3.5.0
What’s New
REST API
- Full CRUD REST API for submissions at
cf/v1namespace - Collection endpoints with pagination, filtering by status/spam/date/search
- Status validation returns proper 400/404 errors
Submission Status Tracking
- New status field: new, read, replied, archived
- Auto-marks submissions as “read” when viewed
- Auto-marks as “replied” after sending a reply
- Bulk status actions in the submissions table
- Status badges in the global submissions view
Conditional Actions
- Run form actions only when field conditions are met
- Operators: equals, not equals, contains, does not contain, is empty, is not empty
- AND logic — all conditions must match for the action to fire
Spam Protection
- Akismet whitelist keywords — bypass spam checks for trusted submissions
- Configurable in Settings → Spam Protection
Quality of Life
- One-click form duplication from the forms list
- Status column included in CSV exports
- Polls database tables now created on activation/migration
- Consistent border-radius across admin UI
Security Fixes
- Escaped all HTML name attributes in condition row output (XSS)
- Added capability check to form duplication handler
- REST API validates status values on update