Added a tabbed settings UI (General, Rate Limits, Content Rules, Geo, Integrations, Notifications, Logs), replacing the single settings page.
Added disposable/throwaway email domain blocking (~300 built-in domains) as a free-tier check.
Added an advanced honeypot mode and a submission fingerprint check that flags submissions with no mouse/touch activity, typical of headless bots.
Auto-ban is now threshold-based (autoBanThreshold + autoBanWindowMinutes) instead of banning on the first flagged submission.
Premium features (DNSBL, Cloudflare Turnstile, hCaptcha, Akismet, CleanTalk, OOPSpam, custom rulesets, spam-wave notifications) are now gated per-feature by license.
Fixed submissions being spam-checked twice when Contact Form Extensions is active, which could double-count rate limits and spam-log entries.
Fixed spam-wave notifications firing on legitimate traffic spikes by basing the trigger on confirmed spam events instead of all submissions.
Added the missing Hungarian, Slovak, Czech, and German translations for several validation messages.