CVE-2018-16308: Ninjaforms Ninja Forms

High severity, CVSS 8.6. EPSS: 1.8% chance of exploitation in the next 30 days.

The Ninja Forms plugin before 3.3.14.1 for WordPress allows CSV injection.

Affected products

• Ninjaforms Ninja Forms: before 3.3.14.1 (fixed in 3.3.14.1)

Published 2018-09-01. Last modified 2026-06-17.