering emails from submissions page
- fix bulk export returning no results when selecting a single day
Ninja Forms 3.14.5
- Bug Fixes:
- fix Rich Text Editor content displaying as raw HTML in submissions modal
- fix HTML entity decoding in Rich Text Editor fields
- fix Quill Rich Text Editor inline text alignment not being preserved
- fix unordered list content being stripped in Quill Rich Text Editor
- fix ordered list items getting unwanted markup injected in Quill Rich Text Editor
- limit telemetry to admin only
Ninja Forms 3.14.4
- Bug Fixes:
- fix repeater field data showing as “Array” in email CSV attachments
- fix mixed content blocking CSV downloads
- fix CSV export with multiple repeater fields
- fix repeater fieldset data misalignment in CSV exports
- fix phone numbers with plus sign getting apostrophe prefix in CSV
- fix decimal precision loss in number fields
- fix form title showing blank for accessibility compliance
- fix Quill Rich Text Editor placeholder initialization
- fix merge tags with spaces in names not being recognized
- fix PHP 8.4 nullable type deprecation warnings
Ninja Forms 3.14.3
- Bug Fixes:
- fix Quill.js Rich Text Editor table functionality not working properly
- fix HTML being sanitized/stripped when saving Quill.js RTE content
- fix Quill.js CSS conflicts with certain add-ons
- fix ESC key removing HTML content from success messages with calculations
- fix PHP warning for undefined array key “payment_total_type”
- fix radio and checkbox field alignment for RTL languages
- Enhancements:
- improve color contrast for form names on dashboard to meet WCAG 2.2 AA standards
- improve color contrast for “Add New” button on dashboard to meet WCAG AA standards
- add ARIA attributes, keyboard navigation, and focus styles to Quill.js RTE
Ninja Forms 3.14.2
- Bug Fixes:
- fix missing payment data and blank CSV issues in submission exports
- prevent premature deletion of submissions less than 24 hours old
- checkbox merge tags now display custom values instead of 1/0
- fix merge tag population when retriggering emails from Submissions page
- decode HTML entities for Rich Text Editor fields in CSV exports
- fix invalid date display in Dashboard for imported/duplicated forms
- fix calculation merge tags with extra text in hidden fields
- Security Enhancements:
- protect block token/refresh endpoint against unauthorized access
- add capability check to render_callback for blocks
Ninja Forms 3.14.1
- Bug Fixes:
- fix drawer close button not working after merge tag insertion
- fix token visibility issue in submissions table block
- remove tabindex from radio lists for accessibility compliance
- Enhancements:
- replace Summernote with Quill.js for Rich Text Editor
- improve star rating field accessibility sizing
- Security Enhancements:
- protect against XSS in Success Message action
- block merge tag injection in repeater field processing
- harden blocks code against unauthorized access
Ninja Forms 3.14.0
- Features:*
- Add support for Abilities API
- Bug Fixes: – Prevent loading CDN font per GDPR rules
Ninja Forms 3.13.4
- Bug Fixes: – Check visibility to prevent post spoofing
Ninja Forms 3.12.2.1
- Bug Fixes: – Limit submission token generation
Ninja Forms 3.11.1.1
- Bug Fixes: – Limit submission token generation
Ninja Forms 3.10.4.1
Ninja Forms 3.9.2.1
Ninja Forms 3.8.25.1
Ninja Forms 3.7.3.1
Ninja Forms 3.6.34.1
Ninja Forms 3.5.8.5
Ninja Forms 3.4.34.3
20259 releases
Ninja Forms 3.13.3
Ninja Forms 3.13.2
Ninja Forms 3.13.1
Ninja Forms 3.13.0
Ninja Forms 3.12.2
Ninja Forms 3.11.1
Ninja Forms 3.10.4
Ninja Forms 3.9.2
Ninja Forms 3.8.25
20241 release
Ninja Forms 3.7.3
20231 release
Ninja Forms 3.6.34
20226 releases
Ninja Forms 3.5.8.4
Ninja Forms 3.4.34.2
Ninja Forms 3.3.21.4
Ninja Forms 3.2.28
Ninja Forms 3.1.10
Ninja Forms 3.0.34.2
20162 releases
Ninja Forms 3.0
Ninja Forms 2.9.58
Questions about Ninja Forms’s releases
What is the latest version of Ninja Forms?
3.16.0, released on Nov 2, 2026 (6 days ago). It’s tested up to WordPress 7.1.4 and needs PHP 7.4 or later.
How often is Ninja Forms updated?
35 releases in the last year, about one every 10 days. Its first release on WordPress.org dates from August 2016.
Know when your rivals ship
Track your plugin and its rivals: TrackWP sees each new release in the nightly snapshot and alerts you, with what it did to their rank.
Start freeRelease dates come from the day each version’s folder was made in Ninja Forms’s WordPress.org SVN repository; the notes from its readme’s changelog, as its authors wrote it.