Description The Ninja Forms plugin before 3.3.14.1 for WordPress allows CSV injection. References https://wordpress.org/plugins/ninja-forms/#developers 45234 exploit https://packetstormsecurity.com/files/148993/WordPress-Ninja-Forms-3.3.13-CSV-Injection.html