CVE · High

CVE-2018-16308 — Ninja Forms – The Contact Form Builder That Grows With You [ninja-forms] < 3.3.14

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2018-16308 Ninja Forms – The Contact Form Builder That Grows With You [ninja-forms] < 3.3.14 Improper Neutralization of Formula Elements in a CSV File High 8.6 < 3.3.14 3.3.14 2018-08-19

CVE-2018-16308

The Ninja Forms Contact Form plugin for WordPress contains a security flaw that allows an attacker to inject malicious data into the plugin's database by exploiting a vulnerability in its handling of CSV files.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.