SigmaForms Pro 1.4.11 Nulled

### Security

- Fixed a stored cross site scripting issue where signature values submitted to the public abandoned form endpoint were rendered unescaped in the admin submission and abandoned form screens
- Signature data URIs are now validated in full, instead of by prefix only, everywhere they are accepted or displayed
- Field values received by the public abandoned form tracking endpoint are sanitised on the way in
- Form, submission, abandoned form and AI generation REST routes now require the same capability as the admin screens, so submission data is no longer readable by lower roles. Sites that delegate form management can adjust this with the `sigmaforms_manage_forms_capability` filter
- The temporary upload capability used for anonymous form submissions is now granted only for the duration of the upload itself, after the nonce check, instead of for the whole request
- License data is unserialised with a class allow list, closing a PHP object injection path
- Exported CSV cells beginning with a formula character are escaped, so submission exports cannot execute in spreadsheet software
- Added a capability check to the conditional suggestions AJAX handler
- Added a payload size limit and a per client rate limit to the public mobile signature endpoints

### Fixed

- Plugin Check compliance: replaced `date()`, `strip_tags()` and `parse_url()` with `gmdate()`, `wp_strip_all_tags()` and `wp_parse_url()`, and documented the remaining sanitisation and template variable notices
- Declared compatibility with WordPress 7.1

Removed

- Promotion notice feature and all of its assets, AJAX handler, and dismissal logic
- Dashboard feed widget and its remote feed requests, transients, and styles

### Added

- New "Transition" form theme - a card driven quiz/funnel style with selectable image cards, animated states and a multi-step progress bar
- Field label images on every field type, with the image positioned above, below, left or right of the label text
- Label image sizing by percentage of the field (stays proportional on any screen) or by fixed pixels, plus an optional height and a Full Width option
- Drag to resize label images directly in the form preview - edge handles for width and height, corner handle for both, hold Shift to keep the aspect ratio
- Built in image cropper for label and option images, using the WordPress media cropper. Crops always start from the original upload and are saved as a new attachment, so the source file is never modified
- Per option images for Radio, Checkbox and Dropdown fields, with a shared position and size per field. Dropdowns with images render an image capable listbox while keeping the native select for validation and conditional logic
- "Show Country Flag Icons" toggle for Country and International Phone fields, to show or hide flag icons on the frontend
- Separate "Show Field Label Text" and "Show Field Label Image" toggles, so the text and the image can be hidden independently
- Automatic retention policy for form view logs - set how many days of view history to keep (default 60) from Settings > Advanced > Data Cleanup, with a live count of entries queued for deletion

### Improved

- View log cleanup runs in small batches inside a time budget, so clearing a large backlog never holds a long database lock or exceeds the PHP time limit

Added
- CC and BCC email fields for form submission notifications in global settings and per-form email overrides
- Support for multiple email addresses (comma-separated) in To, CC, and BCC fields

Fixed
- Fixed critical security vulnerability that allowed unauthenticated arbitrary file upload and remote code execution via public form file fields

Fixed

- White label issue for AppSumo License

### Updated

- Made compatible with WordPress version 7.0

### Improved

- Button icon alignment across admin screens

Fixed

- Admin notice styling and handling