Core Forms 4.2.0-beta2
Pre-release. Builds on v4.2.0-beta.
What's new
Replaced the abstract circular "C" admin-menu icon and the generic clipboard block-inserter icon with pen-field from Font Awesome Pro 7.2 — a square frame containing an input row and a pen.
Single visual language across every touchpoint:
- WP admin sidebar menu
- Gutenberg block inserter
- In-editor Placeholder state (shown when no form is selected)
viewBox is normalised to a square 640×640 so the natural 640×512 glyph reads balanced at small render sizes. Menu fill stays black so WordPress's color-scheme stylesheet can tint it for active/hover states; block icons use currentColor for Gutenberg's hover/selected states.
Carried over from v4.2.0-beta
- WhatsApp Cloud API, Twilio WhatsApp, and Click-to-WhatsApp redirect actions
- CF7 → Core Forms migration tool (forms + messages, with preview)
- WhatsApp activity logging through Email Logs
- 14 security audit findings fixed (CSRF default-on, headless API key header-only, headless CORS allowlist, webhook SSRF guard, email header CRLF injection, custom CSS
</style>escape, polls/drafts hardening, file upload blocklist extended, honeypot returns opaque success, and more)
See v4.2.0-beta release notes for the full v4.2.0 changelog.