## Changelog

= 4.3.13 (1 October, 2026) =


* Security – Fixed an issue where a logged-in member could save a script through the checkout payment method and have it run when an admin opened the pending transactions list (reported by Wordfence, CVE-2026-96574).
* Fix – The AI form builder saves generated forms again: Edit with Builder no longer fails with an HTTP 400 error.
* Fix – Each prompt on the Create Form with AI screen now shows once instead of twice when WP User Frontend Pro is active.